Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
File: TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft (raw, json)
Hash identifier: OdinFsWELhbDq85E7CEUDRA5Kzbx+R1fFl0sTPa6HBw=
Subject key identifier: E4:47:C5:67:A6:C0:A9:0D:1C:51:BD:0D:99:BD:1E:86:56:41:88:D9
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial: 019A1E3F1FBBD935240563676D35F5B740C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
Manifest number: 16F8
Signing time: Sun 26 Oct 2025 02:00:44 +0000
Manifest this update: Sun 26 Oct 2025 02:00:44 +0000
Manifest next update: Mon 27 Oct 2025 02:00:44 +0000
Files and hashes: 1: 3hSBBEtakLk1jIWXi3hchM-uTBM.roa (hash: NhWJmyJNB4sc9UZdlJ419SqvZ3IVwqNXUyuWTH42r1U=)
2: TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl (hash: D98lOrH3RLS//WFW4M+ZBylWJ4JsAiEuii4bzevo7Bg=)
3: fziBQYI5VQChSmnvHhKXUMLYNKw.roa (hash: NEQyAGhhDS5WgZXodzUc9okNLj3B3fbMtY+K4TNZzLs=)
4: n7v5YOrSFGoXqVJ0PeytCrFgOLg.roa (hash: +oN44CijE7GRp64D6SkmoV+lAs+Tba+IrPKezC+0CLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3f:1f:bb:d9:35:24:05:63:67:6d:35:f5:b7:40:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
Validity
Not Before: Oct 26 02:00:44 2025 GMT
Not After : Oct 27 02:00:44 2025 GMT
Subject: CN=e447c567a6c0a90d1c51bd0d99bd1e86564188d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:58:97:02:2c:f7:21:68:99:59:31:18:34:
ae:49:cb:d4:63:ea:01:1b:b4:16:9c:2a:7b:d4:4a:
c6:e5:72:46:c1:76:78:ad:2f:81:d4:46:30:55:69:
7e:8c:50:f8:d0:9e:07:3b:f4:ef:ad:69:7d:da:66:
da:88:80:24:2b:0f:0e:34:b8:ee:aa:bb:bd:7d:1c:
e4:4a:6a:93:a0:e2:76:6d:8b:6c:9c:65:2c:da:07:
0b:77:4b:f1:af:cc:e6:9e:a3:eb:be:67:2b:be:3f:
97:78:70:27:52:0a:5b:0d:52:5d:6a:f0:90:02:7b:
3e:ec:e7:83:7a:5e:8e:40:a0:e3:1c:c8:a1:35:1c:
c6:94:29:41:0f:dd:f0:03:33:f8:27:f1:33:11:f2:
81:99:96:f7:59:95:ec:1e:e8:34:6e:50:d2:c9:88:
3e:38:83:f4:a4:70:e5:e3:ba:cd:98:1f:cd:d1:de:
83:8c:85:8c:7a:64:15:22:76:f6:1f:75:b8:fa:da:
1b:7a:a4:59:ef:cd:42:0d:2a:64:7a:48:bb:be:69:
91:8d:dc:4d:2b:e3:4a:d5:16:83:32:af:80:33:13:
2e:28:dd:bd:a7:23:8b:55:29:4c:d9:a5:0f:39:9d:
21:a9:c9:77:38:c5:db:33:a6:2f:69:c6:6a:2b:7a:
39:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:47:C5:67:A6:C0:A9:0D:1C:51:BD:0D:99:BD:1E:86:56:41:88:D9
X509v3 Authority Key Identifier:
keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ef:e1:95:61:02:3b:0b:64:b6:42:88:aa:33:34:53:56:4c:
02:05:12:43:a9:eb:c5:e4:5f:4e:51:9b:7f:90:dd:4d:a8:56:
70:b4:e3:84:42:ca:3c:77:38:5e:fb:ff:c8:b0:2d:db:88:f2:
63:d5:c1:b9:40:88:49:7e:1e:f8:21:ce:04:a0:2d:98:33:73:
80:30:c3:35:9b:0d:18:c1:04:b4:2a:a4:b4:20:4d:23:78:93:
10:89:f7:3a:8e:33:ab:e9:44:fc:44:42:fc:f7:bf:df:d7:21:
04:a7:f5:54:16:aa:d0:6e:b8:73:4d:07:9f:da:de:10:4f:ac:
36:f5:9e:89:ab:e5:bf:52:46:79:95:03:26:6c:24:93:b1:b4:
2a:bb:0c:ad:b9:8c:21:e9:4a:55:a7:50:a7:c9:39:ae:66:ac:
6b:68:72:88:c9:ee:3d:e4:ec:69:61:e4:32:d0:ea:03:46:a8:
06:38:7e:9e:57:ef:5e:01:88:fa:a8:8d:7c:6f:cc:72:b5:1c:
9c:64:30:60:3d:6d:2b:a6:37:06:19:2a:f3:96:e0:8b:b6:d6:
6b:29:8f:a1:1e:fa:5f:2b:d2:a2:bb:34:34:8d:c3:45:28:c8:
95:f0:7c:59:bd:96:5d:9b:cf:b0:81:a1:78:91:bf:be:55:d0:
15:2d:76:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:58:35 2025 by rpki-client