Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json)
Hash identifier: EjeCl6KRcWfEzJExSM2YbvBLKxrXg1RAf99OEtMXipc=
Subject key identifier: 3C:8F:91:17:3A:DC:FA:30:03:44:92:8C:B4:F2:00:30:05:DA:BC:10
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial: 019A50E3D4397E1ECC2043B2BD52420E6E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
Manifest number: 099E
Signing time: Tue 04 Nov 2025 22:01:39 +0000
Manifest this update: Tue 04 Nov 2025 22:01:39 +0000
Manifest next update: Wed 05 Nov 2025 22:01:39 +0000
Files and hashes: 1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: vK0JDWFQXVaEop5BaPPWqGEJVarkborDph+z8fl4VJU=)
2: k88eKZ3ggVkstFfz6v9jAollFdM.roa (hash: RToXutf5Qdv2Y+G73kPgZr6gfiGthSFW8G2eqnaoH64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:d4:39:7e:1e:cc:20:43:b2:bd:52:42:0e:6e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
Validity
Not Before: Nov 4 22:01:39 2025 GMT
Not After : Nov 5 22:01:39 2025 GMT
Subject: CN=3c8f91173adcfa300344928cb4f2003005dabc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:e0:84:56:f3:ab:be:84:1c:08:11:ed:10:
07:1a:41:bb:df:f2:39:46:51:b1:8f:b4:6b:08:f5:
c1:8d:a5:54:42:58:1e:dd:47:50:ef:f6:4b:63:e3:
f4:cd:b8:5f:23:aa:25:75:a5:95:30:c8:29:1c:52:
d8:a5:10:34:88:fe:c5:c6:12:73:34:16:ed:67:f2:
f8:ea:b9:18:6a:ab:06:73:fb:0c:76:23:81:6f:39:
9a:66:ae:88:4d:82:73:d5:a1:30:0c:8d:d7:75:7b:
de:23:fa:e8:b6:b0:73:84:9e:c9:1c:e0:04:7c:fb:
7c:4a:7b:26:3a:6d:c2:f5:8c:d7:db:36:95:fb:cf:
6b:35:22:64:60:85:93:79:f9:63:a6:f9:fa:12:2b:
22:52:06:8a:dc:e4:99:4a:06:b3:9b:1b:8c:70:28:
ed:6d:b8:00:0f:a0:ac:09:f3:99:52:70:d9:84:62:
64:9a:3e:2d:a0:fd:57:90:da:8a:64:d0:4b:49:1c:
1d:42:94:c4:bb:be:30:2b:c4:b8:6b:39:ea:8b:8d:
d8:7a:af:55:df:6b:23:e8:59:bd:40:34:6d:37:6b:
b3:36:1c:8f:6f:82:87:05:a9:2c:a1:f2:d9:ab:89:
f9:4c:1b:c2:3f:7e:a8:8f:94:1b:b7:2e:7f:76:09:
41:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8F:91:17:3A:DC:FA:30:03:44:92:8C:B4:F2:00:30:05:DA:BC:10
X509v3 Authority Key Identifier:
keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:bc:ca:01:0f:46:85:33:55:71:c0:14:63:86:85:2a:3a:df:
44:8e:92:98:e3:81:09:ad:ea:cd:af:4d:2d:5f:bc:57:73:33:
93:9e:9f:e3:e2:a6:84:9a:dd:b2:97:bc:cd:15:1a:ab:88:1e:
ce:82:bd:1a:da:a0:06:73:7d:01:be:b9:d4:75:57:e5:92:2d:
e1:e5:87:59:a5:39:e2:f0:47:fa:01:80:e2:42:3a:ac:73:3f:
f5:52:ee:26:a9:4e:f2:7a:bb:8a:07:32:58:cf:8b:0b:1b:43:
68:eb:e4:a8:01:64:ca:ab:bc:1b:ae:e3:a0:9f:68:89:c0:19:
76:ff:07:d3:bd:a9:91:16:73:ec:04:b5:e8:9b:60:bc:39:5f:
d2:0b:8b:ee:97:f2:c2:f4:d6:d5:09:a9:ff:7c:53:c0:92:a6:
2d:d0:2f:f4:52:33:c5:3f:ab:a5:52:49:db:00:91:ab:f5:3e:
1d:f8:5d:d2:5b:93:26:74:05:a7:94:18:a5:1a:fa:09:2f:59:
cb:4c:09:a7:3b:e4:09:13:66:a1:de:4a:46:fb:2c:73:f6:19:
f9:37:0d:8b:e4:6b:f7:38:f7:d3:8e:eb:9b:72:9a:17:c8:7c:
f7:b1:4e:45:27:e6:47:fb:c7:70:4c:1e:a8:1e:84:1c:a0:85:
08:a9:39:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ49Q5fh7MIEOyvVJCDm6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNTE2MzZmZGU5MDVmODUyMWY0MTE0NzllODEzMjFjZGNm
NDkwNDkwHhcNMjUxMTA0MjIwMTM5WhcNMjUxMTA1MjIwMTM5WjAzMTEwLwYDVQQD
EygzYzhmOTExNzNhZGNmYTMwMDM0NDkyOGNiNGYyMDAzMDA1ZGFiYzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs67ghFbzq76EHAgR7RAHGkG73/I5
RlGxj7RrCPXBjaVUQlge3UdQ7/ZLY+P0zbhfI6oldaWVMMgpHFLYpRA0iP7FxhJz
NBbtZ/L46rkYaqsGc/sMdiOBbzmaZq6ITYJz1aEwDI3XdXveI/rotrBzhJ7JHOAE
fPt8SnsmOm3C9YzX2zaV+89rNSJkYIWTefljpvn6EisiUgaK3OSZSgazmxuMcCjt
bbgAD6CsCfOZUnDZhGJkmj4toP1XkNqKZNBLSRwdQpTEu74wK8S4aznqi43Yeq9V
32sj6Fm9QDRtN2uzNhyPb4KHBaksofLZq4n5TBvCP36oj5Qbty5/dglBFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyPkRc63PowA0SSjLTyADAF2rwQMB8GA1UdIwQY
MBaAFExRY2/ekF+FIfQRR56BMhzc9JBJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84MDA4ZmUtMTc1Yi00MWJmLWIxZDYt
MmNlMGViNDU4Nzg4LzEvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84MDA4ZmUtMTc1Yi00MWJmLWIxZDYtMmNlMGViNDU4Nzg4
LzEvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtrzKAQ9G
hTNVccAUY4aFKjrfRI6SmOOBCa3qza9NLV+8V3Mzk56f4+KmhJrdspe8zRUaq4ge
zoK9GtqgBnN9Ab651HVX5ZIt4eWHWaU54vBH+gGA4kI6rHM/9VLuJqlO8nq7igcy
WM+LCxtDaOvkqAFkyqu8G67joJ9oicAZdv8H072pkRZz7AS16JtgvDlf0guL7pfy
wvTW1Qmp/3xTwJKmLdAv9FIzxT+rpVJJ2wCRq/U+Hfhd0luTJnQFp5QYpRr6CS9Z
y0wJpzvkCRNmod5KRvssc/YZ+TcNi+Rr9zj3047rm3KaF8h897FORSfmR/vHcEwe
qB6EHKCFCKk5gw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:15:28 2025 by rpki-client