Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: UaDelDRtZGgSuQ4a2UDF7V8KFbb9prccd6/q2sGdZIg=
Subject key identifier: 55:73:50:C1:E8:E4:9E:BA:77:90:9E:FC:AC:27:BC:A9:D6:68:00:87
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 019A4E863C3587A58AFCA9DF1CDDAF8EE459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 16A8
Signing time: Tue 04 Nov 2025 11:00:11 +0000
Manifest this update: Tue 04 Nov 2025 11:00:11 +0000
Manifest next update: Wed 05 Nov 2025 11:00:11 +0000
Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: Abq9ySL9H4vmpov51rDP1H/CvqmHs1bUqHVv4PeIa2c=)
2: Zo-iXOH7eoz1wcNDU4gFPp4lbTo.roa (hash: lEXdntgkazPfcD7Ym6WQrguJ42W+/3phyup2XOjaUaA=)
3: w0BgVrxvQVnjW2X3qjBQ3ko9xOc.roa (hash: Ucfa4JRcD7zc33DVXeSZa1Nus1iwZHoQ8xtQZD2xfUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:3c:35:87:a5:8a:fc:a9:df:1c:dd:af:8e:e4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Nov 4 11:00:11 2025 GMT
Not After : Nov 5 11:00:11 2025 GMT
Subject: CN=557350c1e8e49eba77909efcac27bca9d6680087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5e:5c:b5:7d:b0:06:eb:97:6c:00:0b:55:dd:
90:0f:81:c8:a9:f7:7a:2f:a8:a0:e1:d6:28:3a:5e:
21:a5:0b:2c:3d:ae:1d:0d:71:f9:20:c2:c2:c9:41:
fa:b8:bb:b3:a0:44:9a:16:93:12:91:17:c1:a3:84:
d5:97:48:65:ed:91:7c:63:8f:e2:dd:59:47:2c:f6:
9d:db:11:50:45:b9:cb:63:02:26:44:65:d9:9e:1d:
8a:ab:5f:fe:90:32:9d:ef:06:74:bb:64:e7:9f:52:
5d:fc:a6:f2:cd:8a:53:ac:a4:f3:52:05:03:62:9f:
e5:c1:1b:82:71:4b:5c:40:35:32:27:d7:c3:85:6a:
d2:fa:69:c7:3b:0e:be:5f:29:87:e8:5c:5f:bd:9d:
30:8a:57:b1:0c:47:41:ce:0d:25:f0:b8:c3:db:22:
de:b6:26:ec:50:22:cc:b5:74:18:d6:81:66:3b:1e:
f7:43:c9:0a:23:32:dd:03:50:bb:e2:b5:40:6e:4a:
b8:bd:1d:16:b6:c7:26:a6:03:1d:ac:dd:eb:c1:31:
48:fc:f8:a7:11:8d:df:22:7b:2a:d2:15:12:8d:be:
16:1a:cf:dc:b1:78:5d:4a:0e:e8:14:a3:13:7d:30:
3b:1b:89:e2:22:8e:59:e6:4b:e6:ba:05:51:ae:bf:
5b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:73:50:C1:E8:E4:9E:BA:77:90:9E:FC:AC:27:BC:A9:D6:68:00:87
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:5c:da:49:be:6a:f9:b8:da:d8:01:2c:4e:42:df:43:68:b6:
d7:1d:0b:6b:ba:3e:7d:97:a0:fd:53:81:1f:b8:47:fd:9b:ef:
f3:95:9a:14:63:98:1e:b8:b0:62:44:fe:31:f0:68:34:09:14:
44:fe:e9:bd:b5:82:f7:12:34:ca:da:7d:77:95:13:6f:e7:2c:
01:ec:6d:df:a4:48:da:f2:b9:8b:22:59:47:d2:74:33:44:c7:
b1:07:81:f8:ae:2a:c1:04:e0:e3:4a:36:37:63:20:85:ca:07:
93:a7:c9:8a:1f:56:1a:ab:a2:e9:fe:cc:c6:d0:db:f3:c4:96:
20:cc:77:1d:6e:dd:71:f1:32:6e:e1:c7:9f:b9:12:58:db:fa:
05:92:b2:08:22:2b:8b:f3:71:5c:43:8a:0b:d8:5c:5d:44:3f:
5c:b2:56:01:a1:ae:39:36:81:dd:b8:04:6a:1a:1e:7c:dd:24:
05:65:67:1f:89:46:b4:0f:2e:ef:f4:07:e6:6b:c8:d9:91:f5:
b3:d6:b9:bb:03:9b:1d:7e:71:2a:6a:87:9e:24:7a:7a:a2:2f:
84:81:34:82:ec:fc:e9:c8:a8:e9:7a:10:79:f2:20:00:fe:f2:
0e:ba:0b:d8:5f:3b:95:a3:a9:98:90:3f:97:10:17:45:87:89:
11:74:25:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:29 2025 by rpki-client