Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
File: TC9Y05SvcD-57w_FN77Q6X23Wo8.mft (raw, json)
Hash identifier: PZMRuz14dVPw1NvHAQ7b6I6mefeBofFpa4Eu9nxjOuc=
Subject key identifier: 86:B2:EA:B2:C9:9A:78:DE:26:79:16:E3:D9:FA:0B:B9:A1:D5:EF:EB
Authority key identifier: 4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F
Certificate issuer: /CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
Certificate serial: 019A4EF4DF8F44AACDB25E7FF63F15AC7E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
Manifest number: 16A1
Signing time: Tue 04 Nov 2025 13:01:02 +0000
Manifest this update: Tue 04 Nov 2025 13:01:02 +0000
Manifest next update: Wed 05 Nov 2025 13:01:02 +0000
Files and hashes: 1: TC9Y05SvcD-57w_FN77Q6X23Wo8.crl (hash: d0ZjXiKEx32wKPS+n0yHo8kbP7R3oPs4j1bYWYRymb4=)
2: oazotxA3EnIAjH5CiO4PoDx9aig.roa (hash: H9V6PprjcGQjd8u9DXvLpu5E0DcK6LW/BPtbyyYT+nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:df:8f:44:aa:cd:b2:5e:7f:f6:3f:15:ac:7e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
Validity
Not Before: Nov 4 13:01:02 2025 GMT
Not After : Nov 5 13:01:02 2025 GMT
Subject: CN=86b2eab2c99a78de267916e3d9fa0bb9a1d5efeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:09:41:01:7b:7f:0c:b5:f1:17:6e:4c:a3:
ac:25:21:1e:94:a8:4e:21:6a:30:39:09:53:37:da:
b8:91:f2:c9:c0:b0:25:21:c8:08:27:29:4f:b6:9c:
6a:26:37:cd:8b:4e:b1:78:22:19:ae:39:50:44:6c:
cf:0f:4d:6e:a9:85:47:a0:bb:c4:ff:eb:06:20:f9:
73:14:94:00:83:d0:ab:2a:c8:c1:5d:67:a8:ac:ac:
7a:51:84:f7:1a:d1:e3:01:54:b7:59:9f:0a:e5:22:
c5:7a:17:3c:d4:4c:ee:c1:b3:1d:76:df:61:b7:c4:
c2:34:37:db:ef:b7:6c:2a:c4:2b:31:e0:be:a1:d9:
83:db:da:ae:5b:35:6a:57:95:ee:cf:ba:45:c2:7b:
8b:95:73:df:5f:41:c6:1a:13:6e:53:fb:d0:c7:42:
8f:bf:1b:ea:d4:a4:2e:4f:94:57:38:55:b2:d0:e0:
af:ba:ae:68:0d:ef:ad:8a:22:3c:f6:ac:29:ff:bc:
5b:29:a9:07:ae:b0:5f:dd:5b:b1:61:ea:32:c0:96:
7b:06:4e:48:cb:91:7d:65:81:4a:86:d8:11:cc:1c:
0f:a7:60:f4:bf:3b:f6:7b:d0:3f:b8:7b:5c:90:5d:
fd:d5:db:84:a1:a7:a4:b5:22:b2:eb:1c:0d:b5:a6:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B2:EA:B2:C9:9A:78:DE:26:79:16:E3:D9:FA:0B:B9:A1:D5:EF:EB
X509v3 Authority Key Identifier:
keyid:4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:33:f2:bf:86:60:72:2d:66:d7:75:d0:c2:e1:51:6f:d9:03:
b3:c4:f9:5b:93:40:ea:06:58:d0:99:61:48:a6:47:2c:50:6f:
a8:a5:78:70:c1:53:5c:5a:20:bc:94:f8:07:59:6c:83:2a:55:
35:1b:f1:44:cc:f3:a6:38:dc:6c:a0:32:65:1c:17:76:1d:a9:
2e:56:16:88:85:57:c6:76:41:d7:de:09:86:dd:33:84:9b:f3:
e9:45:b3:98:8d:1a:24:ad:a1:36:9e:d2:cf:d0:c4:39:21:5f:
ce:0f:a2:e8:09:11:3f:49:ab:a7:99:c5:f6:b6:7a:9e:46:a8:
a2:db:10:1d:a2:cd:b7:8f:c7:1d:ee:33:fd:ca:52:08:4a:85:
a6:0d:5e:c8:3d:aa:17:06:be:ee:6b:42:b0:60:04:07:4f:69:
12:21:c1:9a:bd:54:0c:74:40:16:de:bd:b9:df:42:aa:b5:a3:
dc:32:93:40:b7:19:34:60:d0:e1:df:f5:d6:f5:25:f3:5f:e3:
dc:48:01:c3:59:6a:6b:29:e4:7d:6a:26:45:8d:9d:a5:33:ae:
d5:6e:b3:2a:8a:c4:a8:cf:8b:0d:88:c9:bf:c6:04:a9:00:6a:
9e:52:59:df:92:62:76:be:76:18:d5:44:ff:fc:5f:04:ce:af:
7d:90:8d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:42 2025 by rpki-client