Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
File: Tc_QAaZn4WRatAxbvtifWScAT4U.mft (raw, json)
Hash identifier: S/iVmHn90hpYbwLUjCqFuSLxyp8BtC8nOksmpOPp6mc=
Subject key identifier: F0:C7:AB:C2:1C:CA:96:79:16:BB:0A:46:D5:F1:DB:E1:40:A6:1E:1C
Authority key identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
Certificate issuer: /CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Certificate serial: 019A4F61FB40AB5D10DE67CBE21D4CAA5A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
Manifest number: 0B38
Signing time: Tue 04 Nov 2025 15:00:12 +0000
Manifest this update: Tue 04 Nov 2025 15:00:12 +0000
Manifest next update: Wed 05 Nov 2025 15:00:12 +0000
Files and hashes: 1: Tc_QAaZn4WRatAxbvtifWScAT4U.crl (hash: hwtOQJebPxbv1YO8mUP1LpzM5kt6KJe9AM4a7v+D5TY=)
2: jdMFheDlAIgKvi6YF6C6Rm8zqwg.roa (hash: 0uopvNrGmCf9iLiAY1t8oTN34NZD3FhGP5c/aZny+2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:fb:40:ab:5d:10:de:67:cb:e2:1d:4c:aa:5a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Validity
Not Before: Nov 4 15:00:12 2025 GMT
Not After : Nov 5 15:00:12 2025 GMT
Subject: CN=f0c7abc21cca967916bb0a46d5f1dbe140a61e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:2f:01:a8:c0:c7:91:e7:a8:5f:20:d7:06:
e4:00:8a:a1:d8:a3:4e:0a:ff:60:59:c3:06:cc:85:
d3:0a:0e:b4:ec:55:44:13:84:6a:ac:86:d7:4d:7a:
b0:c1:40:66:41:93:ae:b6:4b:58:72:ab:71:0a:2e:
35:7d:57:23:40:64:8f:cd:1b:5c:1c:a3:9a:9d:75:
e4:82:9f:e7:05:9e:b5:f6:db:c9:7c:e8:57:99:dd:
80:e6:e5:eb:e1:4e:8e:ee:92:46:15:a6:42:87:fc:
3b:24:bd:a6:d8:2f:c1:d5:67:81:14:c3:ac:d4:52:
5f:6d:77:c4:d4:bf:c2:ff:c8:7d:60:55:35:bf:23:
e5:43:26:7a:f3:bf:f6:db:73:0a:51:e0:f6:bd:79:
50:24:4a:73:48:ed:56:2c:78:13:03:a3:a7:95:ff:
38:2a:86:73:4c:4c:1f:e1:ed:76:24:40:fb:be:04:
73:cc:72:37:9f:31:d5:58:46:5b:6b:32:ca:6b:2c:
e0:71:cf:ee:f9:35:b1:8e:eb:80:72:a7:a6:74:60:
58:5e:d3:6c:cf:0a:33:64:a9:83:f2:98:29:11:13:
a6:1e:e1:0e:fd:da:e9:1b:ea:dd:67:29:40:37:1c:
af:5a:4f:cc:09:00:16:88:2a:14:e3:1b:f4:98:19:
d6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C7:AB:C2:1C:CA:96:79:16:BB:0A:46:D5:F1:DB:E1:40:A6:1E:1C
X509v3 Authority Key Identifier:
keyid:4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:2b:39:27:a7:e8:91:b9:90:94:e6:db:67:23:76:25:18:68:
80:99:28:65:d6:62:49:54:85:f6:61:0c:aa:bb:c9:f1:77:4d:
86:fa:49:39:1a:ef:8c:ae:b0:1c:34:8c:1d:51:e0:76:37:a4:
20:5d:eb:3b:91:a0:84:97:e8:4a:bc:d1:a7:4a:f9:73:f5:fd:
38:cd:4d:96:03:10:2d:30:21:06:e6:80:b8:3e:fa:0b:38:7b:
f9:5b:36:95:85:34:43:ae:e5:be:0e:5f:91:64:38:86:15:c5:
1b:90:88:d4:7b:27:75:81:f2:c3:1b:2b:ae:ec:68:25:3a:b1:
6d:1a:4e:17:d0:6c:26:bc:77:25:b6:e7:80:b2:44:0b:05:14:
a7:7b:ef:fb:67:78:b8:d4:03:18:62:9a:61:78:7d:25:cd:21:
04:e5:9d:d9:fd:83:51:76:6e:a2:3b:b6:7c:b9:28:91:92:b1:
08:4a:09:31:ec:2d:0a:c0:ed:92:dd:35:f3:86:ce:66:8a:a7:
d7:51:bb:52:f7:32:6a:d0:d0:35:93:47:af:d5:ad:8a:de:a3:
33:24:80:6c:e3:04:c8:76:d1:2a:c0:30:bd:c9:8b:f6:96:41:
f8:e1:c8:15:94:82:52:6f:07:68:9f:e2:a5:40:9d:c3:c0:94:
c6:95:37:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:09:59 2025 by rpki-client