Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
File: TNR7i4qp-8zP89UHgU_HRGSiq_A.mft (raw, json)
Hash identifier: ehFlCNXHyI44BkawA1PSuEmeLY3r3mMH/7b1BP6ZFbM=
Subject key identifier: 17:FC:B5:B3:5C:8B:C3:68:F4:98:5D:69:3C:09:34:8E:A6:84:4B:64
Authority key identifier: 4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
Certificate issuer: /CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Certificate serial: 019A22F78FBAC46DE22FB30CA9407884AA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
Manifest number: 0DEB
Signing time: Mon 27 Oct 2025 00:00:40 +0000
Manifest this update: Mon 27 Oct 2025 00:00:40 +0000
Manifest next update: Tue 28 Oct 2025 00:00:40 +0000
Files and hashes: 1: TNR7i4qp-8zP89UHgU_HRGSiq_A.crl (hash: K1Uflu5b92Wkg/P3HcQRWY6gTTDPKX8FiXKHc8QvUFE=)
2: zYBlb8-4iJi2Xsk5poztWDw6ukY.roa (hash: veXHQ0WmE+2KQkfYtO+EXvFrciAIGT+yWdclt50BTQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:8f:ba:c4:6d:e2:2f:b3:0c:a9:40:78:84:aa:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Validity
Not Before: Oct 27 00:00:40 2025 GMT
Not After : Oct 28 00:00:40 2025 GMT
Subject: CN=17fcb5b35c8bc368f4985d693c09348ea6844b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f7:55:47:95:14:fd:8c:7f:57:60:e2:1e:78:
40:a0:e6:04:f5:30:ba:2b:c6:1f:1d:c4:a7:f8:b3:
c6:dc:fc:e1:c4:00:c3:42:4b:62:eb:8a:a6:5b:0e:
05:44:7d:73:80:c0:3b:1e:a3:07:a9:60:e2:b0:e9:
96:81:5a:0d:2d:e3:bd:b4:60:00:fc:4d:a8:e8:4f:
ff:75:1c:9d:3f:5e:f4:7f:55:19:46:8a:7a:96:2a:
f0:53:d4:af:9f:d2:2d:d2:9d:54:28:0f:6e:59:6f:
b1:e5:3f:c5:5d:08:96:06:58:f5:47:0c:a6:63:f2:
45:31:dd:d9:11:f0:b4:61:7b:5b:ee:bb:15:af:c9:
d2:43:13:2f:f7:3a:2f:35:5a:21:6b:65:a1:be:b9:
50:24:4b:93:da:b4:47:21:f6:2d:a5:42:0f:9d:4b:
41:43:df:72:56:90:48:38:8a:61:07:b8:8f:44:72:
66:cc:03:8f:de:fd:12:59:a5:f4:49:be:e1:21:82:
71:ff:8b:67:84:4c:e9:fa:33:6d:48:3d:d5:0f:68:
de:8a:ca:5c:28:a3:e4:e9:22:2d:9e:05:c2:af:41:
9e:e9:bc:00:88:75:7e:a9:f0:71:f7:cd:d3:be:4c:
ea:ad:06:14:e7:5f:5e:71:19:a6:ee:67:3e:b2:b0:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FC:B5:B3:5C:8B:C3:68:F4:98:5D:69:3C:09:34:8E:A6:84:4B:64
X509v3 Authority Key Identifier:
keyid:4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8e:15:c0:6a:a6:e7:15:d7:ec:97:3b:fe:3a:80:9c:5b:02:
7f:36:d7:00:9f:87:77:b8:e9:90:c5:e7:04:49:d9:ff:0f:d0:
b1:67:f7:99:52:39:bc:06:87:70:e0:51:d3:2e:ce:9f:31:a7:
cb:38:ec:f3:8d:25:46:55:21:45:2c:1a:82:b2:0f:22:83:d2:
e3:78:d8:57:54:ec:0b:20:ab:2c:41:4e:aa:f6:00:fc:43:bc:
b5:80:25:de:c6:67:ff:03:66:e7:63:29:ef:2a:b9:4d:66:a8:
57:8d:9e:80:26:7b:73:0e:8e:7b:a4:45:7f:31:0d:8f:e8:58:
67:c8:26:f9:11:4a:29:32:03:3b:71:c4:64:bd:11:20:1e:c1:
85:e6:1a:70:58:31:e8:26:bd:28:60:b7:85:40:8a:da:e1:e6:
0e:e8:47:6c:33:9f:84:6f:94:71:63:14:b7:89:b9:67:0c:d0:
03:b6:09:30:48:32:0c:91:27:b8:10:63:ab:92:cb:ca:94:96:
4c:a6:1e:2b:60:23:95:81:4a:0e:1b:39:12:ae:ea:c7:98:a8:
9c:c8:b2:ee:a4:0e:77:0f:46:b4:30:5f:7c:6f:97:ed:58:34:
07:f1:08:11:f5:25:c6:9f:1b:20:9e:92:09:68:13:6e:33:32:
57:dc:b5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:39 2025 by rpki-client