Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
File: TfkmWGAQlO1kmFxkxpUr40FjAc4.mft (raw, json)
Hash identifier: 6mauQa8C9F6Ne7nFPuA9jxKjaX9LTdZz1bg5XdAmIwY=
Subject key identifier: 24:72:1A:CA:60:CE:63:DE:DB:FB:E6:BB:47:6B:DD:B5:52:F9:0B:8F
Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
Certificate issuer: /CN=4df92658601094ed64985c64c6952be3416301ce
Certificate serial: 019A71B81DB788143AB521F0E72B5CD09EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
Manifest number: 098A
Signing time: Tue 11 Nov 2025 07:01:22 +0000
Manifest this update: Tue 11 Nov 2025 07:01:22 +0000
Manifest next update: Wed 12 Nov 2025 07:01:22 +0000
Files and hashes: 1: 42VDtF9LMj3RUZlBTr5Tpxb7XhY.roa (hash: 06Fp4iuAbTOsazThfCr6hEmyN81BPyfi3nXeyKKT6d0=)
2: TfkmWGAQlO1kmFxkxpUr40FjAc4.crl (hash: qeKonhy6hA7gbJkocVKoEgFszAtkAFh4IEgySSHLfyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1d:b7:88:14:3a:b5:21:f0:e7:2b:5c:d0:9e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df92658601094ed64985c64c6952be3416301ce
Validity
Not Before: Nov 11 07:01:22 2025 GMT
Not After : Nov 12 07:01:22 2025 GMT
Subject: CN=24721aca60ce63dedbfbe6bb476bddb552f90b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d7:26:d4:7e:7f:7f:da:fd:7e:4a:df:16:76:
0e:34:ad:d8:4d:ac:cc:53:70:ca:e0:3c:2f:bb:77:
f8:0f:57:45:79:f1:56:59:44:d8:60:da:d5:09:db:
3f:0c:e5:ab:3e:d5:d0:ef:74:8e:8d:3e:25:c3:3c:
73:1c:81:d9:ed:de:70:8d:1d:71:d5:1b:8f:7f:f9:
c4:7b:3f:56:9e:75:e6:2f:20:e8:d6:1f:7f:71:d5:
3e:70:f6:79:ad:39:df:37:23:a8:df:6c:dd:2c:40:
1b:17:68:f8:92:65:ca:6f:1a:34:92:fb:ad:02:10:
b3:36:03:a1:91:4e:0e:cb:2e:0a:73:b2:d9:c7:9e:
0d:a6:2b:3d:62:ca:bb:83:2c:4c:16:85:18:fe:f8:
72:3d:e4:80:04:55:70:2f:42:07:3a:86:df:01:04:
e4:39:27:6c:f9:8a:c8:cf:2c:d7:66:4c:39:8f:2f:
28:1c:30:d5:85:3f:60:66:2d:44:77:56:89:a4:44:
cb:1e:6d:19:a2:c4:00:13:84:1a:ee:49:c0:58:f5:
16:a8:60:e3:86:8e:f2:91:05:9a:d3:34:c7:11:c2:
6e:68:21:0c:02:61:7a:4b:60:46:4f:ed:42:36:32:
94:09:7c:6f:ee:e4:3e:82:29:ef:bf:8f:82:b5:69:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:72:1A:CA:60:CE:63:DE:DB:FB:E6:BB:47:6B:DD:B5:52:F9:0B:8F
X509v3 Authority Key Identifier:
keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e8:49:9d:6a:7f:da:45:79:66:67:9e:d8:b1:18:40:16:25:
e7:71:4d:6e:5f:70:67:33:49:c4:7e:16:91:60:8b:d7:3b:e2:
04:e5:df:4f:b7:be:03:bc:82:d4:80:af:80:e5:8f:60:f2:f4:
e6:57:68:45:e4:20:dc:cd:2e:7f:e8:8f:4d:80:bc:f5:8b:ce:
df:21:3e:04:31:9b:bf:55:fc:8a:4b:0e:44:d4:10:1b:3e:7c:
9a:e3:a2:e8:52:76:36:85:91:27:94:22:2b:2d:6a:aa:7e:3c:
3d:a6:2e:8e:6b:f1:99:b2:77:31:7a:7a:07:67:0c:0e:e1:ff:
12:a2:bc:c3:d7:30:2f:75:bc:60:55:cb:b9:32:1a:cc:cd:b7:
c0:a2:e6:1e:07:dd:f3:8f:3c:4e:58:42:0a:96:f3:6c:21:8d:
36:b7:c1:30:74:c9:60:b9:f4:0e:ed:8a:ed:24:e2:e4:c2:02:
dd:28:37:9d:1e:0a:56:fe:61:b8:25:99:e9:a1:e8:a8:5a:a4:
6b:e9:c9:b7:32:73:38:db:2e:aa:97:a5:55:85:f6:96:3b:ce:
06:0b:d5:39:d1:3e:96:76:69:9b:ed:ab:ed:a9:85:f5:2a:a8:
ac:e4:7b:0c:c7:2a:ef:1b:e7:ee:da:47:f2:54:29:1c:3c:87:
ce:64:4f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:48:35 2025 by rpki-client