Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
File: TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft (raw, json)
Hash identifier: 5aNW4zQO6nIaVQCYz5CW/NekOoTAhjGvVxQuAoN6ywE=
Subject key identifier: 6A:B5:7C:F1:EF:D1:D8:AC:FF:00:D5:09:86:AF:3C:0C:39:23:25:46
Authority key identifier: 4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
Certificate issuer: /CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Certificate serial: 019A507524A24A7DEF555DA0210B4874D599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
Manifest number: 1128
Signing time: Tue 04 Nov 2025 20:00:45 +0000
Manifest this update: Tue 04 Nov 2025 20:00:45 +0000
Manifest next update: Wed 05 Nov 2025 20:00:45 +0000
Files and hashes: 1: TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl (hash: ZV1CHs7flYcbgfyyciEiIDW9C1ykoZgERsRIzRw30aM=)
2: WDEZ3ZaDac1rHXOITo0Y0_gA1WA.roa (hash: 2eqZynI8QAeqviBK64M0ctiXcb1WfCdmlsqvsre2oAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:24:a2:4a:7d:ef:55:5d:a0:21:0b:48:74:d5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Validity
Not Before: Nov 4 20:00:45 2025 GMT
Not After : Nov 5 20:00:45 2025 GMT
Subject: CN=6ab57cf1efd1d8acff00d50986af3c0c39232546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:37:0c:97:67:70:87:9d:14:0a:9e:36:c1:
88:28:8d:a2:43:7c:dc:27:2d:ed:de:47:b3:e5:ec:
6e:45:8b:26:da:fa:ed:46:6a:57:9b:4e:5b:48:fa:
89:ef:f7:74:db:10:e7:d4:12:95:a8:af:08:b6:cb:
f2:15:ab:81:45:6a:fa:0d:d5:51:08:a4:70:4e:63:
be:1d:12:09:62:9f:a0:d5:b8:9f:bf:83:a6:26:61:
f7:65:94:c3:89:dc:52:a2:b6:3d:0b:64:d0:ae:67:
03:7f:86:80:65:b8:e4:b8:4a:d1:4e:8b:4a:15:0c:
1e:73:a6:2a:97:1b:03:cf:d9:6f:36:4a:dc:54:b4:
f7:d0:35:21:8c:da:8b:8a:7d:c4:03:8d:45:a0:f8:
19:f4:11:5d:d0:a2:67:05:f1:db:ab:71:b5:ba:6b:
57:e5:4f:d6:97:f0:11:1b:0a:ad:fc:fa:ec:5a:88:
d0:a9:fc:70:8c:9e:88:9c:63:57:28:6e:7e:20:d7:
e6:f7:cf:7d:e0:0b:a3:d8:68:6d:dc:6a:85:79:63:
dd:d4:a0:b9:9c:6f:f2:de:ba:8d:e6:93:e3:70:59:
4c:ee:1e:63:38:98:09:c2:79:ac:58:76:c4:2a:31:
0d:35:a0:e8:42:fa:1c:0a:5b:46:49:d4:e3:06:63:
68:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B5:7C:F1:EF:D1:D8:AC:FF:00:D5:09:86:AF:3C:0C:39:23:25:46
X509v3 Authority Key Identifier:
keyid:4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:60:fc:7e:3d:ec:ac:0d:57:a1:c7:5d:3c:22:81:36:a3:24:
23:a3:20:d5:f6:46:ad:ef:b3:62:77:02:c2:ea:39:cf:e4:9d:
