Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
File: TO1MeGdCnuAvXNwa--qlunEzYAg.mft (raw, json)
Hash identifier: s6GdgC1oe/hoxrsT5uBRdFTXv36W6Ldyl9EvLryT1jc=
Subject key identifier: BE:BD:8D:0B:C1:A8:7B:B9:B9:D7:4A:23:5E:A8:C9:64:C4:64:BF:FC
Authority key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
Certificate issuer: /CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Certificate serial: 019A52D1DA982A0764A971A86548ED3887B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 07:01:15 +0000
Manifest this update: Wed 05 Nov 2025 07:01:15 +0000
Manifest next update: Thu 06 Nov 2025 07:01:15 +0000
Files and hashes: 1: TO1MeGdCnuAvXNwa--qlunEzYAg.crl (hash: gtHik2C/PjKK9awQzGv8E3G17xJsWsuZazxrsvrHpPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:da:98:2a:07:64:a9:71:a8:65:48:ed:38:87:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Validity
Not Before: Nov 5 07:01:15 2025 GMT
Not After : Nov 6 07:01:15 2025 GMT
Subject: CN=bebd8d0bc1a87bb9b9d74a235ea8c964c464bffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:44:d1:82:05:a1:44:25:5f:08:9e:8c:44:
01:ff:e1:b8:cc:e0:02:8a:d4:5c:ac:1a:28:0d:0d:
eb:c8:79:f2:f8:3e:50:f3:7f:f9:6b:ca:4b:a3:4c:
e1:8b:3c:d3:b0:17:ad:7a:68:7c:0a:80:cf:06:94:
c1:b6:6f:b4:13:63:4b:4b:1e:4e:f0:3b:64:14:da:
ae:68:59:6e:d1:06:5d:7d:3c:a0:8d:aa:94:e7:63:
fe:50:b6:18:0a:2d:12:e9:f0:47:47:5a:6d:f1:51:
49:ed:4d:ee:c1:bb:6c:2f:0d:a1:7c:4e:5b:f7:69:
33:6b:45:a4:10:cd:8c:a0:63:61:fb:61:da:5b:41:
36:78:00:03:64:36:3f:39:27:d2:76:6d:d2:dc:8a:
d0:29:6d:85:04:87:91:a5:88:ab:93:eb:e3:79:c5:
45:c3:81:19:d8:b5:4c:c3:48:12:81:50:00:7f:9d:
69:97:6c:8a:7e:f3:a7:86:d0:59:b6:05:57:d2:8a:
f8:2f:00:73:11:5f:67:b0:db:b0:ae:10:65:ad:fb:
37:dd:f8:eb:fb:d1:ff:1c:0b:ec:d3:13:a0:b4:b2:
90:26:fc:17:0a:86:1e:d0:43:f1:ab:b1:dd:6f:85:
a2:49:9b:37:77:64:ab:4f:f0:b7:61:04:01:bf:e4:
69:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BD:8D:0B:C1:A8:7B:B9:B9:D7:4A:23:5E:A8:C9:64:C4:64:BF:FC
X509v3 Authority Key Identifier:
keyid:4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f9:6b:14:ce:8a:be:fb:99:4f:d2:ea:31:1c:22:71:74:e4:
9b:bc:8a:fd:79:15:cc:6c:b8:63:5f:0e:61:4d:fb:d1:1e:fb:
c3:12:be:54:cf:90:bf:c3:bb:65:99:14:f6:ef:cc:f8:34:96:
5f:d1:07:2b:40:86:8c:cc:20:69:ec:6c:4f:d8:f4:a8:2f:d1:
31:9a:fa:49:ae:c3:b2:74:54:7b:ab:12:c0:33:24:81:99:e8:
72:e9:36:71:d1:2d:5e:78:76:bb:ad:a6:61:8a:22:06:b0:03:
f5:8c:b4:67:43:9f:83:97:3d:97:b0:ba:36:97:a3:1f:30:b0:
c3:c8:54:61:a8:5a:eb:cf:b8:28:2d:46:2a:9f:ce:24:92:f4:
56:5a:65:06:6d:ea:be:59:4b:15:c8:35:b6:f6:62:46:4b:91:
5d:3e:f1:12:90:27:ae:94:b3:53:35:53:f8:a7:81:60:04:67:
d3:b5:b6:ee:40:ad:24:0f:0c:0f:c1:e9:20:e2:e3:37:8c:90:
de:f7:fc:0e:4d:be:3e:5a:ec:b5:e3:d4:22:60:84:3d:bd:47:
12:12:2b:5f:91:66:e3:7d:01:a3:95:a5:b8:f6:3c:00:32:cf:
7a:ad:ab:78:47:9c:8d:ca:45:b3:8b:96:25:8f:99:36:b9:8e:
e4:1a:be:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0dqYKgdkqXGoZUjtOIe2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZWQ0Yzc4Njc0MjllZTAyZjVjZGMxYWZiZWFhNWJhNzEz
MzYwMDgwHhcNMjUxMTA1MDcwMTE1WhcNMjUxMTA2MDcwMTE1WjAzMTEwLwYDVQQD
EyhiZWJkOGQwYmMxYTg3YmI5YjlkNzRhMjM1ZWE4Yzk2NGM0NjRiZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNBE0YIFoUQlXwiejEQB/+G4zOAC
itRcrBooDQ3ryHny+D5Q83/5a8pLo0zhizzTsBetemh8CoDPBpTBtm+0E2NLSx5O
8DtkFNquaFlu0QZdfTygjaqU52P+ULYYCi0S6fBHR1pt8VFJ7U3uwbtsLw2hfE5b
92kza0WkEM2MoGNh+2HaW0E2eAADZDY/OSfSdm3S3IrQKW2FBIeRpYirk+vjecVF
w4EZ2LVMw0gSgVAAf51pl2yKfvOnhtBZtgVX0or4LwBzEV9nsNuwrhBlrfs33fjr
+9H/HAvs0xOgtLKQJvwXCoYe0EPxq7Hdb4WiSZs3d2SrT/C3YQQBv+RpxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL69jQvBqHu5uddKI16oyWTEZL/8MB8GA1UdIwQY
MBaAFEztTHhnQp7gL1zcGvvqpbpxM2AIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE8xTWVHZENudUF2WE53YS0tcWx1bkV6WUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83NmQ2ZjEtN2ZmYi00MzAxLTkzMTAt
MTYwY2RlODhlZDNmLzEvVE8xTWVHZENudUF2WE53YS0tcWx1bkV6WUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83NmQ2ZjEtN2ZmYi00MzAxLTkzMTAtMTYwY2RlODhlZDNm
LzEvVE8xTWVHZENudUF2WE53YS0tcWx1bkV6WUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/lrFM6K
vvuZT9LqMRwicXTkm7yK/XkVzGy4Y18OYU370R77wxK+VM+Qv8O7ZZkU9u/M+DSW
X9EHK0CGjMwgaexsT9j0qC/RMZr6Sa7DsnRUe6sSwDMkgZnocuk2cdEtXnh2u62m
YYoiBrAD9Yy0Z0Ofg5c9l7C6NpejHzCww8hUYaha68+4KC1GKp/OJJL0VlplBm3q
vllLFcg1tvZiRkuRXT7xEpAnrpSzUzVT+KeBYARn07W27kCtJA8MD8HpIOLjN4yQ
3vf8Dk2+PlrstePUImCEPb1HEhIrX5Fm430Bo5WluPY8ADLPeq2reEecjcpFs4uW
JY+ZNrmO5Bq+CQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:18 2025 by rpki-client