Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
File: Tu8gTX6G_4FiSmGBKG521DOHa8c.mft (raw, json)
Hash identifier: +FqCSIvpvVSKDD/i4wMvUg2fwtIdECnXRW8y9qWxx+o=
Subject key identifier: AC:14:96:FB:FE:F6:21:B7:C8:EE:5E:BD:C7:3B:C1:14:16:B9:FD:F2
Authority key identifier: 4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
Certificate issuer: /CN=4eef204d7e86ff81624a6181286e76d433876bc7
Certificate serial: 019A50E2B61B458F41A3B109DF728507279A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
Manifest number: 160E
Signing time: Tue 04 Nov 2025 22:00:26 +0000
Manifest this update: Tue 04 Nov 2025 22:00:26 +0000
Manifest next update: Wed 05 Nov 2025 22:00:26 +0000
Files and hashes: 1: Tu8gTX6G_4FiSmGBKG521DOHa8c.crl (hash: UQVDFUz39Lqb3MJgTnGdAMU1Gl4OmELHUjQtIn/fKq8=)
2: shBm13sVD-3FD9e1R6_cr96dhfU.roa (hash: n/xarPDtIVC1p+Buc2MZvYZnuxYBvdgfF2U0DRag658=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:b6:1b:45:8f:41:a3:b1:09:df:72:85:07:27:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef204d7e86ff81624a6181286e76d433876bc7
Validity
Not Before: Nov 4 22:00:26 2025 GMT
Not After : Nov 5 22:00:26 2025 GMT
Subject: CN=ac1496fbfef621b7c8ee5ebdc73bc11416b9fdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:31:b8:0a:b7:6c:46:7c:2f:f7:37:ff:fc:5b:
83:e8:67:ac:39:1c:52:a3:2d:fd:cc:ab:88:a4:e0:
78:4f:6d:9e:7d:96:13:b8:0f:59:7f:ae:78:4e:d1:
70:a5:e2:4f:05:ac:d7:61:9c:fc:81:59:6f:81:7f:
7c:4d:14:95:53:6c:e2:e7:82:9d:5b:3a:64:48:1d:
4b:c5:25:88:17:65:30:f0:b7:47:13:eb:cd:d3:20:
c2:d1:64:29:19:43:74:c5:f2:3b:ce:12:6e:54:82:
12:7c:35:44:90:d9:dc:bc:5d:c4:39:6a:d0:12:3f:
9f:35:94:44:b1:df:d5:54:85:19:df:53:31:bb:27:
3f:f9:82:b8:a6:08:e7:db:6c:51:d6:b8:44:c9:7c:
d8:a4:59:f6:ca:28:5f:bb:83:29:28:a5:0a:a0:68:
3e:43:29:8e:22:23:4f:07:43:ea:10:67:41:3c:74:
1c:05:7b:52:ef:48:d3:ef:79:44:c9:17:9d:f8:e1:
ac:3d:78:e8:14:0f:b2:42:d3:f5:5a:94:07:43:5d:
01:8a:1a:bc:7d:d0:03:b0:61:b5:52:06:87:e4:73:
18:89:c9:21:c3:7a:36:68:80:5d:42:aa:8a:24:93:
5e:41:f5:68:55:a4:1e:3a:17:dd:c5:c4:f1:fd:4a:
e6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:14:96:FB:FE:F6:21:B7:C8:EE:5E:BD:C7:3B:C1:14:16:B9:FD:F2
X509v3 Authority Key Identifier:
keyid:4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ca:41:3e:f1:38:ee:e4:c0:d1:be:90:b1:96:e4:b7:5c:17:
69:f3:cc:dc:d9:0b:b4:8b:fc:3e:2e:0b:87:ea:57:5e:ef:3a:
