Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier: vtS4mN6mcmU/lVVk2rRKQ2RVIXjftHPcqXPYO6e1KUI=
Subject key identifier: A3:11:79:B3:67:EA:BF:FD:70:C9:3B:12:48:DD:08:D4:C4:0E:73:85
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial: 019A4F98DF22F47081FF3CB44F981EC58566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 16:00:09 +0000
Manifest this update: Tue 04 Nov 2025 16:00:09 +0000
Manifest next update: Wed 05 Nov 2025 16:00:09 +0000
Files and hashes: 1: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: +D+ry+GZRAPkRgMDvBpLo3faEyN0SOPlE+2t3X5/Gj4=)
2: uhCkTjed1Otbl84zKJAXa3t70aA.roa (hash: cZYpuZx9ZnpX3epsbIvoPloPaPVgbUbl6mh5Fr2F3pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:df:22:f4:70:81:ff:3c:b4:4f:98:1e:c5:85:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
Validity
Not Before: Nov 4 16:00:09 2025 GMT
Not After : Nov 5 16:00:09 2025 GMT
Subject: CN=a31179b367eabffd70c93b1248dd08d4c40e7385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:30:bd:40:1c:7b:4a:02:32:ff:5c:60:89:
4e:56:f1:c3:62:bb:85:03:75:97:15:c4:10:60:9a:
1d:7a:10:96:21:14:e5:44:4b:ca:2f:cc:34:e3:65:
b0:76:c1:60:e3:f2:7a:ce:40:89:26:5a:9f:a4:f0:
ac:df:fa:73:88:f2:aa:d7:81:b3:6f:75:05:89:95:
9a:b8:0a:6c:d4:56:09:e0:b5:93:f5:1f:c4:1e:33:
df:dc:ab:93:59:9e:25:79:8d:7e:72:c3:ca:ab:95:
6e:df:42:15:9a:a6:3f:df:e5:f0:84:52:0e:c5:98:
01:31:97:5c:ad:2d:0a:64:6d:c3:f6:83:c4:f8:bc:
3c:9c:6e:23:86:46:f5:3b:61:76:5f:6c:a3:ec:3a:
df:e8:64:ae:86:f7:2f:88:26:5d:75:f3:3c:47:75:
1a:83:3f:f5:d4:92:b4:23:8e:6c:82:f3:b4:0f:5f:
3b:82:52:9e:b2:98:ad:ed:04:22:17:5b:a9:14:d3:
e0:1d:4c:82:f4:df:b1:9e:ee:f4:61:f2:0d:64:76:
d4:34:90:40:18:e7:d7:de:6b:98:c7:da:7e:f8:53:
8f:0f:e0:9a:b7:84:13:7b:c9:9e:c6:4d:0e:43:35:
25:f1:99:e0:93:97:a1:9c:91:6d:47:47:fc:24:47:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:11:79:B3:67:EA:BF:FD:70:C9:3B:12:48:DD:08:D4:C4:0E:73:85
X509v3 Authority Key Identifier:
keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:32:eb:93:88:69:71:9c:7a:e7:23:32:14:2a:43:46:17:b9:
ce:dd:f7:fe:3e:92:e0:fc:2d:92:5e:95:2c:9a:20:cc:7d:a2:
36:fe:c8:ff:d4:47:8a:c2:c8:e2:74:3b:23:1e:f4:7c:48:38:
d0:52:6b:a3:76:89:5e:f3:73:d4:75:4e:3a:01:d9:0f:06:ce:
c6:80:58:64:30:ee:90:92:e3:35:be:13:1b:73:70:29:b2:c9:
f4:fd:40:98:fe:7d:35:cd:30:c0:28:98:d1:4f:7b:75:91:82:
98:84:d2:a9:13:d7:bc:c6:72:55:17:c8:d9:6c:4a:ad:58:78:
b3:6c:fa:da:6a:67:14:57:05:ab:e1:7e:9e:4e:1d:e8:80:ee:
4a:b1:89:92:20:53:6e:2e:c5:d0:43:06:2e:a3:b7:88:f0:d0:
ed:db:17:65:23:11:de:14:65:7d:d7:e4:42:97:23:fc:35:c0:
fd:c6:7d:fa:96:2b:2f:57:05:2c:4b:93:4c:c8:3f:36:f3:e7:
48:29:7c:66:c3:88:8e:a5:5a:ff:53:2d:5f:79:b8:06:cb:db:
91:4b:25:d0:79:2e:77:d0:d3:e6:f3:0a:29:c3:69:d6:8c:7a:
fa:4d:84:8d:f6:96:3e:a7:bd:8a:ef:8b:58:bc:6c:be:0b:c9:
4a:f6:46:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmN8i9HCB/zy0T5gexYVmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Nzg0MTAyMjQ5MDQ0OTRlOWMwZjdkMzU2NTBhMjYwZTVm
YjYxOTMwHhcNMjUxMTA0MTYwMDA5WhcNMjUxMTA1MTYwMDA5WjAzMTEwLwYDVQQD
EyhhMzExNzliMzY3ZWFiZmZkNzBjOTNiMTI0OGRkMDhkNGM0MGU3Mzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto8wvUAce0oCMv9cYIlOVvHDYruF
A3WXFcQQYJodehCWIRTlREvKL8w042WwdsFg4/J6zkCJJlqfpPCs3/pziPKq14Gz
b3UFiZWauAps1FYJ4LWT9R/EHjPf3KuTWZ4leY1+csPKq5Vu30IVmqY/3+XwhFIO
xZgBMZdcrS0KZG3D9oPE+Lw8nG4jhkb1O2F2X2yj7Drf6GSuhvcviCZddfM8R3Ua
gz/11JK0I45sgvO0D187glKespit7QQiF1upFNPgHUyC9N+xnu70YfINZHbUNJBA
GOfX3muYx9p++FOPD+Cat4QTe8mexk0OQzUl8Zngk5ehnJFtR0f8JEeHewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMRebNn6r/9cMk7EkjdCNTEDnOFMB8GA1UdIwQY
MBaAFLR4QQIkkESU6cD301ZQomDl+2GTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81Y2ZiZjMtZTc4Mi00MDEzLThlZWUt
ZGU3ZDNiYmZlZTg4LzEvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81Y2ZiZjMtZTc4Mi00MDEzLThlZWUtZGU3ZDNiYmZlZTg4
LzEvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDLrk4hp
cZx65yMyFCpDRhe5zt33/j6S4Pwtkl6VLJogzH2iNv7I/9RHisLI4nQ7Ix70fEg4
0FJro3aJXvNz1HVOOgHZDwbOxoBYZDDukJLjNb4TG3NwKbLJ9P1AmP59Nc0wwCiY
0U97dZGCmITSqRPXvMZyVRfI2WxKrVh4s2z62mpnFFcFq+F+nk4d6IDuSrGJkiBT
bi7F0EMGLqO3iPDQ7dsXZSMR3hRlfdfkQpcj/DXA/cZ9+pYrL1cFLEuTTMg/NvPn
SCl8ZsOIjqVa/1MtX3m4BsvbkUsl0Hkud9DT5vMKKcNp1ox6+k2EjfaWPqe9iu+L
WLxsvgvJSvZGDw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:46 2025 by rpki-client