Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
File: TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json)
Hash identifier: 6JZ9Uy/Sc14eVS+vq3/aZcZ7vp04FOae0ErFFbNEyuM=
Subject key identifier: 4D:07:81:FC:15:AE:9C:5E:CB:2C:1F:6C:39:49:7B:97:04:31:53:1B
Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
Certificate issuer: /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Certificate serial: 019A21AD8C9419596F62903F507FED0F0294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
Manifest number: 1689
Signing time: Sun 26 Oct 2025 18:00:13 +0000
Manifest this update: Sun 26 Oct 2025 18:00:13 +0000
Manifest next update: Mon 27 Oct 2025 18:00:13 +0000
Files and hashes: 1: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: KbOreFnZeDHedX9raYcrtG8cRMk94o8NLkKCWJ8Z1kY=)
2: dxfaqcbOBYRpYzoiD3a-nfzNgyI.roa (hash: 9S4UtPoorxm2Y5jeo5Ht7EgjOkb+pCS05uOlyENLKPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:8c:94:19:59:6f:62:90:3f:50:7f:ed:0f:02:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Validity
Not Before: Oct 26 18:00:13 2025 GMT
Not After : Oct 27 18:00:13 2025 GMT
Subject: CN=4d0781fc15ae9c5ecb2c1f6c39497b970431531b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7d:6c:4e:ca:cd:56:3f:77:d6:ef:39:ea:c5:
05:ff:84:2e:80:3d:4d:bb:e3:c2:b2:21:17:a3:2e:
c8:3d:7b:e3:c3:9e:ae:27:15:6d:e4:55:ac:41:25:
b2:08:d4:c8:18:7a:c6:0e:e0:ea:37:2b:eb:44:5b:
d7:c2:cf:be:92:ce:48:14:86:29:0b:b6:f6:e1:6c:
a3:aa:f5:c6:bf:74:37:82:74:d4:bd:6e:18:ab:3b:
8f:ac:fe:26:d4:0c:67:ac:60:06:4b:a4:b5:cc:e6:
73:41:71:f6:24:6f:4d:83:9c:38:ef:8f:58:18:2b:
5f:88:07:51:bf:ef:67:49:0a:2b:97:ce:5f:46:81:
77:77:b4:f2:e2:1b:f3:50:1d:65:45:01:67:4f:e6:
87:ec:73:b4:83:7e:ff:b0:3e:41:97:9c:c3:90:ac:
40:e0:98:74:ff:3c:32:42:13:6f:f4:2c:0c:af:2b:
8e:8d:ce:e8:95:2f:4a:b2:c5:03:63:30:94:d7:76:
b5:26:55:9c:f7:3d:9e:e7:51:64:40:86:a0:93:fc:
4d:9f:c9:bf:51:cb:1a:47:d0:43:5e:b4:e3:b4:ae:
47:f6:8b:c3:40:79:96:c8:b9:b5:29:87:a8:21:c9:
0a:cd:95:dd:f5:54:76:6a:e3:33:83:54:48:e6:47:
48:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:07:81:FC:15:AE:9C:5E:CB:2C:1F:6C:39:49:7B:97:04:31:53:1B
X509v3 Authority Key Identifier:
keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c3:65:91:bb:ae:86:9f:06:79:8a:a9:eb:84:0e:c5:4b:07:
77:df:05:4f:ff:f3:0d:7d:63:0d:c8:e8:8f:1f:15:a7:89:25:
9f:69:71:0d:a7:99:75:8d:7c:64:c7:92:10:c8:31:39:13:05:
4a:59:66:f8:bf:54:58:0a:42:c0:e2:e2:fb:44:b5:f8:85:dd:
39:80:08:ce:a3:ea:43:c4:6a:e5:6d:85:23:e8:85:8c:0d:cf:
46:44:40:3a:73:c8:13:2d:aa:e8:c8:22:5f:86:0d:6d:cb:d3:
b7:3a:bc:bb:4e:7c:e2:84:8e:db:db:b8:1d:dd:47:15:ba:6d:
cd:fe:93:b0:14:84:67:f0:fc:f6:ab:fc:16:5d:2d:56:9f:75:
dd:cd:6d:2d:0b:85:34:d9:44:6b:fc:e0:6c:57:7d:c2:cf:e5:
f9:e2:da:af:8b:ba:a7:35:9f:99:a7:b7:bb:53:f4:a7:ee:95:
f2:de:2b:da:1b:6b:7d:94:0a:92:37:c4:a8:39:c9:51:e6:49:
c5:cc:d0:07:df:bd:54:a7:42:94:90:e8:dd:df:3f:7c:6d:66:
19:09:ab:54:da:5e:a0:ac:e6:28:5f:d5:cc:8f:c4:71:6e:0f:
48:29:b3:6d:34:6f:4a:94:fb:09:68:5d:0c:ca:9d:1f:58:db:
38:67:98:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:49:53 2025 by rpki-client