Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: 7IHWd5LvJJRzRMftB6bDmM8VKXNujTpq1v4bQOUby4Q=
Subject key identifier: DD:D5:7E:39:7F:79:61:A2:36:EC:ED:0C:1A:3D:F8:11:4E:F6:85:3E
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 019A51BEB9AD3A2E2ED0CC395F726D6AAB71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 07A0
Signing time: Wed 05 Nov 2025 02:00:45 +0000
Manifest this update: Wed 05 Nov 2025 02:00:45 +0000
Manifest next update: Thu 06 Nov 2025 02:00:45 +0000
Files and hashes: 1: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: kvxJsS8mKl7ZSPbUx/wef45Gs6tnNW7OgWZ1J4dtZ/8=)
2: fIoweheWq1JqzVdLBCrrD-x4kK4.roa (hash: yoQba86aaUs4p2P/E/UoxSeIL5NEm/wDobQOVMT4e5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:b9:ad:3a:2e:2e:d0:cc:39:5f:72:6d:6a:ab:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Nov 5 02:00:45 2025 GMT
Not After : Nov 6 02:00:45 2025 GMT
Subject: CN=ddd57e397f7961a236eced0c1a3df8114ef6853e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:99:d8:f0:90:ab:d1:9f:51:97:f8:3e:a6:
38:e3:df:02:79:e5:66:c3:71:f1:fe:cf:79:9e:52:
4f:3f:b5:29:87:ed:e8:4b:14:5c:e6:58:bf:88:2b:
c3:8c:84:3d:45:0d:5a:b4:c2:cd:02:66:6b:f4:d1:
b0:3b:cc:31:e5:33:14:80:b7:3f:8e:fd:d5:9a:4e:
f5:1f:93:ec:84:e2:ed:54:d9:6b:8e:25:08:a0:5e:
2d:be:75:23:2d:62:e6:f2:ce:e3:fd:ee:43:5b:1d:
61:90:ef:ac:90:c7:79:4d:27:5c:3c:d1:d7:8f:19:
5f:92:fc:6b:5e:a8:a0:57:31:e3:2c:61:94:63:84:
c6:f8:86:90:5c:a7:b7:ea:e9:69:78:e8:25:41:d4:
15:cf:b4:8f:b7:7f:e3:38:86:4d:52:3a:ea:59:47:
f0:6a:d6:97:d9:c0:30:33:02:45:bb:30:e7:17:70:
d1:7b:5c:0b:48:d7:c2:cf:25:ed:d9:fe:7d:84:35:
85:36:12:46:e6:53:59:90:de:3a:b7:04:a3:2a:9c:
35:b6:66:80:c0:0c:78:84:14:78:9d:58:e7:05:11:
d7:dc:3e:73:2b:c0:2d:99:69:6b:c9:f8:6d:e8:f3:
dd:81:b3:10:e5:65:08:b5:88:e3:53:12:9d:fc:ba:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D5:7E:39:7F:79:61:A2:36:EC:ED:0C:1A:3D:F8:11:4E:F6:85:3E
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cb:bb:d6:6e:91:d4:a5:02:14:a5:88:6e:1d:9b:7f:57:f5:
52:40:f6:18:04:c2:66:0d:57:89:27:13:fd:44:cd:6b:95:e1:
ff:2b:e1:d0:e4:77:12:df:68:99:07:f3:86:55:b5:ba:47:1a:
06:a6:f3:b9:bf:6f:c8:37:40:fb:74:0e:62:06:29:1d:47:67:
3e:4c:7f:dc:11:90:f7:90:ef:8f:dd:9d:9a:3f:6b:28:8c:cb:
89:90:24:bf:3f:ac:47:d6:77:89:8c:6d:27:32:88:9a:b3:c8:
25:62:c3:3f:ba:e8:f8:0c:93:41:9a:b8:1d:c2:3a:2e:a2:d2:
60:32:5b:93:6a:c6:3a:4e:05:b8:c3:0c:cc:2a:89:95:b5:3d:
9f:b7:e7:f3:34:cc:dd:a2:07:c0:b7:b1:80:86:24:55:3e:00:
ae:21:1c:b6:ed:11:24:bf:a2:46:27:41:bf:3a:48:22:a7:27:
d2:d2:79:35:35:ec:81:04:ee:56:2c:2a:f6:30:82:13:41:c9:
88:a2:47:65:d1:df:98:ca:3e:5f:c6:d6:aa:e8:22:9b:21:ba:
c2:ad:0d:59:ce:0b:18:35:b3:09:4f:e1:fc:3d:ba:aa:8c:e0:
6c:5e:ee:9d:1d:6d:d8:b8:28:51:4d:c3:60:5b:ab:23:45:1e:
58:7c:ba:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:54:48 2025 by rpki-client