Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
File: TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft (raw, json)
Hash identifier: nxHgPeDSnk4K37AOgVgo9jV4OTXVNfWIVwTBeh2mI5M=
Subject key identifier: 79:E4:66:00:75:3D:23:32:0C:94:D6:A1:70:A0:0F:FB:AA:13:53:8B
Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
Certificate issuer: /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Certificate serial: 019A4FD064D3C409D52BF834E73CA1F802C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
Manifest number: 12C2
Signing time: Tue 04 Nov 2025 17:00:48 +0000
Manifest this update: Tue 04 Nov 2025 17:00:48 +0000
Manifest next update: Wed 05 Nov 2025 17:00:48 +0000
Files and hashes: 1: TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl (hash: ewC3uclUB6KwPBEfen//hCrNzVn6B7HQChp7witoPRE=)
2: j-betU5F3fuYYNREFl5I-_t74ng.roa (hash: ThVTYZ7pBXxFoxAK1y8K2Bay/CDdSEmxPkT01D83Maw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:64:d3:c4:09:d5:2b:f8:34:e7:3c:a1:f8:02:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Validity
Not Before: Nov 4 17:00:48 2025 GMT
Not After : Nov 5 17:00:48 2025 GMT
Subject: CN=79e46600753d23320c94d6a170a00ffbaa13538b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:af:1b:6c:9c:82:45:fb:47:20:34:6d:07:
08:2b:68:88:42:ec:71:98:52:50:ee:2f:61:c1:9b:
74:cd:a4:b7:3d:7f:11:62:81:bb:3b:64:2b:b0:20:
70:f5:b5:3b:9f:e8:53:9b:b2:f9:ee:92:a8:2f:b2:
a8:36:a4:5d:28:2a:2b:74:fb:1f:11:04:b9:fa:4a:
1b:a8:ff:cd:b8:a0:32:d6:9e:d2:a4:e5:f6:93:62:
17:35:2e:47:c7:83:31:28:6d:54:dc:e0:e4:75:9a:
e0:86:28:32:49:c1:7e:58:e2:94:f0:37:e2:c2:08:
d2:55:af:f9:12:1d:81:65:bc:d4:86:21:e8:a6:c6:
5d:d6:eb:2d:4a:64:9a:19:3b:87:57:66:c0:8f:2e:
4f:04:87:7c:17:9b:31:0d:4f:a5:f5:b0:44:ca:e4:
0a:af:b0:eb:77:ce:50:f7:72:42:44:cb:f5:99:72:
6b:e5:18:29:13:bd:dc:e5:54:53:cd:3b:cf:54:75:
03:40:22:47:ef:0f:96:61:14:71:d2:e3:b3:6f:64:
96:1e:8b:8d:e6:de:e4:6d:0c:9d:92:d2:aa:9b:b5:
10:2b:b6:b3:a5:0b:40:46:a1:1e:96:37:b8:c3:4a:
37:19:34:62:27:bd:8f:6f:0d:6c:94:a1:93:c4:88:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E4:66:00:75:3D:23:32:0C:94:D6:A1:70:A0:0F:FB:AA:13:53:8B
X509v3 Authority Key Identifier:
keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e9:92:a6:87:f6:94:4e:c6:64:74:4c:0a:88:d2:05:c2:9c:
d1:24:b8:dd:82:94:d7:3b:31:60:f9:c2:fe:02:08:c9:ce:7c:
84:97:ae:d6:50:03:2e:e9:82:3c:27:e6:0e:f7:04:50:c0:e7:
13:d5:fa:b0:f8:4e:ef:97:cf:94:79:99:93:ff:77:1a:8a:55:
41:12:3e:c4:4d:ef:12:dc:01:6a:ef:1f:1b:f1:cf:38:8d:ff:
34:14:4c:66:e6:21:94:64:86:8d:b2:de:58:da:89:1b:fe:e5:
a6:7c:30:40:3b:3e:06:55:1d:3e:de:04:3a:bc:c4:50:99:d2:
45:d9:05:cd:e6:a5:b0:6e:01:a2:49:5e:99:9f:8c:60:c6:06:
75:17:e3:11:e8:33:37:42:48:d5:d4:e3:d3:4a:ce:74:b7:88:
4e:96:ba:b6:4f:2e:0b:d2:a4:90:77:44:22:33:25:0a:41:bf:
c8:4e:4d:0d:ee:3e:1b:f5:a8:d6:a0:8c:ee:22:69:7b:f4:c4:
57:51:f3:06:8f:87:c3:b9:9e:27:f0:57:18:7b:39:3c:ad:96:
7b:7c:14:4e:e3:fb:b9:30:6b:08:25:55:61:5f:6c:85:98:83:
eb:53:57:03:cf:2c:c4:84:48:79:f1:1f:67:f9:44:ee:56:14:
28:3e:a0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:49 2025 by rpki-client