cc:db:39:30:89:41:00:f0:f5:93:f3:18:02:5f:ca:4e:ff:0b:
4f:2a:1e:6d:8c:f0:9c:9f:da:66:e2:40:bd:e9:93:c6:06:bb:
27:09:aa:9c:60:f6:5d:eb:ed:b8:4e:43:c0:d9:10:37:6f:69:
28:fb:f6:c4:90:96:05:26:3f:fe:70:08:28:36:ce:b0:3a:cb:
e8:9d:e3:96:12:f9:24:1d:3d:a9:ff:94:71:65:dd:82:e5:37:
69:91:4f:38:7d:17:47:2a:6a:8b:fc:4a:bd:48:70:8f:ab:66:
23:87:b6:81:17:d8:b7:c5:26:c9:5e:30:8e:c2:d9:63:80:62:
a4:61:42:86:e4:96:ca:54:eb:f5:19:16:c5:a1:84:54:e8:d8:
f1:0f:8a:a6:f7:83:88:da:95:32:bb:eb:d6:cf:c6:5e:0d:59:
f9:42:60:2d:da:86:65:0e:67:b6:5b:6a:ab:69:2e:c1:35:df:
0b:04:f9:57:3b:82:7b:5b:92:d9:61:f8:ed:e7:30:6e:a2:a0:
71:d6:5b:5f:f6:77:d7:9a:52:09:5b:5b:7b:e2:b2:33:2f:91:
0a:83:40:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4rYbRY9Bo7EJ33KFByeaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZWYyMDRkN2U4NmZmODE2MjRhNjE4MTI4NmU3NmQ0MzM4
NzZiYzcwHhcNMjUxMTA0MjIwMDI2WhcNMjUxMTA1MjIwMDI2WjAzMTEwLwYDVQQD
EyhhYzE0OTZmYmZlZjYyMWI3YzhlZTVlYmRjNzNiYzExNDE2YjlmZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zG4CrdsRnwv9zf//FuD6GesORxS
oy39zKuIpOB4T22efZYTuA9Zf654TtFwpeJPBazXYZz8gVlvgX98TRSVU2zi54Kd
WzpkSB1LxSWIF2Uw8LdHE+vN0yDC0WQpGUN0xfI7zhJuVIISfDVEkNncvF3EOWrQ
Ej+fNZREsd/VVIUZ31Mxuyc/+YK4pgjn22xR1rhEyXzYpFn2yihfu4MpKKUKoGg+
QymOIiNPB0PqEGdBPHQcBXtS70jT73lEyRed+OGsPXjoFA+yQtP1WpQHQ10Bihq8
fdADsGG1UgaH5HMYickhw3o2aIBdQqqKJJNeQfVoVaQeOhfdxcTx/UrmAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwUlvv+9iG3yO5evcc7wRQWuf3yMB8GA1UdIwQY
MBaAFE7vIE1+hv+BYkphgShudtQzh2vHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHU4Z1RYNkdfNEZpU21HQktHNTIxRE9IYThjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82OTMyMmQtYWQ3MS00ODc3LWE0NzAt
OWFkOTA5OWRlMWQzLzEvVHU4Z1RYNkdfNEZpU21HQktHNTIxRE9IYThjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82OTMyMmQtYWQ3MS00ODc3LWE0NzAtOWFkOTA5OWRlMWQz
LzEvVHU4Z1RYNkdfNEZpU21HQktHNTIxRE9IYThjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMpBPvE4
7uTA0b6QsZbkt1wXafPM3NkLtIv8Pi4Lh+pXXu86zNs5MIlBAPD1k/MYAl/KTv8L
TyoebYzwnJ/aZuJAvemTxga7JwmqnGD2XevtuE5DwNkQN29pKPv2xJCWBSY//nAI
KDbOsDrL6J3jlhL5JB09qf+UcWXdguU3aZFPOH0XRypqi/xKvUhwj6tmI4e2gRfY
t8UmyV4wjsLZY4BipGFChuSWylTr9RkWxaGEVOjY8Q+KpveDiNqVMrvr1s/GXg1Z
+UJgLdqGZQ5ntltqq2kuwTXfCwT5VzuCe1uS2WH47ecwbqKgcdZbX/Z315pSCVtb
e+KyMy+RCoNAeA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:45:41 2025 by rpki-client