Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
File: TmIrxVBoe20O9geIzq2w_IIKOB8.mft (raw, json)
Hash identifier: WtCJmMxZDtLz7YqHBTYcbdG7wMIKf8GhwLUA1BN9M44=
Subject key identifier: BB:58:EE:82:5C:71:56:F1:23:4C:DD:D8:0E:A7:83:01:96:08:AF:DE
Authority key identifier: 4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
Certificate issuer: /CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Certificate serial: 019A4DE1C0029C804B55CFE1C2A6FF9B4FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
Manifest number: 0A52
Signing time: Tue 04 Nov 2025 08:00:31 +0000
Manifest this update: Tue 04 Nov 2025 08:00:31 +0000
Manifest next update: Wed 05 Nov 2025 08:00:31 +0000
Files and hashes: 1: TmIrxVBoe20O9geIzq2w_IIKOB8.crl (hash: J7/7oYBMftByrdBL1FGmtLkRjAOlRNSEJYsRWlVop3E=)
2: t4aglK9u5BBs2nCD-lvEdZGnyNE.roa (hash: poJOpqUdh9mquobj4xZre8xkqBntoXYzhaUhNLYqXsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c0:02:9c:80:4b:55:cf:e1:c2:a6:ff:9b:4f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e622bc550687b6d0ef60788ceadb0fc820a381f
Validity
Not Before: Nov 4 08:00:31 2025 GMT
Not After : Nov 5 08:00:31 2025 GMT
Subject: CN=bb58ee825c7156f1234cddd80ea783019608afde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:69:a6:47:d8:08:e4:4f:cc:a2:bd:e9:a7:
49:c4:01:db:e2:ac:ff:60:13:d9:16:c9:16:b5:cd:
07:57:64:51:ac:23:8c:5d:17:33:f1:97:f0:45:cc:
7f:82:1b:6f:51:f8:60:50:5a:d4:56:fe:b3:8c:9e:
44:1f:b7:f7:b4:16:df:f4:e3:cd:76:1e:d0:44:81:
06:1d:38:be:f2:8c:c8:0a:50:d5:d4:2b:76:30:5a:
4d:87:d2:81:58:70:95:67:4a:13:c7:65:ae:dd:62:
b8:87:2c:f7:6e:b0:6d:de:9f:d2:35:94:7e:f1:dd:
4e:f6:39:ca:2a:f8:33:ce:74:70:50:7c:d1:ad:67:
88:00:ec:3e:ae:a9:30:b2:28:8c:bc:8c:71:6a:c7:
5f:23:c1:c2:68:92:f3:55:e9:dc:d1:16:04:bf:4c:
27:f9:5d:22:92:92:c6:82:bf:ef:4d:6e:ca:4d:4d:
44:a2:8e:88:1e:a4:e3:0f:35:78:d5:c5:3f:2d:95:
e5:a4:c0:d7:ba:49:5f:57:2f:1c:e9:6f:d7:52:bb:
c5:43:fa:cc:04:1b:29:b1:73:60:c4:f0:66:ee:ed:
5a:ed:6f:10:ee:95:c3:dd:d6:7e:ba:a6:a3:b1:71:
ac:ff:de:0b:7f:17:59:e0:ce:3f:71:45:39:0c:64:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:58:EE:82:5C:71:56:F1:23:4C:DD:D8:0E:A7:83:01:96:08:AF:DE
X509v3 Authority Key Identifier:
keyid:4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e9:84:29:b8:f0:c6:ca:74:80:c1:d3:af:23:3a:a9:90:3a:
e9:82:39:e7:ee:bd:cd:ce:b1:15:b0:19:ed:84:57:f0:2e:c6:
1d:64:f7:d4:22:5a:9c:fc:ea:c5:6e:53:3a:5b:3d:f0:77:df:
fa:3d:7e:c7:62:85:19:36:1b:91:22:95:ff:0a:72:7b:d9:fa:
d7:13:82:6c:3a:c2:91:35:cc:1a:8d:49:95:3d:29:15:36:b6:
b7:9e:d9:d8:13:4e:9d:60:46:67:6c:77:59:28:4b:d6:ae:4e:
3f:48:a7:78:d4:96:dd:65:39:53:3a:53:40:35:cb:40:36:73:
2f:7b:30:74:58:70:94:3b:c8:0f:ba:65:1f:d0:64:a6:9c:6d:
6d:47:90:26:27:39:b3:c0:87:79:55:c7:b7:0d:21:9f:07:0d:
3d:b5:e2:92:47:04:ed:62:fa:79:2b:e3:65:83:a9:6e:79:53:
ed:c3:78:9f:28:01:fd:91:6c:bd:98:1a:ef:62:6e:6e:bf:72:
9e:a4:cb:4e:03:d7:ee:fb:70:41:86:73:a7:47:99:66:cb:e7:
ce:52:ee:9a:58:f4:b6:e0:ea:30:58:1a:7c:aa:27:04:26:3e:
9e:42:7f:7a:4e:60:4f:e1:a2:60:29:be:8e:f2:a8:f7:e2:b6:
e7:43:8c:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4cACnIBLVc/hwqb/m0//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNjIyYmM1NTA2ODdiNmQwZWY2MDc4OGNlYWRiMGZjODIw
YTM4MWYwHhcNMjUxMTA0MDgwMDMxWhcNMjUxMTA1MDgwMDMxWjAzMTEwLwYDVQQD
EyhiYjU4ZWU4MjVjNzE1NmYxMjM0Y2RkZDgwZWE3ODMwMTk2MDhhZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoINppkfYCORPzKK96adJxAHb4qz/
YBPZFskWtc0HV2RRrCOMXRcz8ZfwRcx/ghtvUfhgUFrUVv6zjJ5EH7f3tBbf9OPN
dh7QRIEGHTi+8ozIClDV1Ct2MFpNh9KBWHCVZ0oTx2Wu3WK4hyz3brBt3p/SNZR+
8d1O9jnKKvgzznRwUHzRrWeIAOw+rqkwsiiMvIxxasdfI8HCaJLzVenc0RYEv0wn
+V0ikpLGgr/vTW7KTU1Eoo6IHqTjDzV41cU/LZXlpMDXuklfVy8c6W/XUrvFQ/rM
BBspsXNgxPBm7u1a7W8Q7pXD3dZ+uqajsXGs/94LfxdZ4M4/cUU5DGQLWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtY7oJccVbxI0zd2A6ngwGWCK/eMB8GA1UdIwQY
MBaAFE5iK8VQaHttDvYHiM6tsPyCCjgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYTRjMzQtMjcwNC00ZjgyLWJmZjgt
YTdjY2QwMDk4NDc3LzEvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jYTRjMzQtMjcwNC00ZjgyLWJmZjgtYTdjY2QwMDk4NDc3
LzEvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+mEKbjw
xsp0gMHTryM6qZA66YI55+69zc6xFbAZ7YRX8C7GHWT31CJanPzqxW5TOls98Hff
+j1+x2KFGTYbkSKV/wpye9n61xOCbDrCkTXMGo1JlT0pFTa2t57Z2BNOnWBGZ2x3
WShL1q5OP0ineNSW3WU5UzpTQDXLQDZzL3swdFhwlDvID7plH9BkppxtbUeQJic5
s8CHeVXHtw0hnwcNPbXikkcE7WL6eSvjZYOpbnlT7cN4nygB/ZFsvZga72Jubr9y
nqTLTgPX7vtwQYZzp0eZZsvnzlLumlj0tuDqMFgafKonBCY+nkJ/ek5gT+GiYCm+
jvKo9+K250OMfg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:22 2025 by rpki-client