Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json)
Hash identifier: +6MpLJw70qk3E+QDH+3hRWy0vmLPKXdI2HEKidN3oYI=
Subject key identifier: AF:60:39:4E:AD:6A:F8:FC:EC:D3:FB:3D:BB:73:24:F6:4B:BD:E0:96
Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Certificate serial: 019A52D25F604AEB701E4624121FADA45D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
Manifest number: 0882
Signing time: Wed 05 Nov 2025 07:01:49 +0000
Manifest this update: Wed 05 Nov 2025 07:01:49 +0000
Manifest next update: Thu 06 Nov 2025 07:01:49 +0000
Files and hashes: 1: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: UBKrVwZI8Xs6cVFT9LHx1AjotBv/y8asfQAs3W/S+U8=)
2: Vh_JUxD0F48NbjyYRcDhXuGyEXI.roa (hash: RX3aXV1jt4pV7znP3Nr6a04cOEHqVMLgDW/kqRB9jNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:5f:60:4a:eb:70:1e:46:24:12:1f:ad:a4:5d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Validity
Not Before: Nov 5 07:01:49 2025 GMT
Not After : Nov 6 07:01:49 2025 GMT
Subject: CN=af60394ead6af8fcecd3fb3dbb7324f64bbde096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:88:2a:64:8f:2c:43:d0:4f:a6:8b:78:99:
35:2f:11:0b:3c:cc:a2:39:9a:cc:37:a0:f9:0b:b1:
08:10:1e:31:18:6c:04:2b:b7:c9:53:b0:5f:69:b0:
5a:97:61:52:1a:7d:41:aa:c7:ad:7b:e7:cf:3b:69:
2d:9f:9c:6b:bb:07:ec:57:ef:ed:d5:b6:1e:dd:ff:
db:a1:0c:6b:c6:11:80:5b:83:29:f2:a5:85:64:f2:
e8:13:fd:31:d7:ee:1a:78:22:32:7a:9d:57:fd:80:
1f:03:86:6c:d3:7e:bc:30:97:2a:da:0b:53:45:2a:
46:1d:64:74:5f:03:30:af:f0:20:aa:7d:f8:6d:9b:
67:08:7f:df:7d:73:3a:84:46:ef:56:ec:d4:af:ec:
63:0d:a2:4a:ef:c2:31:f2:8a:95:63:4c:67:c4:2f:
a9:42:c9:14:9d:d7:04:9f:f4:8d:f8:d0:9c:28:65:
17:36:2e:19:52:28:8c:af:3b:09:8a:f6:f4:67:8c:
cf:50:d5:b9:db:9e:2b:a0:b6:03:65:e7:02:67:8b:
72:72:56:4f:a3:99:96:c8:16:f1:b4:0c:df:3e:ba:
17:27:16:a9:04:04:94:c4:d5:f8:e7:d4:00:8e:1d:
2b:79:74:4a:80:85:44:57:e3:c2:96:07:da:cc:a7:
e6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:60:39:4E:AD:6A:F8:FC:EC:D3:FB:3D:BB:73:24:F6:4B:BD:E0:96
X509v3 Authority Key Identifier:
keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b4:0e:d7:cf:ef:fd:b0:55:2f:9e:75:7d:26:3b:a1:87:9b:
5e:50:bb:4d:e9:78:fd:69:4c:43:70:62:2f:e6:2f:d5:d3:3f:
e8:74:de:96:a6:86:26:f4:74:89:f7:6b:35:32:4b:78:56:3e:
9e:09:d4:50:a0:c1:ed:88:5d:1e:f4:6a:df:c5:ca:b9:02:ae:
06:70:0a:89:32:cd:86:36:5e:ee:d2:7b:de:ca:e8:dd:71:34:
1c:91:61:8c:a7:bd:b1:45:f0:78:62:07:58:f5:0c:af:93:7b:
b8:4c:5b:c8:c2:2a:ee:7c:43:51:ef:c8:67:4b:6d:18:bf:47:
88:72:e2:cf:06:4c:f8:ff:9f:a7:a2:1b:6d:78:d7:b0:e8:d2:
fd:ad:4b:bb:1b:ba:66:94:db:f3:28:9c:76:00:ea:3c:e5:8c:
61:2f:a1:f4:5a:b1:48:aa:67:40:b9:96:73:a1:e4:28:19:a2:
9f:ef:6a:a8:bf:46:59:13:8a:93:47:a2:17:cd:e7:40:92:08:
20:dc:c1:ca:6d:ad:bf:f2:dd:da:66:06:ab:b9:e4:07:2a:cc:
1f:d0:6e:4a:99:6c:26:ad:3e:eb:fd:0d:5c:ce:72:63:52:73:
85:cc:e4:7d:17:4f:b7:d4:75:55:34:d9:f4:13:0d:44:22:90:
d1:30:59:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:55:18 2025 by rpki-client