Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
File: TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft (raw, json)
Hash identifier: nMLRQThH6v3/j6AOs0AD5tfKW3PoLkA9m+gj1rkdc4Y=
Subject key identifier: 2B:F3:82:57:1A:68:DE:59:9A:E4:48:AE:80:C1:BD:CA:C2:60:C1:DD
Authority key identifier: 4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3
Certificate issuer: /CN=4c8343edc843542f529fbc3e650cb6578c9206c3
Certificate serial: 019A0FA7F6E0F678315D53BF92DC7CD068BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
Manifest number: 0F47
Signing time: Thu 23 Oct 2025 06:00:56 +0000
Manifest this update: Thu 23 Oct 2025 06:00:56 +0000
Manifest next update: Fri 24 Oct 2025 06:00:56 +0000
Files and hashes: 1: TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl (hash: HS2+4iIRiX4MBMmMs4inOUt9dWwZerx60iAfnbkhZks=)
2: yO8yGDlp-pgPsfCtW6-Sdqgf6z8.roa (hash: SH391E3HYBBZSzKR5WZ5E1ALuIU3dss9i9wIgwa0Lyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:a7:f6:e0:f6:78:31:5d:53:bf:92:dc:7c:d0:68:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8343edc843542f529fbc3e650cb6578c9206c3
Validity
Not Before: Oct 23 06:00:56 2025 GMT
Not After : Oct 24 06:00:56 2025 GMT
Subject: CN=2bf382571a68de599ae448ae80c1bdcac260c1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:58:5c:8a:92:68:87:0a:b7:fb:d5:6c:89:
8b:65:3c:67:1f:81:6a:7f:2b:6f:2b:5c:0b:61:3d:
07:af:be:3a:fd:69:c0:87:7d:cc:7b:7d:9f:bb:5f:
ec:3c:de:ea:38:e3:4a:9a:fb:4f:99:71:e3:75:35:
4a:91:d8:19:d0:ac:66:1f:c1:18:ee:5f:3d:cd:cf:
9e:2e:f8:d2:ba:64:f7:65:11:65:78:87:4d:4d:77:
7f:9a:b4:57:a7:9f:46:53:59:40:d4:d1:bc:f3:5a:
42:45:6a:24:c2:8c:ae:b4:65:8f:62:50:1a:b7:3d:
d0:76:93:54:8b:02:ec:82:cc:01:da:60:f9:47:6f:
38:f9:d1:ee:3e:45:89:c8:c6:a9:55:74:c2:e7:59:
25:65:5d:d8:b2:87:af:fd:de:d9:a7:10:fe:b0:d8:
66:66:f6:20:63:4c:89:86:42:33:ac:0d:63:b4:eb:
de:70:5b:e5:8f:c6:af:7f:8c:af:f7:53:ab:23:ea:
be:06:83:91:a5:90:10:89:13:50:8c:92:5d:77:ed:
c8:ab:6d:a2:62:e2:6d:9b:63:4a:30:d1:4e:be:2d:
e8:1e:23:6a:cf:82:6d:a9:a1:ca:1c:3d:99:08:23:
f9:61:c9:51:38:58:26:9c:38:dd:eb:92:1e:a7:df:
fd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F3:82:57:1A:68:DE:59:9A:E4:48:AE:80:C1:BD:CA:C2:60:C1:DD
X509v3 Authority Key Identifier:
keyid:4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:61:80:87:17:62:ad:b3:ef:7b:c5:8b:c3:11:48:46:4a:98:
bd:21:f4:74:b8:f1:54:cc:ab:f4:61:9b:16:d5:f1:b0:28:1b:
c2:b3:a1:ab:c0:b8:29:61:ca:bb:a7:cf:50:20:b8:2a:8e:cb:
46:30:e0:b0:cd:c8:06:ae:5c:7a:4f:8a:95:33:78:45:ed:3b:
37:95:4d:e4:a2:ac:11:36:e0:e2:c3:94:93:53:0e:43:1d:e5:
f9:7c:94:67:d1:ca:f3:c7:27:77:1d:81:97:34:d9:10:28:43:
74:6d:5b:89:75:f1:01:34:c3:80:1a:23:45:8a:d0:99:25:c0:
bf:48:0e:d1:9d:d9:49:86:40:d9:18:ba:d3:3c:37:6e:f5:b8:
db:02:91:da:54:39:fd:64:6e:4c:9c:c0:0c:ae:c1:7c:be:19:
6e:2e:01:08:36:01:03:5c:32:f5:d2:58:8f:88:14:ae:35:37:
2f:40:4b:44:00:c4:74:a8:52:4c:1e:27:78:a8:7f:58:2f:2e:
08:f3:e7:01:13:fa:0e:6e:f7:37:a5:df:df:f6:dc:d1:1d:4d:
2d:01:45:17:e1:24:3e:3b:43:24:7a:3c:cc:68:37:44:21:b3:
d0:33:a4:dd:1d:97:19:a1:3a:60:b4:6f:d9:9d:45:3a:65:bc:
4f:c3:04:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 12:10:38 2025 by rpki-client