b1:c3:d5:6a:cf:6f:44:0e:98:6c:bc:6b:ee:08:94:81:ae:0e:
43:b9:eb:7b:d1:75:8e:ed:65:cc:2e:03:fa:63:42:b5:2b:84:
48:3d:bd:f2:e1:4c:01:9c:68:8e:41:d9:6a:f2:62:9c:b3:c7:
a2:88:6d:ae:b3:15:fd:89:be:ff:be:2f:4a:9a:6c:e4:6a:f9:
93:ee:ad:6d:57:ab:0e:81:60:8a:91:9d:63:0a:4b:17:e6:10:
54:8a:2c:28:4e:46:db:3d:c1:7c:cc:66:ec:04:e5:14:c4:4a:
cf:79:fa:ed:c2:58:54:99:a5:46:2c:33:9f:70:c0:ac:39:89:
48:61:3b:05:d9:b7:1c:87:c9:d4:05:d4:5c:64:b0:93:a4:eb:
35:61:a9:96:31:47:0f:d3:eb:b7:49:fa:a9:0e:02:c2:ab:4e:
5c:eb:93:7b:8f:30:fb:75:48:43:8f:ad:88:df:03:73:2d:df:
f7:ea:84:8d:be:63:4e:e0:9f:d6:d4:53:e8:a9:0f:fc:9f:44:
80:fc:2e:dc:67:93:82:56:73:a8:04:eb:ea:b2:cc:31:96:65:
f5:ec:6c:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdSSiSn3vVV2gIQtIdNWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkY2JlZjA2YWQwNWZkNmU2ZTdlN2IxMDg0Y2IxZDdkNjVl
NjQyNmYwHhcNMjUxMTA0MjAwMDQ1WhcNMjUxMTA1MjAwMDQ1WjAzMTEwLwYDVQQD
Eyg2YWI1N2NmMWVmZDFkOGFjZmYwMGQ1MDk4NmFmM2MwYzM5MjMyNTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL83DJdncIedFAqeNsGIKI2iQ3zc
Jy3t3kez5exuRYsm2vrtRmpXm05bSPqJ7/d02xDn1BKVqK8ItsvyFauBRWr6DdVR
CKRwTmO+HRIJYp+g1bifv4OmJmH3ZZTDidxSorY9C2TQrmcDf4aAZbjkuErRTotK
FQwec6YqlxsDz9lvNkrcVLT30DUhjNqLin3EA41FoPgZ9BFd0KJnBfHbq3G1umtX
5U/Wl/ARGwqt/PrsWojQqfxwjJ6InGNXKG5+INfm98994Auj2Ght3GqFeWPd1KC5
nG/y3rqN5pPjcFlM7h5jOJgJwnmsWHbEKjENNaDoQvocCltGSdTjBmNo3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGq1fPHv0dis/wDVCYavPAw5IyVGMB8GA1UdIwQY
MBaAFE3L7watBf1ubn57EITLHX1l5kJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGN2dkJxMEZfVzV1Zm5zUWhNc2RmV1htUW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yYTZlYWEtZTQzNy00M2JjLTk3MmUt
M2UzYmZhYTE5MGRmLzEvVGN2dkJxMEZfVzV1Zm5zUWhNc2RmV1htUW04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yYTZlYWEtZTQzNy00M2JjLTk3MmUtM2UzYmZhYTE5MGRm
LzEvVGN2dkJxMEZfVzV1Zm5zUWhNc2RmV1htUW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWD8fj3s
rA1XocddPCKBNqMkI6Mg1fZGre+zYncCwuo5z+SdscPVas9vRA6YbLxr7giUga4O
Q7nre9F1ju1lzC4D+mNCtSuESD298uFMAZxojkHZavJinLPHoohtrrMV/Ym+/74v
Spps5Gr5k+6tbVerDoFgipGdYwpLF+YQVIosKE5G2z3BfMxm7ATlFMRKz3n67cJY
VJmlRiwzn3DArDmJSGE7Bdm3HIfJ1AXUXGSwk6TrNWGpljFHD9Prt0n6qQ4CwqtO
XOuTe48w+3VIQ4+tiN8Dcy3f9+qEjb5jTuCf1tRT6KkP/J9EgPwu3GeTglZzqATr
6rLMMZZl9exsYA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:40 2025 by rpki-client