Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File: TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier: 8MLKf7dtiHMzdKcM4fv1okKbXkmU61BuCbnWHWE0edQ=
Subject key identifier: 8D:66:83:AE:4A:19:24:95:E8:B9:6B:BB:E4:DD:0A:F2:07:70:0A:BE
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 019A251C5F6B5028DE133955CB08D7C2590F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 10:00:07 +0000
Manifest this update: Mon 27 Oct 2025 10:00:07 +0000
Manifest next update: Tue 28 Oct 2025 10:00:07 +0000
Files and hashes: 1: LHdFFtkhND-G29Bb5TNwX3ZX6HI.roa (hash: 5JCuzcczihsYGo60q4ytQ60HO2vUMA1Wb8XrWH6WiqE=)
2: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: 6NZA/DB0z9zDDgJyl63IC4H3NKMGwgZ2A9+3DmDtcUY=)
3: VYrJyKdSTfJ9aOSPJMCRhItn6O0.roa (hash: EVl6QPoQm24Wnsg0W0HBnWjfCtTCiCv6xfCekdHCwzI=)
4: XGm_swis7gPqLxLCw4_WpqKe8Ac.roa (hash: HuoRGpzlvzmJtj6Rn/56OaSHzb/3wfWOGTlv62srzB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 10:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:5f:6b:50:28:de:13:39:55:cb:08:d7:c2:59:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Oct 27 10:00:07 2025 GMT
Not After : Oct 28 10:00:07 2025 GMT
Subject: CN=8d6683ae4a192495e8b96bbbe4dd0af207700abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:20:3d:2d:4a:3e:e8:30:25:6b:30:b3:ea:e7:
51:c0:46:a7:19:65:86:7b:4b:62:e3:77:f8:2d:f4:
03:15:15:bc:a6:54:21:c6:10:50:5b:b2:93:cd:e9:
cd:10:77:89:1a:90:dc:64:50:bb:26:0e:2c:c3:bb:
19:bf:3f:c4:c3:e9:0a:4a:9b:53:9f:5e:e1:0e:43:
5a:b8:ae:31:f5:c4:2d:d8:73:9f:16:aa:15:05:75:
ce:0e:7c:ba:29:0e:21:c8:ac:d4:3b:05:df:e2:e7:
85:53:7e:8d:25:6b:58:ea:d9:b5:18:99:ad:49:6d:
6c:80:63:58:3c:1d:33:bf:be:46:e6:e2:b3:74:e3:
f8:23:8c:b8:92:d2:6e:7f:fa:4c:9e:7b:43:0b:79:
7c:46:20:57:0c:d2:db:df:f8:bc:8e:0b:f3:5f:17:
5e:9a:3c:61:c5:f4:7a:64:b4:ae:af:e8:d5:6c:5a:
98:b6:ff:76:3d:c3:4d:d1:76:79:9a:d8:2c:02:3a:
38:4b:d1:7c:8f:b5:57:c1:78:7c:bf:06:f4:10:cb:
12:47:e2:d6:76:c7:46:7a:0e:e3:40:c1:3e:40:0d:
f9:35:99:45:1e:70:3f:00:d8:c8:1b:eb:0b:3d:ee:
a4:ca:15:af:f6:b8:97:b2:ec:0b:76:1c:7d:24:37:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:66:83:AE:4A:19:24:95:E8:B9:6B:BB:E4:DD:0A:F2:07:70:0A:BE
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:03:a5:d9:dd:8d:d5:df:4f:48:30:8e:33:32:49:f8:33:6b:
25:ea:ad:35:b6:22:2d:c1:36:b9:50:4a:f4:43:a7:75:49:fb:
e4:31:45:af:20:64:25:06:c3:a4:18:a8:fd:f0:6c:b5:ed:34:
17:8e:64:62:a0:97:1b:5f:be:61:3a:34:4f:b9:0b:2a:95:07:
b1:37:ba:e6:5e:ab:c6:89:cc:46:2a:6d:74:ad:5a:be:53:23:
bb:5d:b8:43:11:32:c7:37:09:ea:ae:a1:2e:c5:a1:6d:6e:6d:
09:18:9d:06:0c:6e:f2:1a:44:a1:8c:04:5f:f1:18:f0:e2:5e:
50:48:f6:5d:cb:c6:4e:89:73:2d:1e:52:78:ec:01:6f:93:89:
1a:28:93:56:1c:89:5e:80:d4:5c:6a:20:ce:e5:6c:e0:a7:bc:
79:62:69:4d:c5:f8:83:80:06:c9:82:46:ab:6a:4c:a3:c8:f8:
99:bf:a1:40:97:11:82:7e:24:15:f2:3a:35:84:29:30:be:49:
27:ea:0e:6d:35:ea:4f:a0:58:73:f2:0a:d7:95:d2:92:a1:cb:
9e:3b:8f:34:a0:08:f9:6b:74:8e:c7:d3:ed:c8:8b:8e:11:d0:
a8:40:fe:fb:77:0f:72:b2:0e:c5:06:a1:e4:69:af:cf:e8:b3:
b3:55:27:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:40:27 2025 by rpki-client