Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File: TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier: oJUp5MHy8SCoOoI5jkt3MR+VhqJ7RepJ8DwKLGAroAA=
Subject key identifier: 64:30:F7:C1:32:3A:C9:08:1B:5A:6B:18:80:69:12:26:BB:B3:02:40
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial: 019A4E18A3F94D5D754AEFB36B3B66534BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number: 0AFC
Signing time: Tue 04 Nov 2025 09:00:28 +0000
Manifest this update: Tue 04 Nov 2025 09:00:28 +0000
Manifest next update: Wed 05 Nov 2025 09:00:28 +0000
Files and hashes: 1: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: /jnVxuI4FnXUvKQFrMKC9IaZoaEEPyack2DVV85f5zQ=)
2: nXGx5bSqdUW_hrhQiJHYlpD8vR8.roa (hash: BZPTD4TDsLLlN6D+oiM71I+DEGQ39DwwkOK3NvmzOh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:a3:f9:4d:5d:75:4a:ef:b3:6b:3b:66:53:4b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Validity
Not Before: Nov 4 09:00:28 2025 GMT
Not After : Nov 5 09:00:28 2025 GMT
Subject: CN=6430f7c1323ac9081b5a6b1880691226bbb30240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:59:b8:df:de:9d:5b:41:8e:3c:9f:70:d6:
f6:ae:a5:32:80:a7:86:37:a1:79:ad:1a:92:73:a9:
a0:9d:7e:d3:7c:09:2c:bc:06:80:84:0d:5a:f0:28:
49:ef:60:79:09:42:4e:c4:a8:04:ef:6b:d5:e6:b1:
f3:d8:df:bb:92:80:21:cf:2d:2f:4f:3d:e6:ba:d0:
ca:d5:31:95:d5:03:86:d7:12:d4:36:34:95:d6:aa:
e5:ed:1a:0a:ba:c4:aa:74:ba:8f:7a:8f:92:49:b5:
2c:df:0b:40:b1:f8:bb:de:1e:bc:b4:d2:93:51:ac:
1e:38:96:f5:8e:c3:4d:19:63:42:ed:92:6e:67:c2:
70:38:f4:47:28:34:78:52:1c:7f:cd:8e:77:ba:3b:
f0:e5:7f:67:a3:a4:58:8a:ce:87:fd:10:52:02:da:
b5:22:25:76:ea:18:72:1c:8b:e9:3b:58:87:9e:e2:
bb:5e:e1:cf:9a:3a:4c:32:f6:07:3b:a6:6c:6b:6b:
df:cc:f0:8c:b8:71:4f:e9:b8:84:07:f1:4e:81:74:
1b:64:9b:97:18:8e:34:a6:78:25:55:9f:c0:ca:6f:
6a:eb:d3:ea:94:35:73:fd:fa:62:ce:61:95:da:07:
4c:d9:1f:39:ec:5f:78:5d:24:0b:82:4e:0f:47:92:
5d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:30:F7:C1:32:3A:C9:08:1B:5A:6B:18:80:69:12:26:BB:B3:02:40
X509v3 Authority Key Identifier:
keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b9:a1:d4:8a:82:5d:32:f0:4c:fe:61:2b:74:c6:a8:a4:87:
c6:ae:1f:33:fb:8d:42:93:c8:46:3f:f8:48:9d:66:16:93:68:
73:39:6e:4b:a0:ca:73:be:f6:8f:64:80:e2:2f:cb:6a:54:47:
1a:f3:fc:9f:41:94:2d:5e:ea:d3:e3:56:c4:7c:54:4a:f4:4e:
06:5e:b4:ae:95:95:a9:fa:e2:06:96:58:39:5c:67:94:86:00:
2f:b1:36:d1:09:aa:54:f4:ed:a0:fa:66:77:28:34:ad:08:42:
36:bf:7f:6f:3b:a7:ff:8e:41:22:bc:12:bd:f3:e4:91:23:ec:
21:ee:b5:98:25:81:b6:1a:ed:dc:33:6a:e7:a8:e5:0c:e8:60:
b1:0a:69:1c:81:18:fb:2f:b8:f0:87:df:15:c7:c1:8c:95:0d:
02:6a:12:5b:d1:89:84:52:0f:2a:3d:24:fc:96:1d:18:55:bd:
88:ce:ad:e5:8b:6d:0f:f1:e8:ba:b0:f1:b7:d0:e0:03:e5:f6:
26:d5:33:cd:d5:4e:bd:e1:10:4a:c1:f5:3b:4d:d7:c6:62:6c:
36:c7:c2:5c:99:af:dd:be:ed:06:aa:d0:d7:3d:47:39:78:21:
21:59:36:ad:b0:bb:68:f8:c2:e7:12:61:8e:2b:15:c8:8b:e1:
3e:6e:ff:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGKP5TV11Su+zaztmU0vkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMDdmNjlkNjAyYjdlYmI3ZjYzMzBkNzE1YzllYzNlNWFi
YTMwZmEwHhcNMjUxMTA0MDkwMDI4WhcNMjUxMTA1MDkwMDI4WjAzMTEwLwYDVQQD
Eyg2NDMwZjdjMTMyM2FjOTA4MWI1YTZiMTg4MDY5MTIyNmJiYjMwMjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr95ZuN/enVtBjjyfcNb2rqUygKeG
N6F5rRqSc6mgnX7TfAksvAaAhA1a8ChJ72B5CUJOxKgE72vV5rHz2N+7koAhzy0v
Tz3mutDK1TGV1QOG1xLUNjSV1qrl7RoKusSqdLqPeo+SSbUs3wtAsfi73h68tNKT
UaweOJb1jsNNGWNC7ZJuZ8JwOPRHKDR4Uhx/zY53ujvw5X9no6RYis6H/RBSAtq1
IiV26hhyHIvpO1iHnuK7XuHPmjpMMvYHO6Zsa2vfzPCMuHFP6biEB/FOgXQbZJuX
GI40pnglVZ/Aym9q69PqlDVz/fpizmGV2gdM2R857F94XSQLgk4PR5Jd2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQw98EyOskIG1prGIBpEia7swJAMB8GA1UdIwQY
MBaAFEwH9p1gK367f2Mw1xXJ7D5aujD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lZTcxYzYtMWJhZS00ODU4LWFmM2Et
YmMyODlkYzE3ZDIwLzEvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lZTcxYzYtMWJhZS00ODU4LWFmM2EtYmMyODlkYzE3ZDIw
LzEvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILmh1IqC
XTLwTP5hK3TGqKSHxq4fM/uNQpPIRj/4SJ1mFpNoczluS6DKc772j2SA4i/LalRH
GvP8n0GULV7q0+NWxHxUSvROBl60rpWVqfriBpZYOVxnlIYAL7E20QmqVPTtoPpm
dyg0rQhCNr9/bzun/45BIrwSvfPkkSPsIe61mCWBthrt3DNq56jlDOhgsQppHIEY
+y+48IffFcfBjJUNAmoSW9GJhFIPKj0k/JYdGFW9iM6t5YttD/HourDxt9DgA+X2
JtUzzdVOveEQSsH1O03XxmJsNsfCXJmv3b7tBqrQ1z1HOXghIVk2rbC7aPjC5xJh
jisVyIvhPm7/AA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:47 2025 by rpki-client