Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
File: TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft (raw, json)
Hash identifier: brM7uPsjiVWvrn6DdN8dMEzCLVM7ZxgzrEjfXKRIXqw=
Subject key identifier: 92:F7:5C:DD:89:B5:45:2B:91:0C:BF:DE:15:AE:89:89:6F:58:01:00
Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1
Certificate issuer: /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
Certificate serial: 019A2478667A602BBBD0EE2F30D19EB5E3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
Manifest number: 03DA
Signing time: Mon 27 Oct 2025 07:01:01 +0000
Manifest this update: Mon 27 Oct 2025 07:01:01 +0000
Manifest next update: Tue 28 Oct 2025 07:01:01 +0000
Files and hashes: 1: TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl (hash: ij+6yL9V2gf5gbmxxnb3j6byiSceMwqI5r8kTWBKBOM=)
2: _l-XctLDCPzRb-pMlqXmGyqDvHM.roa (hash: myqB80koPH8JwlE9qSMpb7bOcTN1/cJ21+MIuMT+GyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:66:7a:60:2b:bb:d0:ee:2f:30:d1:9e:b5:e3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
Validity
Not Before: Oct 27 07:01:01 2025 GMT
Not After : Oct 28 07:01:01 2025 GMT
Subject: CN=92f75cdd89b5452b910cbfde15ae89896f580100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:13:b4:3c:62:7d:8d:89:1e:8f:0e:29:12:
79:64:29:0b:f9:5b:1d:99:ff:9a:ab:5c:25:83:fc:
ec:39:f3:3a:b2:ef:04:03:07:0c:5a:11:28:f4:96:
e7:31:c7:4b:ea:d6:7a:3f:1c:6f:dd:78:f2:19:12:
e3:fd:de:5b:23:59:a2:13:6d:1a:c7:b1:cc:28:e4:
42:15:37:b9:a1:6e:f4:76:fa:1a:8a:60:a1:f9:9a:
e0:ed:35:82:66:40:91:ea:9c:11:dc:67:b0:2c:f4:
bb:16:c4:15:ba:0a:50:41:8f:ae:70:ef:33:86:89:
c1:40:a8:8e:c8:06:83:f7:41:28:a4:23:a9:05:df:
85:a8:40:92:a6:8f:b0:57:df:40:73:e5:e7:a6:59:
75:96:7d:7e:3c:29:3e:e6:cd:e0:d1:a5:1c:74:71:
da:12:75:93:bb:95:9c:6b:e5:96:a3:f5:8d:75:d5:
99:b8:d4:97:93:9e:a6:b7:12:2d:13:b3:5e:a8:7e:
3e:e5:af:40:2a:37:85:ce:b9:2f:4b:ef:9d:5e:e7:
1e:0b:a2:51:65:a2:4d:06:b8:fc:ab:fc:b8:72:9e:
d8:06:4b:cd:be:b4:ec:71:a4:52:15:e4:cf:fb:37:
02:f4:ca:ca:fb:2e:3d:88:48:cf:7e:ef:f2:2f:73:
89:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F7:5C:DD:89:B5:45:2B:91:0C:BF:DE:15:AE:89:89:6F:58:01:00
X509v3 Authority Key Identifier:
keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f9:66:6a:ce:86:1e:9a:a9:dd:bf:7f:0f:c8:ac:73:73:a9:
02:5d:98:36:90:be:d0:10:5f:53:60:ab:47:cd:5c:9e:b8:a2:
f4:b8:03:95:d4:67:b3:88:46:03:22:93:55:66:9c:7b:06:6a:
16:96:65:5a:02:7f:fd:70:40:76:78:be:16:7a:d7:92:df:5d:
3f:6b:48:06:1a:bd:08:d8:2c:1d:9d:ef:8d:cd:17:47:da:e0:
5a:31:8c:9e:25:a7:00:74:43:0f:0d:d5:51:59:ad:c5:48:64:
33:9d:b8:18:fc:17:24:8a:be:15:03:6a:ff:92:bc:4b:98:b4:
d3:84:bc:7a:eb:7d:f2:96:f3:2f:28:45:cf:ad:6a:59:b2:29:
2a:61:1b:8e:ef:da:d6:07:bb:b3:56:c9:1e:9c:47:69:04:67:
9f:b6:82:56:e7:cf:ba:11:eb:1a:fe:ad:4e:59:12:60:da:32:
ff:c4:b4:54:36:5c:51:54:cd:21:06:f7:1b:f7:d7:c1:c0:8a:
3f:46:e3:2c:f4:5f:2d:b0:a3:01:b6:48:30:4f:00:f8:7a:82:
e9:b4:db:c1:8f:db:7f:fb:2b:66:a0:10:9e:3f:23:c8:20:97:
0f:ff:81:e1:ac:fb:20:6c:a6:73:d4:ae:78:f7:8c:54:2c:81:
05:36:5c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:36 2025 by rpki-client