Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
File: TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json)
Hash identifier: /mZWBe67LTl38zu65bctU8vD1HCFaPs620cO0RtAH5M=
Subject key identifier: 10:94:AA:87:75:3B:5F:E0:C5:66:79:71:F1:19:46:CD:EA:CF:78:B8
Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
Certificate issuer: /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Certificate serial: 01992C6B8C69C4A3B49EDCF444094AA84EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
Manifest number: 160A
Signing time: Tue 09 Sep 2025 03:01:09 +0000
Manifest this update: Tue 09 Sep 2025 03:01:09 +0000
Manifest next update: Wed 10 Sep 2025 03:01:09 +0000
Files and hashes: 1: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: zVYEuD8wa/hqRXOzfOluHhWFVhky4BC4Ea6SKZBBHOI=)
2: dxfaqcbOBYRpYzoiD3a-nfzNgyI.roa (hash: 9S4UtPoorxm2Y5jeo5Ht7EgjOkb+pCS05uOlyENLKPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:6b:8c:69:c4:a3:b4:9e:dc:f4:44:09:4a:a8:4e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Validity
Not Before: Sep 9 03:01:09 2025 GMT
Not After : Sep 10 03:01:09 2025 GMT
Subject: CN=1094aa87753b5fe0c5667971f11946cdeacf78b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:5e:e1:38:21:e4:04:39:97:24:67:3d:17:
01:79:ff:77:5f:61:b4:bb:ea:92:45:cc:71:0b:09:
1e:74:ec:19:1a:96:d0:60:22:b4:5b:cd:a2:5a:36:
2a:2c:6d:d8:3e:82:05:9c:2c:5a:12:6c:f6:79:40:
9d:b0:ef:23:d5:46:8c:3f:ba:31:de:96:bd:2a:30:
9d:ba:b6:ab:ea:9b:4d:25:cf:89:b2:d1:26:f4:5c:
3f:31:18:50:12:c5:e0:e0:83:05:7d:4a:1b:b6:48:
33:34:07:62:70:b7:53:e0:e8:59:ed:d2:a1:e0:15:
34:41:e0:7c:c6:d4:cb:29:fb:73:d3:5c:0c:bf:9e:
37:08:f9:6a:ca:78:f4:27:92:55:c3:87:54:b5:27:
d3:26:23:8f:be:5b:92:65:3f:69:2a:40:34:77:80:
82:1a:44:4a:e0:77:26:f6:8b:ae:0a:9c:94:57:2c:
9a:14:46:02:30:57:c7:67:35:eb:18:57:7e:7a:92:
4d:59:fc:59:0e:33:a3:21:c2:87:b0:d6:c1:9c:51:
94:24:cf:44:64:0f:50:c3:09:71:9c:4c:56:0f:4d:
f4:b6:2f:3d:49:61:02:7d:b3:76:3f:53:6b:58:f2:
92:70:52:5c:49:d5:e1:29:66:20:ef:b0:16:3c:69:
ee:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:94:AA:87:75:3B:5F:E0:C5:66:79:71:F1:19:46:CD:EA:CF:78:B8
X509v3 Authority Key Identifier:
keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:57:4b:ad:25:15:39:1f:c9:4f:b0:1f:7c:9a:3f:9e:bd:a9:
2d:d6:4e:02:f5:4e:42:2f:d4:f8:55:e4:fd:45:09:72:bc:d8:
68:7f:ac:f9:e4:53:d1:d6:59:c1:6c:af:20:10:0d:49:2a:b8:
73:b2:b3:89:cd:88:4f:28:0d:67:ca:47:51:4b:89:cb:12:fe:
33:61:6f:21:ea:6c:57:92:b0:7b:56:4a:ce:cc:bd:4d:11:ef:
66:03:3b:56:90:10:fd:05:f8:9f:41:a4:29:b4:c5:a7:79:83:
ac:e8:df:d3:94:d8:32:e7:8b:a5:86:f9:fe:41:1d:30:e5:d5:
02:0a:83:fd:ce:30:06:5d:38:1b:b9:33:74:f6:42:f6:7b:1f:
e7:b9:97:b9:d7:fc:84:03:db:dd:99:52:7d:ab:16:7d:a9:79:
5a:57:0e:23:1c:b6:a3:45:92:c5:95:c5:14:0e:f0:c2:85:fb:
61:26:67:5f:70:cb:b7:b3:ca:86:11:12:0a:c8:5a:71:d7:ba:
89:87:7c:67:a9:4a:c7:fa:db:94:db:97:9e:2d:e2:67:17:fd:
5e:ae:8f:09:83:99:58:41:41:e4:85:61:f0:be:33:f2:16:2c:
b8:fe:b1:81:0f:5a:c9:5d:9e:fa:a0:e5:f2:49:04:a7:cb:19:
78:b9:fe:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 04:14:55 2025 by rpki-client