
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
File: TE6QpGzZL4_8sZJLk7cdG60xMBI.mft (raw, json)
Hash identifier: IhuqHpQqCaYg5vohdXNDLuVxbaZGFA4J4VGHCru7V0o=
Subject key identifier: 25:DF:86:90:B4:63:62:2C:CD:E1:B1:E4:31:3D:F6:53:E9:32:7F:91
Authority key identifier: 4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12
Certificate issuer: /CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
Certificate serial: 019A4FCFC859992369D251D2C7D99D6C445C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
Manifest number: 0F0B
Signing time: Tue 04 Nov 2025 17:00:08 +0000
Manifest this update: Tue 04 Nov 2025 17:00:08 +0000
Manifest next update: Wed 05 Nov 2025 17:00:08 +0000
Files and hashes: 1: TE6QpGzZL4_8sZJLk7cdG60xMBI.crl (hash: b5dxt3QZTVr44b/UuXT9bUWvbikLpf1XvxZY10vMqGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:c8:59:99:23:69:d2:51:d2:c7:d9:9d:6c:44:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
Validity
Not Before: Nov 4 17:00:08 2025 GMT
Not After : Nov 5 17:00:08 2025 GMT
Subject: CN=25df8690b463622ccde1b1e4313df653e9327f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:87:2e:e2:a9:38:25:f2:0f:88:d8:9e:f4:
7d:39:6c:d4:08:95:04:39:49:f1:a0:1a:3a:85:b8:
0c:4a:a3:e5:30:b1:2f:68:df:9a:dd:24:8e:44:fd:
91:63:3d:24:ae:d8:61:fa:aa:3e:6d:cd:a0:38:35:
f5:13:b4:89:1b:a2:3d:61:fc:54:2c:95:26:56:b2:
36:a7:35:5a:90:aa:b5:1c:6c:f3:6f:af:29:d5:ea:
45:b7:d9:26:0b:58:f3:c1:f7:46:e4:52:ab:9b:27:
8d:35:f6:02:bf:63:8c:16:3c:93:08:86:b8:23:8b:
d8:81:21:6a:05:5a:4c:53:5e:d1:89:c7:a9:97:13:
87:57:e3:2e:41:65:bb:6b:83:95:15:68:49:49:6b:
5f:51:03:35:81:f1:2f:38:d2:63:0e:f1:d2:72:a1:
4c:96:40:cc:17:5a:44:fc:5d:dc:a9:5c:38:f0:67:
c2:54:33:68:66:fe:11:9e:f8:4a:7e:2f:bc:e3:a5:
6e:47:c8:2e:91:43:2f:d2:46:40:5d:3a:e0:4c:05:
b9:98:c0:a3:dd:23:d5:1e:a3:5c:88:5b:ae:aa:ca:
08:ec:d7:b7:70:61:21:6a:a8:c6:6f:92:8e:c6:c2:
71:fa:86:fd:85:05:a9:f5:96:74:1e:f1:7d:bf:7b:
c1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DF:86:90:B4:63:62:2C:CD:E1:B1:E4:31:3D:F6:53:E9:32:7F:91
X509v3 Authority Key Identifier:
keyid:4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ef:13:00:7e:ce:ab:09:6d:67:a8:73:55:ad:88:c9:bc:88:
23:1a:e6:56:7d:28:5b:60:50:fd:6b:34:b5:33:32:61:d3:a3:
55:20:4c:b1:a4:bb:0b:b5:a3:dc:0e:c1:1d:f2:e7:6f:a0:e6:
c8:51:b1:61:82:fe:22:24:ef:f3:20:3a:cb:84:ba:c3:7a:09:
2e:c4:f2:f2:bf:bd:14:c0:66:f7:d7:e0:0b:7e:83:85:76:ae:
f9:54:35:2e:b5:a8:7f:79:cb:59:52:1d:c6:cb:0e:dd:1b:bb:
40:97:41:4e:db:b6:05:d7:f1:d5:31:5c:e8:97:25:2d:ce:57:
e8:7e:1a:93:1d:16:ed:de:44:43:f6:cc:7a:e8:42:14:40:c7:
4a:7a:b7:15:0d:2c:1c:ad:e0:58:48:fb:4c:13:aa:33:7e:9d:
40:f0:35:35:d8:bd:9d:c2:4d:04:a2:ce:37:4e:99:9a:69:3b:
61:28:24:7e:a6:a8:82:95:c3:70:2a:b5:47:9e:3d:e8:42:69:
e3:a5:a3:a6:5d:76:82:a9:4a:5d:83:ed:1a:8d:da:f9:24:d8:
d2:f4:b8:09:90:56:93:ef:3b:0e:95:4d:43:ee:b2:9f:52:e5:
82:be:f1:93:f8:ef:06:45:f5:fa:e5:fa:c3:c4:19:ee:19:3c:
dc:be:b9:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz8hZmSNp0lHSx9mdbERcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNGU5MGE0NmNkOTJmOGZmY2IxOTI0YjkzYjcxZDFiYWQz
MTMwMTIwHhcNMjUxMTA0MTcwMDA4WhcNMjUxMTA1MTcwMDA4WjAzMTEwLwYDVQQD
EygyNWRmODY5MGI0NjM2MjJjY2RlMWIxZTQzMTNkZjY1M2U5MzI3ZjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7OHLuKpOCXyD4jYnvR9OWzUCJUE
OUnxoBo6hbgMSqPlMLEvaN+a3SSORP2RYz0krthh+qo+bc2gODX1E7SJG6I9YfxU
LJUmVrI2pzVakKq1HGzzb68p1epFt9kmC1jzwfdG5FKrmyeNNfYCv2OMFjyTCIa4
I4vYgSFqBVpMU17RiceplxOHV+MuQWW7a4OVFWhJSWtfUQM1gfEvONJjDvHScqFM
lkDMF1pE/F3cqVw48GfCVDNoZv4RnvhKfi+846VuR8gukUMv0kZAXTrgTAW5mMCj
3SPVHqNciFuuqsoI7Ne3cGEhaqjGb5KOxsJx+ob9hQWp9ZZ0HvF9v3vBcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXfhpC0Y2IszeGx5DE99lPpMn+RMB8GA1UdIwQY
MBaAFExOkKRs2S+P/LGSS5O3HRutMTASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jMjdlZWMtNzE0MS00NTc1LTlhNmYt
YzQ1NzI4YzU2ZjNiLzEvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9jMjdlZWMtNzE0MS00NTc1LTlhNmYtYzQ1NzI4YzU2ZjNi
LzEvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABO8TAH7O
qwltZ6hzVa2IybyIIxrmVn0oW2BQ/Ws0tTMyYdOjVSBMsaS7C7Wj3A7BHfLnb6Dm
yFGxYYL+IiTv8yA6y4S6w3oJLsTy8r+9FMBm99fgC36DhXau+VQ1LrWof3nLWVId
xssO3Ru7QJdBTtu2Bdfx1TFc6JclLc5X6H4akx0W7d5EQ/bMeuhCFEDHSnq3FQ0s
HK3gWEj7TBOqM36dQPA1Ndi9ncJNBKLON06Zmmk7YSgkfqaogpXDcCq1R5496EJp
46Wjpl12gqlKXYPtGo3a+STY0vS4CZBWk+87DpVNQ+6yn1Llgr7xk/jvBkX1+uX6
w8QZ7hk83L65sA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:01:17 2025 by rpki-client