Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
File: TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json)
Hash identifier: ZIVoWNSLXQgVPW3mzEvEIq8HXXK/LJURIhzkJumYmMc=
Subject key identifier: 0B:9C:8B:07:44:46:37:4D:83:D0:29:55:FC:B7:A7:A0:59:E0:55:88
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 019A4E1914652CF02ABD475C2778F88D6C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 09:00:57 +0000
Manifest this update: Tue 04 Nov 2025 09:00:57 +0000
Manifest next update: Wed 05 Nov 2025 09:00:57 +0000
Files and hashes: 1: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: 1dk8tTovuHKQXvOH1IaE53nEoBWRyiHkwud3wXf6Wfg=)
2: WNroR83uzcjISqXHww42f1zYgLY.roa (hash: ZAQula8xqSNg9/XEOBi+pmskOiJ5Nh7rkmicK30wwYU=)
3: WZJH_ooSqUDE8CuUHonLIGQeTwM.roa (hash: PXoHbbx7PHb2+Knkp3tuLg6G82PksLK6/WnPXwU1W1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:14:65:2c:f0:2a:bd:47:5c:27:78:f8:8d:6c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Nov 4 09:00:57 2025 GMT
Not After : Nov 5 09:00:57 2025 GMT
Subject: CN=0b9c8b074446374d83d02955fcb7a7a059e05588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:db:10:77:68:28:f7:b1:42:c6:32:f9:ec:
39:a8:fe:7d:46:82:d2:83:33:f7:5b:b3:90:72:3f:
88:e6:9b:11:35:d0:57:14:22:3a:44:dc:89:4e:ac:
7b:9e:62:89:d6:71:2a:f2:f3:76:9a:ed:c8:9b:3e:
fb:17:f7:9d:de:6c:e8:36:e9:70:8c:9b:12:9f:33:
67:ff:7e:e9:6d:43:aa:4a:2b:9f:63:f6:48:5b:c5:
42:fe:89:72:ca:6b:51:9c:3b:de:75:a4:7c:00:26:
5f:ef:c0:32:f7:05:8e:14:01:12:1f:b2:c9:99:b3:
91:f2:29:c8:12:fd:8d:73:d6:5f:ba:27:d1:17:8c:
0d:45:cb:81:7d:ca:3d:1c:8a:cd:3f:1a:de:c2:d6:
7e:be:46:88:19:2c:5b:49:83:7d:99:db:fc:3a:be:
1c:c2:17:15:69:8e:3c:6e:f0:88:33:a9:7f:44:65:
5b:71:b9:d7:85:bb:47:e1:59:60:72:66:c3:3a:f6:
17:1e:b3:57:a7:c0:43:17:7e:4e:a4:9f:8e:cc:90:
b5:5a:e9:7b:d1:ba:8f:ab:27:f1:69:8c:e9:64:b9:
c7:94:d0:49:8b:e7:87:56:54:d2:c6:cc:32:10:69:
ff:29:d1:26:26:0f:0e:aa:ca:89:62:f8:e9:dd:97:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9C:8B:07:44:46:37:4D:83:D0:29:55:FC:B7:A7:A0:59:E0:55:88
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:91:12:d2:6b:14:33:7b:75:d5:ef:b7:b6:e0:66:65:f6:61:
97:91:c6:01:af:9e:2b:d3:db:7e:79:e2:12:30:37:ea:10:b7:
3d:15:ac:29:4a:c0:af:45:46:3b:de:40:47:31:9d:ff:aa:0e:
f4:fb:6c:9a:2c:ee:22:27:3e:08:56:e7:ef:96:9a:c4:01:aa:
04:65:60:39:23:d5:79:ea:f6:3d:bb:84:fc:4d:36:9c:42:8c:
f4:e1:fb:51:47:a3:0a:aa:e6:79:11:af:04:a5:65:ec:8e:6d:
e2:2a:4d:07:98:9b:e6:87:ec:e6:ee:5f:49:8b:eb:e1:a4:ec:
49:3d:7f:98:b1:b4:3f:b1:4c:68:53:d0:37:b8:5a:8d:d1:a3:
8b:47:79:ff:3b:45:0e:ae:39:97:9f:89:b0:26:51:72:cc:9c:
d7:a4:10:7c:5b:75:83:8e:50:db:56:cb:29:68:2a:c8:29:c7:
e5:bd:34:6c:64:90:57:2f:44:11:06:f7:7f:ec:fa:9f:60:a2:
b4:74:c0:8a:5e:32:cd:72:2e:bc:e5:41:0b:0e:37:8a:64:96:
e7:2f:67:5a:ce:a3:71:2d:3b:8b:71:34:d3:4d:3f:5d:bd:a8:
96:78:74:c8:93:ac:a1:d4:e8:1b:20:28:4e:78:ff:84:c4:40:
bb:b7:a5:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGRRlLPAqvUdcJ3j4jWwHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTEzYmRlYTU0Zjc2YjhhODU3MTJhZmRiNjE1MTg2YjMz
ODM4YzEwHhcNMjUxMTA0MDkwMDU3WhcNMjUxMTA1MDkwMDU3WjAzMTEwLwYDVQQD
EygwYjljOGIwNzQ0NDYzNzRkODNkMDI5NTVmY2I3YTdhMDU5ZTA1NTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswDbEHdoKPexQsYy+ew5qP59RoLS
gzP3W7OQcj+I5psRNdBXFCI6RNyJTqx7nmKJ1nEq8vN2mu3Imz77F/ed3mzoNulw
jJsSnzNn/37pbUOqSiufY/ZIW8VC/olyymtRnDvedaR8ACZf78Ay9wWOFAESH7LJ
mbOR8inIEv2Nc9ZfuifRF4wNRcuBfco9HIrNPxrewtZ+vkaIGSxbSYN9mdv8Or4c
whcVaY48bvCIM6l/RGVbcbnXhbtH4VlgcmbDOvYXHrNXp8BDF35OpJ+OzJC1Wul7
0bqPqyfxaYzpZLnHlNBJi+eHVlTSxswyEGn/KdEmJg8OqsqJYvjp3ZeKWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuciwdERjdNg9ApVfy3p6BZ4FWIMB8GA1UdIwQY
MBaAFEyhO96lT3a4qFcSr9thUYazODjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYt
ZmM5MTQzM2QzNjdkLzEvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYtZmM5MTQzM2QzNjdk
LzEvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5ES0msU
M3t11e+3tuBmZfZhl5HGAa+eK9PbfnniEjA36hC3PRWsKUrAr0VGO95ARzGd/6oO
9PtsmizuIic+CFbn75aaxAGqBGVgOSPVeer2PbuE/E02nEKM9OH7UUejCqrmeRGv
BKVl7I5t4ipNB5ib5ofs5u5fSYvr4aTsST1/mLG0P7FMaFPQN7hajdGji0d5/ztF
Dq45l5+JsCZRcsyc16QQfFt1g45Q21bLKWgqyCnH5b00bGSQVy9EEQb3f+z6n2Ci
tHTAil4yzXIuvOVBCw43imSW5y9nWs6jcS07i3E0000/Xb2olnh0yJOsodToGyAo
Tnj/hMRAu7el/A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:20 2025 by rpki-client