Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
File: TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft (raw, json)
Hash identifier: GyUijZeC1WWFF/bRPRjwQPtdZrFqfbErUfwBOGucFi4=
Subject key identifier: 2C:12:9D:2B:7D:0B:70:ED:F6:EF:C2:BD:FB:82:EF:FC:8C:6E:B6:82
Authority key identifier: 4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
Certificate issuer: /CN=4c216f66560ae16ba7594f46af060f351e0eb49e
Certificate serial: 019A51F53717A3B5A149B2DF44AD50F89658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
Manifest number: 0D39
Signing time: Wed 05 Nov 2025 03:00:15 +0000
Manifest this update: Wed 05 Nov 2025 03:00:15 +0000
Manifest next update: Thu 06 Nov 2025 03:00:15 +0000
Files and hashes: 1: MhvE3qmmLRT0N7DSbTLw9Csy23Q.roa (hash: JVGSBwpVFJHRhnHW5L6AwZ0tkeTLczM6lU9i030j0HQ=)
2: TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl (hash: 5Lps9c/tidKCV6lzgf/A2m+utM1Z/087rWO/1vX8Dzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:37:17:a3:b5:a1:49:b2:df:44:ad:50:f8:96:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c216f66560ae16ba7594f46af060f351e0eb49e
Validity
Not Before: Nov 5 03:00:15 2025 GMT
Not After : Nov 6 03:00:15 2025 GMT
Subject: CN=2c129d2b7d0b70edf6efc2bdfb82effc8c6eb682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:d3:3c:a4:ed:36:a9:9b:f8:75:85:25:38:
42:2e:49:32:ae:5b:2d:73:09:cc:50:bd:06:64:31:
f0:b8:f4:09:34:99:dc:ca:a0:b1:2e:48:7f:e7:53:
24:ae:ca:00:d5:57:cd:1b:66:cd:c5:fe:b5:dd:41:
a0:fc:6a:e4:76:40:0f:81:de:79:6e:19:3c:e6:b5:
82:dc:ef:df:52:f3:ad:80:f1:05:84:04:4b:7d:50:
37:10:d0:4d:36:7f:4b:c5:f2:73:2e:00:f9:19:d4:
0e:f1:43:67:3c:45:2e:4f:c6:87:b6:a5:5a:a2:f4:
01:ed:30:04:18:f5:b9:de:a3:ac:8d:a5:6a:33:f7:
34:ff:3e:8d:54:e1:da:8b:ff:ad:12:d6:c6:7e:b6:
7c:2d:f4:1e:4b:d9:29:ac:44:54:31:f9:46:d4:2a:
dd:d2:a1:4e:ab:4d:ac:2c:3f:45:e8:3f:af:f9:9b:
05:bb:48:37:47:f5:bd:60:34:60:85:bf:bf:04:41:
54:20:c2:26:2a:ed:4a:b9:17:2b:f0:57:99:7a:a7:
2f:5b:dc:5a:cf:63:ed:88:e8:a5:d7:4e:8e:e7:b0:
87:89:75:6f:0b:c5:12:15:3f:b3:65:e6:47:72:e6:
bc:2d:82:0b:59:8c:0e:7f:c4:08:f0:e3:6c:fa:46:
01:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:12:9D:2B:7D:0B:70:ED:F6:EF:C2:BD:FB:82:EF:FC:8C:6E:B6:82
X509v3 Authority Key Identifier:
keyid:4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:68:3e:42:20:d5:df:6e:02:dc:45:34:fe:7e:c5:b9:47:6c:
a4:3a:4f:7a:c9:b8:55:19:49:f9:af:f9:fd:08:b3:d8:a5:f2:
