Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
File: Tb6Htwra566IC0Zwv6B46QmE1mA.mft (raw, json)
Hash identifier: 6kS2/hYDwvu/iBN+rEXyDJfYHNQkGiWQ95yYXzdYp90=
Subject key identifier: 89:01:EA:69:59:FF:C0:5B:8E:58:ED:60:CC:EE:38:47:7B:18:B8:DA
Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
Certificate issuer: /CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Certificate serial: 019A4F98D633DE58CE13A8E83E2330095C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
Manifest number: 1134
Signing time: Tue 04 Nov 2025 16:00:07 +0000
Manifest this update: Tue 04 Nov 2025 16:00:07 +0000
Manifest next update: Wed 05 Nov 2025 16:00:07 +0000
Files and hashes: 1: Tb6Htwra566IC0Zwv6B46QmE1mA.crl (hash: xwef1N5OIVSjujo7c4LDUl3+4GiByw79UaB6uzk1MxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:d6:33:de:58:ce:13:a8:e8:3e:23:30:09:5c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Validity
Not Before: Nov 4 16:00:07 2025 GMT
Not After : Nov 5 16:00:07 2025 GMT
Subject: CN=8901ea6959ffc05b8e58ed60ccee38477b18b8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:78:43:cb:9a:96:25:e7:ee:94:32:8f:08:21:
56:2d:27:59:46:a0:0a:22:02:9e:8c:64:38:de:35:
5a:71:82:1c:e6:ed:21:1f:50:68:f9:2f:f2:e8:11:
28:6a:7e:de:34:e3:07:29:35:6c:2f:cb:30:3e:5b:
ed:28:31:22:4a:ba:18:46:98:03:10:3b:db:0f:79:
47:10:9a:3b:42:52:2b:2c:25:f7:72:ee:8d:9e:d1:
15:e4:65:b3:69:9c:71:66:a9:21:27:15:da:da:1e:
4d:c5:8c:c7:04:30:7b:19:80:0d:ca:37:16:e8:74:
4f:52:c5:3a:1d:05:bc:07:35:15:ed:de:ba:b6:55:
22:50:38:02:fa:5b:13:90:21:96:01:52:d5:f8:5d:
41:b2:5b:d6:67:49:6c:61:cb:97:01:77:fc:fb:b4:
64:44:e1:17:a6:1a:be:a1:45:93:ca:26:a7:af:1b:
71:18:e8:e0:1a:45:b5:b7:49:85:bf:18:04:5c:ec:
aa:c3:95:b5:4d:42:bc:08:e7:57:22:30:c4:71:91:
50:7d:34:ca:0f:ef:c4:97:95:a5:ff:9f:f3:8d:b6:
6c:cc:fd:be:d4:9e:b8:78:80:71:11:c5:aa:da:91:
a7:df:39:d5:1d:51:cd:48:3f:bc:c5:e4:db:90:f3:
7f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:01:EA:69:59:FF:C0:5B:8E:58:ED:60:CC:EE:38:47:7B:18:B8:DA
X509v3 Authority Key Identifier:
keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2e:67:bd:ab:d8:ed:d9:3f:22:17:cd:ec:be:1d:52:e8:c9:
ad:a4:61:29:53:3a:3f:ad:1b:e9:c9:28:50:a0:fe:53:a4:6c:
29:a9:f8:40:22:2f:d7:30:51:d8:a3:0d:b7:35:db:6e:7d:2b:
2d:08:50:49:34:38:f3:05:40:34:58:c0:7c:f9:10:24:86:b5:
24:60:b6:d7:a8:c8:37:fb:bd:18:19:15:12:c3:80:94:cb:2e:
02:5c:cc:1b:be:ab:99:c1:5d:cc:46:da:e3:8e:6b:50:73:dd:
85:5a:cd:d3:02:7a:92:84:cc:da:18:7d:1d:e7:4d:2f:0e:a9:
f4:40:e9:b9:5b:5a:64:36:d1:48:d2:a5:5b:37:04:96:a5:75:
86:7b:76:c6:07:0d:1f:5b:bd:df:dd:27:90:e2:2e:9a:cf:d5:
42:b8:75:3e:d4:1c:94:2b:e4:4d:10:d7:97:5b:60:35:c6:c4:
7a:0a:e4:3d:fc:c5:cf:1d:8e:7a:05:0d:98:21:0e:35:41:3a:
96:db:f7:b6:36:ad:c2:6a:5e:33:f2:db:e1:66:d6:c6:ce:1b:
72:0d:ca:75:e3:91:c8:00:87:01:96:02:22:76:31:1d:af:91:
26:01:8b:8f:03:b1:06:5b:2c:93:1f:d8:69:b2:06:f9:c5:56:
cf:92:56:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmNYz3ljOE6joPiMwCVw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYmU4N2I3MGFkYWU3YWU4ODBiNDY3MGJmYTA3OGU5MDk4
NGQ2NjAwHhcNMjUxMTA0MTYwMDA3WhcNMjUxMTA1MTYwMDA3WjAzMTEwLwYDVQQD
Eyg4OTAxZWE2OTU5ZmZjMDViOGU1OGVkNjBjY2VlMzg0NzdiMThiOGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHhDy5qWJefulDKPCCFWLSdZRqAK
IgKejGQ43jVacYIc5u0hH1Bo+S/y6BEoan7eNOMHKTVsL8swPlvtKDEiSroYRpgD
EDvbD3lHEJo7QlIrLCX3cu6NntEV5GWzaZxxZqkhJxXa2h5NxYzHBDB7GYANyjcW
6HRPUsU6HQW8BzUV7d66tlUiUDgC+lsTkCGWAVLV+F1BslvWZ0lsYcuXAXf8+7Rk
ROEXphq+oUWTyianrxtxGOjgGkW1t0mFvxgEXOyqw5W1TUK8COdXIjDEcZFQfTTK
D+/El5Wl/5/zjbZszP2+1J64eIBxEcWq2pGn3znVHVHNSD+8xeTbkPN/0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkB6mlZ/8BbjljtYMzuOEd7GLjaMB8GA1UdIwQY
MBaAFE2+h7cK2ueuiAtGcL+geOkJhNZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5Yjct
YWM1YTI5N2Y5YmE0LzEvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5YjctYWM1YTI5N2Y5YmE0
LzEvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAi5nvavY
7dk/IhfN7L4dUujJraRhKVM6P60b6ckoUKD+U6RsKan4QCIv1zBR2KMNtzXbbn0r
LQhQSTQ48wVANFjAfPkQJIa1JGC216jIN/u9GBkVEsOAlMsuAlzMG76rmcFdzEba
445rUHPdhVrN0wJ6koTM2hh9HedNLw6p9EDpuVtaZDbRSNKlWzcElqV1hnt2xgcN
H1u9390nkOIums/VQrh1PtQclCvkTRDXl1tgNcbEegrkPfzFzx2OegUNmCEONUE6
ltv3tjatwmpeM/Lb4WbWxs4bcg3KdeORyACHAZYCInYxHa+RJgGLjwOxBlsskx/Y
abIG+cVWz5JW6g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:19 2025 by rpki-client