Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json)
Hash identifier: b88li4EPS/bbsBjZ47gQnCrfL7uh+PC5bj/IkJXXsy0=
Subject key identifier: F8:10:32:AB:57:81:AE:FE:3E:60:7C:FF:45:6C:6D:0B:96:79:1F:90
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 019A53760D7D0EF4A0C17EFA975AA3155ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 10:00:36 +0000
Manifest this update: Wed 05 Nov 2025 10:00:36 +0000
Manifest next update: Thu 06 Nov 2025 10:00:36 +0000
Files and hashes: 1: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: qrr/vVGSQDryFpjXegatWSmObHAC9kkt/Et0qW6UwOg=)
2: bs1HYE5HpmfRDe1IWRWlAw4_YbQ.roa (hash: /9wCX+4PJTuFTnMcFlhOot3PdJrbFSkbu3ySPd314JY=)
3: kvulLtgS7l9j5cL5cr_z1UEgt1M.roa (hash: lwycUBIUeNB/fogCEgMYVAepQLASER5k8Ye40EXBAoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:0d:7d:0e:f4:a0:c1:7e:fa:97:5a:a3:15:5e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Nov 5 10:00:36 2025 GMT
Not After : Nov 6 10:00:36 2025 GMT
Subject: CN=f81032ab5781aefe3e607cff456c6d0b96791f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fe:2d:a8:bf:b7:00:db:d4:47:b1:8b:24:8b:
3f:7a:44:39:2f:43:0a:68:8f:d8:69:1d:6e:45:0c:
9d:9d:fc:f5:ca:67:45:b1:1f:77:e4:81:b7:db:cc:
93:46:ce:d2:48:53:94:10:50:ec:a2:5a:a4:eb:36:
59:b0:f8:f9:9f:55:ad:8b:e8:d0:3e:81:42:11:59:
e1:e0:6c:4d:5d:4f:2f:68:ff:ed:f7:d6:22:6d:60:
0e:13:26:1c:b4:b2:b9:4e:93:ff:56:10:17:6d:07:
7c:37:56:19:31:7a:d7:67:69:74:37:db:90:5b:f8:
5f:26:6d:51:bf:b0:f6:14:e9:f3:0f:6f:3a:81:97:
17:92:4f:0d:42:52:00:9d:25:20:ce:95:dc:8b:15:
30:4c:5e:e5:5c:3b:bf:05:10:8f:dd:ce:10:83:23:
69:25:16:fd:6e:f2:21:2d:b7:72:24:67:b3:9b:09:
f2:22:f5:fb:87:1c:8d:5b:4f:83:b0:30:c0:c3:57:
91:ba:63:68:e6:e0:48:ee:35:85:8b:55:0c:0b:71:
7d:7f:58:b9:18:8e:36:72:e2:83:b0:a3:dc:ed:7d:
d8:d8:38:23:e8:8f:8e:cd:65:1e:92:e8:88:e0:1b:
72:28:45:61:dd:f3:20:6f:fe:ce:9d:da:0a:32:0a:
6e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:10:32:AB:57:81:AE:FE:3E:60:7C:FF:45:6C:6D:0B:96:79:1F:90
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:56:57:9e:a1:f8:3f:7c:ea:33:c1:ab:9c:6e:58:c9:da:b6:
7e:cd:85:f8:14:18:5d:6f:8c:61:e8:ec:64:35:0a:7b:64:0f:
77:a6:c4:6e:bb:51:61:88:a5:11:40:69:f1:27:c6:fd:36:ae:
5a:83:8e:10:a4:05:99:b3:09:e5:93:a4:dc:ba:d1:9d:e5:0e:
fa:05:ae:ce:28:64:db:98:9b:eb:ad:eb:c5:fb:bc:30:25:0b:
6e:86:a2:80:3d:24:43:42:c2:38:b3:83:e1:35:a8:fb:68:5c:
db:56:77:01:da:40:f8:53:0b:4b:23:58:22:b2:7e:6a:5f:91:
de:35:33:d8:db:87:8f:8c:03:81:02:61:b3:9d:dc:06:ea:89:
1d:f8:3c:98:a5:3f:ed:36:18:dd:e9:d9:4f:92:35:ef:fb:60:
51:c5:5e:7a:6e:73:0c:3d:eb:9e:27:79:99:c2:e2:4c:04:50:
f2:e8:02:06:82:61:45:93:28:11:c6:ad:02:e0:b4:4a:d0:4e:
0d:8c:ea:cf:a4:91:36:cc:d9:7b:b8:09:3f:f1:22:4c:1c:e0:
71:b3:4d:03:b4:52:4a:91:6a:63:26:ce:9e:62:d1:9b:82:54:
d6:fd:82:1c:de:dd:95:1e:db:0a:8b:d5:38:3c:53:32:59:2b:
b1:ac:a6:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTdg19DvSgwX76l1qjFV7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2JjNWUwNDVlYWE1Zjc2MmE5MTQ2MjQ0YzE5MjQ4YjYy
YmE5NzYwHhcNMjUxMTA1MTAwMDM2WhcNMjUxMTA2MTAwMDM2WjAzMTEwLwYDVQQD
EyhmODEwMzJhYjU3ODFhZWZlM2U2MDdjZmY0NTZjNmQwYjk2NzkxZjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv4tqL+3ANvUR7GLJIs/ekQ5L0MK
aI/YaR1uRQydnfz1ymdFsR935IG328yTRs7SSFOUEFDsolqk6zZZsPj5n1Wti+jQ
PoFCEVnh4GxNXU8vaP/t99YibWAOEyYctLK5TpP/VhAXbQd8N1YZMXrXZ2l0N9uQ
W/hfJm1Rv7D2FOnzD286gZcXkk8NQlIAnSUgzpXcixUwTF7lXDu/BRCP3c4QgyNp
JRb9bvIhLbdyJGezmwnyIvX7hxyNW0+DsDDAw1eRumNo5uBI7jWFi1UMC3F9f1i5
GI42cuKDsKPc7X3Y2Dgj6I+OzWUekuiI4BtyKEVh3fMgb/7OndoKMgpuUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgQMqtXga7+PmB8/0VsbQuWeR+QMB8GA1UdIwQY
MBaAFEzLxeBF6qX3YqkUYkTBkki2K6l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDct
YTdjNTlkZGNmNzZiLzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDctYTdjNTlkZGNmNzZi
LzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlZXnqH4
P3zqM8GrnG5Yydq2fs2F+BQYXW+MYejsZDUKe2QPd6bEbrtRYYilEUBp8SfG/Tau
WoOOEKQFmbMJ5ZOk3LrRneUO+gWuzihk25ib663rxfu8MCULboaigD0kQ0LCOLOD
4TWo+2hc21Z3AdpA+FMLSyNYIrJ+al+R3jUz2NuHj4wDgQJhs53cBuqJHfg8mKU/
7TYY3enZT5I17/tgUcVeem5zDD3rnid5mcLiTARQ8ugCBoJhRZMoEcatAuC0StBO
DYzqz6SRNszZe7gJP/EiTBzgcbNNA7RSSpFqYybOnmLRm4JU1v2CHN7dlR7bCovV
ODxTMlkrsaymNw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:03:27 2025 by rpki-client