Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
File: tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft (raw, json)
Hash identifier: XLaJaPUgy1reFou8J+nHFia/evDnmjEcHc40d7z0l+M=
Subject key identifier: FF:31:96:35:5F:E4:AF:FC:35:20:D3:71:37:E5:A0:F0:04:F5:F4:A8
Authority key identifier: B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
Certificate issuer: /CN=b57c8ac055c574d8cf13522b964b92314d211eae
Certificate serial: 019A4DE1F2798589A125670D1CA5BA6CFA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
Manifest number: 1459
Signing time: Tue 04 Nov 2025 08:00:44 +0000
Manifest this update: Tue 04 Nov 2025 08:00:44 +0000
Manifest next update: Wed 05 Nov 2025 08:00:44 +0000
Files and hashes: 1: tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl (hash: zE4Lm4W9jL2r5E6n4q9/d9m0gx1JD3BtRU8Kwasap3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f2:79:85:89:a1:25:67:0d:1c:a5:ba:6c:fa:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c8ac055c574d8cf13522b964b92314d211eae
Validity
Not Before: Nov 4 08:00:44 2025 GMT
Not After : Nov 5 08:00:44 2025 GMT
Subject: CN=ff3196355fe4affc3520d37137e5a0f004f5f4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:65:91:b6:db:d4:75:12:96:07:fa:c5:9e:
be:31:a4:6e:69:ab:bc:07:14:8c:97:6e:b2:94:7f:
af:91:1d:2e:92:d6:0a:5b:01:90:60:e3:90:7a:28:
5a:2c:34:05:5c:34:34:b4:7e:cd:70:bf:ad:69:fa:
0b:cf:22:89:35:9a:17:c5:fd:08:51:f1:18:75:e5:
20:82:fe:5b:49:51:86:a0:25:7f:45:b3:c3:5e:ce:
1b:72:2f:14:b8:ff:94:6c:77:0a:76:ff:ef:9c:de:
12:7e:ae:83:7a:31:8a:5a:be:2e:15:2f:7a:2f:f6:
fd:4b:fc:83:8d:71:ce:51:0e:43:8b:b0:c9:b1:ec:
d9:38:33:f8:19:05:ce:52:27:4a:ae:e2:ab:ed:1c:
b8:f0:c2:78:28:f8:b4:14:10:20:ed:15:10:5c:e9:
0c:5b:34:33:64:f5:69:08:0c:10:cf:b8:32:27:6e:
82:9e:cc:4f:5d:e0:b2:cf:38:7a:02:6c:2d:03:3e:
07:84:4e:9b:71:37:75:03:0e:a9:4b:63:fc:20:89:
c3:cb:1d:7a:b6:44:dc:c9:b7:b1:5e:fb:da:fa:da:
88:fd:7e:34:2c:61:5e:2c:0b:2a:a0:6f:8b:07:d4:
fe:9d:ad:02:b2:37:6e:9d:ad:5e:ca:fb:45:bc:35:
e2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:31:96:35:5F:E4:AF:FC:35:20:D3:71:37:E5:A0:F0:04:F5:F4:A8
X509v3 Authority Key Identifier:
keyid:B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d4:34:80:d8:fe:fb:21:bf:5c:4e:dd:6e:6e:4e:7b:34:bd:
67:de:57:4d:af:41:ac:6e:73:5f:21:f9:60:8e:c0:c6:43:c2:
84:15:6b:ab:65:23:39:04:60:b2:b4:4e:b7:7d:b4:d8:6e:0f:
5b:87:49:a5:d8:06:cb:11:e7:e6:0b:ed:be:10:88:4b:19:4b:
69:79:c9:18:62:5e:a2:e3:ae:d5:25:f7:f7:74:dc:a4:89:e9:
4d:6c:a4:48:d6:93:46:94:a9:aa:a7:f2:a6:93:cd:9a:67:bb:
88:99:ef:f6:01:01:f9:25:a9:66:d5:eb:e7:d7:02:7b:cd:88:
d7:da:e6:35:60:38:8b:f0:5f:48:5b:fa:ab:ff:37:20:a8:0c:
73:fc:eb:71:5b:24:40:d9:1b:5c:f6:80:f6:19:6f:5b:dc:fc:
d7:fe:38:3b:01:41:69:5d:59:de:f3:bb:96:e8:81:98:55:57:
79:80:96:b7:fa:90:fa:ae:36:d1:45:b9:fa:2d:8b:2e:6d:c9:
ac:4f:25:93:dc:8b:0b:40:aa:94:74:3a:52:bf:e4:3a:d6:90:
54:14:3d:4d:d3:f5:77:55:4b:e4:49:88:78:b6:b6:6c:0d:85:
38:8f:73:39:4c:04:12:3b:ec:fe:27:2e:90:bc:c6:30:0f:00:
43:5f:38:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4fJ5hYmhJWcNHKW6bPoPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1N2M4YWMwNTVjNTc0ZDhjZjEzNTIyYjk2NGI5MjMxNGQy
MTFlYWUwHhcNMjUxMTA0MDgwMDQ0WhcNMjUxMTA1MDgwMDQ0WjAzMTEwLwYDVQQD
EyhmZjMxOTYzNTVmZTRhZmZjMzUyMGQzNzEzN2U1YTBmMDA0ZjVmNGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/Zlkbbb1HUSlgf6xZ6+MaRuaau8
BxSMl26ylH+vkR0uktYKWwGQYOOQeihaLDQFXDQ0tH7NcL+tafoLzyKJNZoXxf0I
UfEYdeUggv5bSVGGoCV/RbPDXs4bci8UuP+UbHcKdv/vnN4Sfq6DejGKWr4uFS96
L/b9S/yDjXHOUQ5Di7DJsezZODP4GQXOUidKruKr7Ry48MJ4KPi0FBAg7RUQXOkM
WzQzZPVpCAwQz7gyJ26CnsxPXeCyzzh6AmwtAz4HhE6bcTd1Aw6pS2P8IInDyx16
tkTcybexXvva+tqI/X40LGFeLAsqoG+LB9T+na0Csjduna1eyvtFvDXiIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8xljVf5K/8NSDTcTfloPAE9fSoMB8GA1UdIwQY
MBaAFLV8isBVxXTYzxNSK5ZLkjFNIR6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFh5S3dGWEZkTmpQRTFJcmxrdVNNVTBoSHE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8yODlmNDAtYTIzMy00YzYzLWI5M2Ut
OGU0YzdjN2I2NTA0LzEvdFh5S3dGWEZkTmpQRTFJcmxrdVNNVTBoSHE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8yODlmNDAtYTIzMy00YzYzLWI5M2UtOGU0YzdjN2I2NTA0
LzEvdFh5S3dGWEZkTmpQRTFJcmxrdVNNVTBoSHE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNQ0gNj+
+yG/XE7dbm5OezS9Z95XTa9BrG5zXyH5YI7AxkPChBVrq2UjOQRgsrROt3202G4P
W4dJpdgGyxHn5gvtvhCISxlLaXnJGGJeouOu1SX393TcpInpTWykSNaTRpSpqqfy
ppPNmme7iJnv9gEB+SWpZtXr59cCe82I19rmNWA4i/BfSFv6q/83IKgMc/zrcVsk
QNkbXPaA9hlvW9z81/44OwFBaV1Z3vO7luiBmFVXeYCWt/qQ+q420UW5+i2LLm3J
rE8lk9yLC0CqlHQ6Ur/kOtaQVBQ9TdP1d1VL5EmIeLa2bA2FOI9zOUwEEjvs/icu
kLzGMA8AQ184zg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:02 2025 by rpki-client