Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier: Z4/T51dJHNj9xPd8bOODTHObWMr4ZwGS0RmejK9yhog=
Subject key identifier: 5E:F5:02:06:3F:7D:A4:5A:F3:88:D5:7A:95:76:0C:CC:BD:38:D7:6C
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial: 019A4E18EC1302975014EFEB45255DA694F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 09:00:47 +0000
Manifest this update: Tue 04 Nov 2025 09:00:47 +0000
Manifest next update: Wed 05 Nov 2025 09:00:47 +0000
Files and hashes: 1: BhaT-M-zQEVQbEPTvK_whwRLo3g.roa (hash: yoydrscKhHCdRvyWQAObyBBT0xMyfOzTOU389MtWZv4=)
2: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: 0TPZMVL0xfFMx9kgIPMjUMbzrc8G8zfQhGQrn9O6tTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ec:13:02:97:50:14:ef:eb:45:25:5d:a6:94:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Validity
Not Before: Nov 4 09:00:47 2025 GMT
Not After : Nov 5 09:00:47 2025 GMT
Subject: CN=5ef502063f7da45af388d57a95760cccbd38d76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:e5:a0:fe:6e:bd:fa:32:94:d2:2e:19:45:
3f:b1:bc:34:20:1d:4a:31:16:63:cc:ce:12:74:11:
c1:0e:3e:7d:ac:1e:f6:45:17:de:bf:db:da:30:a1:
39:68:88:f0:82:37:53:96:83:64:65:8f:5d:f6:a0:
8e:23:81:09:9c:b2:c9:82:4d:f9:18:39:40:ad:14:
82:89:74:d3:ed:16:d7:9a:83:eb:94:2b:6e:75:c9:
5d:20:db:42:eb:ab:c8:01:5f:48:3f:e6:85:a4:7d:
2d:bb:8f:f9:ce:dc:0d:ca:23:8c:34:ba:b1:30:f2:
42:cc:a6:3c:19:e3:7c:79:f9:05:4f:71:a2:1b:fd:
13:64:29:aa:ae:58:55:25:42:58:67:0c:61:14:a2:
94:37:dc:df:99:c2:31:7c:8d:b5:64:8b:e6:e1:b2:
c2:c0:77:d7:44:36:15:6b:f9:2f:8e:68:58:83:9b:
6d:72:b0:09:ad:6b:40:ea:3f:57:d7:73:78:71:0c:
9d:26:d9:e4:2b:d6:89:46:2c:af:2e:57:2f:15:76:
ee:62:be:33:e6:77:60:cc:ee:ce:16:74:a8:7a:09:
d2:34:32:58:c3:23:28:a5:94:1a:99:bc:6c:b2:05:
51:7b:a3:aa:be:03:40:74:11:ff:10:86:86:da:8f:
00:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F5:02:06:3F:7D:A4:5A:F3:88:D5:7A:95:76:0C:CC:BD:38:D7:6C
X509v3 Authority Key Identifier:
keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f2:70:6a:67:6f:52:10:38:ee:49:71:31:d5:9f:db:ff:a8:
db:3f:14:d8:ab:58:87:f5:14:af:e1:ae:89:5f:05:82:da:6f:
75:86:cb:13:be:ba:4c:c2:96:38:bf:73:22:d2:9a:ce:a6:86:
91:ef:1d:51:3f:09:12:58:fc:f1:29:1a:72:f1:e6:71:e6:a0:
0b:04:68:36:3e:0f:4d:33:96:68:f0:d7:2a:29:ac:81:12:6e:
8d:a0:61:7a:51:a7:7b:70:d7:5e:b5:a5:65:76:47:79:bd:8d:
2b:b8:32:63:1a:c5:96:64:2e:fd:8c:1a:f1:63:d1:92:0a:b9:
9a:b5:f8:43:3f:03:44:95:33:c8:1f:96:c1:85:10:d2:94:d2:
4e:f4:2f:03:c1:26:c7:04:d4:ab:bf:4f:d2:42:bc:d7:47:e4:
a0:0f:05:e3:17:64:97:e9:c0:36:05:cd:86:25:d4:e2:3c:02:
23:98:45:2f:1d:92:f1:41:77:a8:3b:b9:32:83:1d:2e:9c:84:
69:f8:79:db:7e:b4:a5:8b:2a:4d:70:53:c1:dc:08:5c:29:f3:
62:d3:cf:6c:86:fc:ec:8e:d2:0b:b1:69:a3:54:3d:73:02:12:
e3:1a:ee:71:c9:c9:7c:51:98:da:b3:2b:05:92:84:1c:a9:43:
8d:05:9e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:00 2025 by rpki-client