d5:99:2d:b7:19:e7:ce:27:01:fb:ac:bc:b9:13:da:2d:57:73:
63:0d:0e:70:a0:e7:9a:1a:1c:7c:74:9c:31:a5:b7:e3:ae:96:
f6:38:71:c4:41:56:48:ca:68:48:18:8a:45:3e:1b:b5:f0:a7:
11:5f:9c:e7:95:82:e4:73:c0:94:70:01:2e:b7:50:54:ab:ce:
0c:b7:51:86:e6:f4:a7:77:e0:76:e7:af:ed:9e:84:ae:76:83:
73:c7:4e:ff:11:e2:b5:fb:55:ac:74:41:59:a0:8c:8b:80:70:
50:76:af:f8:17:45:61:78:f7:9e:ac:75:c7:ae:1b:be:45:d5:
2b:07:39:9f:38:91:47:96:ba:58:56:01:4e:22:64:7f:c2:78:
b7:e1:44:62:59:45:7f:9b:e5:fd:9f:0d:d6:c6:d7:f3:d6:9d:
eb:11:ed:c2:ad:10:a9:7d:ff:21:f1:76:48:61:a3:d2:48:ec:
8e:be:85:9e:25:d4:c5:65:c4:20:dc:09:8e:d0:1c:c7:f4:8f:
ea:d2:6a:3c:aa:c6:25:58:00:d5:fc:63:88:d2:f5:a5:c8:51:
48:f5:ca:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9TcXo7WhSbLfRK1Q+JZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMjE2ZjY2NTYwYWUxNmJhNzU5NGY0NmFmMDYwZjM1MWUw
ZWI0OWUwHhcNMjUxMTA1MDMwMDE1WhcNMjUxMTA2MDMwMDE1WjAzMTEwLwYDVQQD
EygyYzEyOWQyYjdkMGI3MGVkZjZlZmMyYmRmYjgyZWZmYzhjNmViNjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqjTPKTtNqmb+HWFJThCLkkyrlst
cwnMUL0GZDHwuPQJNJncyqCxLkh/51MkrsoA1VfNG2bNxf613UGg/GrkdkAPgd55
bhk85rWC3O/fUvOtgPEFhARLfVA3ENBNNn9LxfJzLgD5GdQO8UNnPEUuT8aHtqVa
ovQB7TAEGPW53qOsjaVqM/c0/z6NVOHai/+tEtbGfrZ8LfQeS9kprERUMflG1Crd
0qFOq02sLD9F6D+v+ZsFu0g3R/W9YDRghb+/BEFUIMImKu1KuRcr8FeZeqcvW9xa
z2PtiOil106O57CHiXVvC8USFT+zZeZHcua8LYILWYwOf8QI8ONs+kYBcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwSnSt9C3Dt9u/CvfuC7/yMbraCMB8GA1UdIwQY
MBaAFEwhb2ZWCuFrp1lPRq8GDzUeDrSeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVENGdlpsWUs0V3VuV1U5R3J3WVBOUjRPdEo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82NTY0NmYtYmVhNC00ZjkzLTk2YmUt
NDhmZWEzNDVmYTEzLzEvVENGdlpsWUs0V3VuV1U5R3J3WVBOUjRPdEo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi82NTY0NmYtYmVhNC00ZjkzLTk2YmUtNDhmZWEzNDVmYTEz
LzEvVENGdlpsWUs0V3VuV1U5R3J3WVBOUjRPdEo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWg+QiDV
324C3EU0/n7FuUdspDpPesm4VRlJ+a/5/Qiz2KXy1ZkttxnnzicB+6y8uRPaLVdz
Yw0OcKDnmhocfHScMaW3466W9jhxxEFWSMpoSBiKRT4btfCnEV+c55WC5HPAlHAB
LrdQVKvODLdRhub0p3fgduev7Z6ErnaDc8dO/xHitftVrHRBWaCMi4BwUHav+BdF
YXj3nqx1x64bvkXVKwc5nziRR5a6WFYBTiJkf8J4t+FEYllFf5vl/Z8N1sbX89ad
6xHtwq0QqX3/IfF2SGGj0kjsjr6FniXUxWXEINwJjtAcx/SP6tJqPKrGJVgA1fxj
iNL1pchRSPXKfw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:55:17 2025 by rpki-client