Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
File: TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json)
Hash identifier: TxSFJ8faFb4NXcgYxpuHd2Uy0vA8NuxtqxgNDWhPR9s=
Subject key identifier: B3:D4:2C:38:5C:FE:31:81:C8:4E:12:FF:42:37:31:35:19:A5:FB:29
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 019A24E606332F34A439D63280D54B4E52DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
Manifest number: 16FE
Signing time: Mon 27 Oct 2025 09:00:45 +0000
Manifest this update: Mon 27 Oct 2025 09:00:45 +0000
Manifest next update: Tue 28 Oct 2025 09:00:45 +0000
Files and hashes: 1: 93DmKZhPP6C3A8rfNYLNAOSD7nY.roa (hash: dt3s4SYU1dR+fLajxJTR3/3GKKVmv0f+WTIVOmO+2as=)
2: A1lFiDlkwzd2kuuHtwLxrVifjIM.roa (hash: bheq6y6BKOc+FBTnE7aA9p7E54SloHCzl+8cgE33f9o=)
3: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: oyhD5rmSeFQVP3EUE8TfGf57WohKLtM6yen5n2co+mo=)
4: UD9G2KurtNeaAxJdizQiQcSD0uc.roa (hash: Es9ToT28+rspmgTLqxqTlnHgsgNlKjrlO13bAnzcF2g=)
5: XDIQZzxZW5-uUuoXNVfYPGALZY8.roa (hash: xZyhu94HluR+zrM/qfXRNVxIfS3klNJwNP/Gh4p7kNE=)
6: cYs_upIMBFM1qTzwqySxwaPDCLc.roa (hash: xI0Q9MYkvDP8hv/SnI33zJTsy3M/0ZO4tON1nbaFCD4=)
7: jk-_IfFTaD-MzFizpWx0AA1TkH4.roa (hash: wezPiSGoo0rul4hPDHDdcRTaZb8xQPAVvKZ9GBZZNU8=)
8: luOuJQnFXQhNggwM6MUJDK19PDQ.roa (hash: yd7LbwhPMHWjUutNzr3ySSl/LTeLlprMji5U1R9GXsM=)
9: mmpsKeeO5JUD0kNNB4aUsbfsoEs.roa (hash: mRAg2xOUvTrNMtJyTqYFatxVEZidyGOVjXZ4XpUtMSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:06:33:2f:34:a4:39:d6:32:80:d5:4b:4e:52:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: Oct 27 09:00:45 2025 GMT
Not After : Oct 28 09:00:45 2025 GMT
Subject: CN=b3d42c385cfe3181c84e12ff4237313519a5fb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ad:33:e6:69:c6:45:6d:3c:d5:0d:00:e6:d0:
71:7a:dd:b9:4d:68:1e:43:4e:4c:eb:6b:23:bf:94:
7d:c9:96:f9:22:fd:fe:da:e9:b7:89:b7:a6:f8:dd:
f5:bb:13:c2:65:06:2b:e0:4c:c2:d3:b9:44:a9:7a:
86:7c:ef:d5:a7:38:d5:4b:d3:2b:1d:ae:0b:57:83:
b7:62:20:97:a3:23:5a:b2:73:0c:3e:95:44:0d:58:
5c:49:1d:9a:5d:2b:c2:cc:83:73:5a:f1:48:45:7e:
24:c0:c9:0b:b5:c4:f7:d3:cd:56:e1:b4:76:94:cc:
05:9c:cc:60:08:12:bb:d9:f3:42:60:72:0e:f5:8c:
3c:20:2e:a6:e9:da:70:00:df:d2:72:6d:aa:ae:7d:
c2:5c:c3:de:1e:b5:25:db:49:13:6f:48:2a:ce:99:
ee:aa:91:d6:1f:9b:8d:97:94:12:17:72:2b:68:25:
a4:7a:59:cf:75:9a:3a:f3:5a:6c:08:e4:59:96:af:
fc:c5:9a:0b:92:b1:6a:bb:40:03:0e:74:ae:a8:fc:
7d:f7:50:b2:f1:ed:04:82:92:65:74:ab:b3:15:79:
14:36:04:68:96:93:c9:4b:2c:c6:cf:10:b1:33:56:
a1:dc:f4:8a:2b:7f:a4:93:ac:3e:af:6e:2b:3e:b4:
21:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D4:2C:38:5C:FE:31:81:C8:4E:12:FF:42:37:31:35:19:A5:FB:29
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:00:71:c0:8f:42:d5:a7:04:ef:fb:e3:93:09:9c:7a:38:f4:
36:73:ce:63:03:6d:18:ee:56:4f:61:24:c9:3f:6f:0c:12:b7:
b4:14:23:57:3c:22:ee:af:79:f4:20:22:19:6f:39:d2:5b:35:
66:a7:fe:8b:8c:bb:19:ff:4f:60:62:59:46:fe:5f:9f:1e:d2:
a3:8f:d5:7d:2d:20:ca:44:71:16:b6:a2:87:1d:ee:14:8c:72:
68:ff:a5:07:ee:2b:d7:8d:b5:ff:48:cd:31:db:5a:d5:50:77:
fe:b2:97:2f:f6:25:c5:49:b4:9a:8f:0e:71:92:77:ef:64:de:
01:5b:7a:35:39:c0:4f:12:c2:c5:c4:55:bc:97:67:70:f0:aa:
74:98:58:11:9b:0b:a8:b1:7a:ca:3d:5b:c3:d0:ba:6c:a6:2f:
ca:3d:51:92:cb:ea:ca:4f:63:69:76:83:ce:81:8b:cd:1e:0d:
8a:e0:10:cf:b9:e2:83:c1:a2:3e:53:4b:8b:42:23:77:53:66:
30:d4:19:66:31:f0:0d:aa:be:e9:57:38:a1:e6:41:76:28:26:
91:93:a8:32:3c:f6:c5:d3:8e:65:46:fe:99:b2:17:33:4a:97:
73:96:10:57:6a:f8:0e:b5:18:48:46:64:a9:e9:9b:87:9a:75:
8e:4f:ed:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 10:46:04 2025 by rpki-client