Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
File: TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft (raw, json)
Hash identifier: Z1gyGMhua2MMRORDEaAqHxCbSMMz7/kNkyo2oVW9ZCk=
Subject key identifier: 49:6F:1A:0A:16:C3:F7:C2:8C:73:50:7A:B2:39:D7:B1:8A:41:01:D0
Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1
Certificate issuer: /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
Certificate serial: 019A54BFD1BBE8BD298DE9A8A5378165C64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
Manifest number: 03F3
Signing time: Wed 05 Nov 2025 16:00:48 +0000
Manifest this update: Wed 05 Nov 2025 16:00:48 +0000
Manifest next update: Thu 06 Nov 2025 16:00:48 +0000
Files and hashes: 1: TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl (hash: BmbPkqGWOibljoHryxCsYvleBGnVXC2nsy90Owrg7XM=)
2: _l-XctLDCPzRb-pMlqXmGyqDvHM.roa (hash: myqB80koPH8JwlE9qSMpb7bOcTN1/cJ21+MIuMT+GyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:d1:bb:e8:bd:29:8d:e9:a8:a5:37:81:65:c6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
Validity
Not Before: Nov 5 16:00:48 2025 GMT
Not After : Nov 6 16:00:48 2025 GMT
Subject: CN=496f1a0a16c3f7c28c73507ab239d7b18a4101d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:9a:c4:b9:7d:1e:a0:03:db:7b:d2:60:ba:
97:80:29:60:79:6b:50:b6:29:ba:e4:f7:76:47:7d:
e6:26:de:fe:b4:83:8a:94:90:0f:28:55:68:8b:68:
c1:c5:9d:07:89:dc:89:0e:3d:b1:a3:a6:6f:5e:51:
fa:51:27:04:fb:ea:24:03:15:e6:68:0f:88:ac:2e:
a2:eb:08:3c:56:f2:d9:ae:eb:67:38:ab:c8:02:bd:
0a:75:ea:3d:4f:7f:e2:50:4b:98:9a:70:6b:cc:19:
d7:24:4b:98:c1:26:2a:e5:0d:04:ba:15:85:3c:75:
96:5f:77:50:1b:fd:aa:b5:43:1f:48:77:e7:20:a1:
4a:35:bf:89:09:f1:13:0e:7d:f0:ef:da:ac:ef:b4:
30:d9:d7:7f:54:36:b3:22:b8:9b:de:6c:b2:6c:b5:
68:f9:7d:5c:e7:bf:57:5e:41:17:70:06:17:e3:08:
55:20:85:8c:33:da:6b:55:fc:15:65:25:dc:9c:c6:
5c:3c:95:7c:53:6e:19:7d:38:4e:d2:88:58:65:1c:
59:00:a7:e2:23:65:4b:95:c6:66:0f:79:ae:7b:b6:
1e:48:71:d7:60:08:e4:9c:78:3c:1b:0a:9f:03:22:
f0:1b:1e:4a:e9:64:d6:88:c3:90:38:2b:87:3a:a6:
ed:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6F:1A:0A:16:C3:F7:C2:8C:73:50:7A:B2:39:D7:B1:8A:41:01:D0
X509v3 Authority Key Identifier:
keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:cc:fa:aa:f3:1c:33:f6:e3:9d:b4:9c:91:23:00:ef:23:e2:
68:3a:bc:84:3b:73:8b:a7:f3:94:5e:a3:0b:5a:73:62:96:18:
1f:a3:67:74:6b:35:b4:61:22:52:56:03:4a:77:e7:b5:5e:02:
5b:54:71:3e:9a:d3:0a:cd:9e:8e:91:ea:d2:a0:bc:22:30:06:
f4:ce:9a:85:43:44:80:fa:e2:5b:bd:26:17:d2:8e:71:81:a5:
16:6e:cf:d5:fe:d7:4a:30:c1:52:88:3f:36:6e:47:a2:28:89:
30:03:b4:3a:15:ae:b8:12:73:be:d5:70:9d:2f:80:0c:85:3e:
0c:fa:b1:cd:65:ad:21:3d:7a:c9:78:2d:d0:39:3f:2a:01:2e:
84:59:64:3d:59:80:f2:52:74:fe:6f:99:4e:ae:b0:f3:d3:93:
4e:01:2d:10:6e:f5:c8:fb:e7:07:ed:ea:cb:da:d0:fa:b4:28:
53:c3:e1:6e:16:cc:86:8a:16:59:8e:c6:a4:81:52:d2:c2:b3:
e9:ac:d1:f7:3e:72:4f:9c:c7:2a:a4:6c:4c:28:6e:36:15:36:
78:50:15:c0:af:24:c9:08:6d:d9:5e:11:0a:e3:8b:4a:33:94:
17:00:f5:0c:13:1c:be:b5:de:5d:9d:b5:32:12:8f:a6:3c:79:
8a:5d:ba:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:31:25 2025 by rpki-client