Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: ikvHNu5sBIqeK8XQQOjSoeARgfHDRutvnFGJONyWZfk=
Subject key identifier: 7D:2D:AE:B7:E4:1D:71:3D:2E:CC:E8:F8:3A:94:84:7D:FE:79:58:B7
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 019A1E0812B55E490473618C96F81AD6F8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 16F2
Signing time: Sun 26 Oct 2025 01:00:36 +0000
Manifest this update: Sun 26 Oct 2025 01:00:36 +0000
Manifest next update: Mon 27 Oct 2025 01:00:36 +0000
Files and hashes: 1: RV8paaJ3goMy9MfTaatO8nD3vp0.roa (hash: e4c5enruS1aSsE+Y/GCFoVHc8KGnXiS/8gSNbBU+Ybc=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: rhFbQ53fGl2Matcwel9vzIFu2NTN5l2pstZvMmj895o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:08:12:b5:5e:49:04:73:61:8c:96:f8:1a:d6:f8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Oct 26 01:00:36 2025 GMT
Not After : Oct 27 01:00:36 2025 GMT
Subject: CN=7d2daeb7e41d713d2ecce8f83a94847dfe7958b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:07:16:7f:99:da:c5:c4:01:1c:25:eb:3c:
4b:4a:3a:d5:6e:07:66:68:b3:d7:4b:af:d3:28:08:
b3:3d:1d:2b:b0:98:31:d9:ee:91:de:41:18:2c:ee:
96:87:9e:35:f2:bf:2b:de:1b:a0:1d:f3:7f:42:42:
85:b8:92:ff:62:d2:e3:f7:df:b5:2c:0f:a0:bb:de:
11:c5:27:41:77:bc:9d:1b:c5:3d:07:3b:78:95:21:
08:f8:5d:01:f1:fd:45:30:ba:38:c3:31:1b:a6:28:
fe:cb:0f:82:2b:6c:5d:1c:b1:9d:d8:02:e8:33:b7:
f7:be:4d:23:cc:82:9a:14:fd:d7:93:7d:04:fb:ad:
1c:bd:54:b2:d4:30:61:90:58:80:6c:fe:12:56:ef:
9e:89:eb:20:9f:de:bf:54:09:8e:94:62:b5:71:c5:
3e:b8:25:d8:95:f8:af:ba:65:5d:a6:b9:5e:4c:f9:
46:7d:8f:bf:cf:ca:f9:06:e9:6b:7f:1c:2d:d7:5c:
d2:89:26:87:28:98:57:b3:73:14:15:e7:3d:cc:bd:
c2:8f:8c:08:68:97:0d:ac:28:8f:9c:10:c2:c3:57:
fc:8c:6d:3f:2b:11:27:69:c3:99:64:bb:d4:46:82:
a2:26:be:9d:81:05:b4:e2:da:12:e1:85:b5:ab:db:
15:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2D:AE:B7:E4:1D:71:3D:2E:CC:E8:F8:3A:94:84:7D:FE:79:58:B7
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:29:e6:39:85:be:66:65:eb:5f:cc:6a:08:44:eb:f9:9a:d2:
46:2d:16:78:f5:1b:de:f2:ae:85:c4:1f:55:be:34:47:27:89:
24:f0:03:b7:83:2b:da:11:f4:0b:14:09:88:31:79:92:1a:d4:
84:cd:51:53:91:57:6e:c8:1f:94:dc:e1:af:79:98:70:19:af:
0e:43:b4:b2:32:2f:58:c6:e1:9a:86:d2:25:51:36:2b:b5:28:
53:9b:25:f8:6e:29:ed:a7:1d:6f:9b:f2:02:8c:1a:f0:35:21:
58:c7:0e:04:a8:29:45:62:fd:e9:c4:69:e0:cf:b7:d7:5e:3e:
c2:5d:87:5f:11:95:70:ac:05:08:c9:96:17:53:e4:90:f8:3e:
26:b5:27:98:3f:51:27:05:7f:6b:82:fa:f1:14:59:1e:3a:9d:
96:ce:78:bc:16:c2:93:45:f1:f5:ea:da:32:4a:89:a5:a9:21:
f6:59:82:0a:6e:bc:82:8a:0f:a8:7b:e2:56:7b:64:4a:62:4c:
ac:a3:ed:2b:d1:8d:08:a4:ba:ac:a0:89:db:9e:6e:21:7b:6b:
bc:85:7f:f3:c4:1f:4f:4d:76:fb:42:52:86:72:a6:65:1a:54:
a7:3a:70:31:7d:eb:21:5c:f8:fd:cc:a4:4c:72:a2:75:d5:e9:
34:d7:03:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:10:29 2025 by rpki-client