Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier: AuuJ0ydiE1oxkJ/Okr3Kxtpd+QdyypVmEfvoOgqsF+Y=
Subject key identifier: 6D:B2:FA:11:2E:E3:DB:00:4E:CE:DF:E3:C5:35:5D:2A:59:44:3D:C3
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial: 019A4E868F6DD66A9A19E387E0E586176BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number: 0395
Signing time: Tue 04 Nov 2025 11:00:32 +0000
Manifest this update: Tue 04 Nov 2025 11:00:32 +0000
Manifest next update: Wed 05 Nov 2025 11:00:32 +0000
Files and hashes: 1: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: qZIHTg4agmxsYDU0N8eLg4M56JVwN07iI1kXGos7nZo=)
2: iTC7AIloz6nQaL3mT_rFGYZ-wig.roa (hash: fesaTZGLmhO2WzwSQegYz6bFqw2Ey8O4XUX49y7XEFA=)
3: uAJKiTWW3Ub4f2F2pRQzTM4uTxQ.roa (hash: QYC9wZJDQP4jalSd59izpnWdNPoZL5WfK7FyvYaliJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:8f:6d:d6:6a:9a:19:e3:87:e0:e5:86:17:6b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Validity
Not Before: Nov 4 11:00:32 2025 GMT
Not After : Nov 5 11:00:32 2025 GMT
Subject: CN=6db2fa112ee3db004ecedfe3c5355d2a59443dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:d0:5b:f8:7e:94:9d:f9:db:95:7d:c0:d8:
20:db:17:94:c4:fa:3b:c5:b0:2f:97:7f:ba:d7:c2:
92:f4:1e:d5:1e:63:6c:38:1f:29:75:d2:22:c7:68:
6d:c1:47:80:a8:86:b9:43:da:a9:bb:37:08:fd:3c:
ac:7e:1c:b2:0d:e9:35:46:49:da:cd:2e:bb:dc:ca:
b1:eb:8c:79:30:a8:d9:d0:84:83:39:77:47:22:02:
49:1e:83:fd:8a:a5:c9:9e:a4:2a:5a:97:77:b2:63:
82:16:31:0e:e5:08:06:2d:53:d4:b4:f9:c7:3a:4a:
ec:22:d3:40:9e:32:8a:ae:a7:b6:30:b8:6f:ac:7c:
c2:1d:78:14:17:6f:f4:df:b7:c2:25:f2:d6:87:6a:
64:07:2e:cc:89:e0:fc:e6:a8:8e:9f:3a:bc:47:08:
56:53:82:79:b9:43:51:d2:62:e1:9c:0f:68:8c:de:
d3:6f:2c:25:38:0f:2a:5d:4f:3d:52:f1:f2:18:25:
c1:1a:b0:77:62:20:2e:fb:e3:f6:6d:a4:64:98:50:
92:ea:87:b9:87:ba:14:8a:c4:d6:b3:f2:26:54:3c:
14:7d:cc:5b:6e:04:7a:ec:de:64:16:5e:2f:1c:a5:
1a:84:f8:47:b9:a9:d0:d0:55:7a:de:3d:db:46:d4:
49:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B2:FA:11:2E:E3:DB:00:4E:CE:DF:E3:C5:35:5D:2A:59:44:3D:C3
X509v3 Authority Key Identifier:
keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:dd:0a:4a:38:f8:95:1e:e6:52:fa:11:2c:8b:3c:f7:12:fe:
18:88:1c:23:fa:39:8f:0f:bb:7c:9f:b2:c7:a8:00:2a:c7:d4:
9c:90:24:64:a4:f0:3f:f7:05:c5:bf:ae:e2:8a:26:55:5a:9a:
fb:b8:7c:fa:7b:97:fd:61:20:c2:57:46:47:dd:38:a1:aa:87:
85:e9:e7:49:dd:15:1a:d4:5c:1a:5d:1d:3f:ed:63:86:3d:25:
d4:74:c8:93:9a:0b:0a:59:04:04:0b:20:d6:43:6a:30:5e:f1:
e6:23:19:2a:10:ad:fa:a0:e8:c5:4a:9e:47:98:1f:4a:29:51:
6c:34:2a:f0:1b:3d:da:d9:31:c0:72:9c:fb:76:c1:cc:2f:09:
5c:99:0a:48:12:12:fa:63:95:98:98:83:9f:f4:17:4e:f1:7b:
57:4a:97:5e:fb:3d:27:69:c2:90:9b:80:33:20:f9:27:99:6e:
1e:53:fa:66:c3:64:fa:ab:ee:16:90:a7:29:9c:b8:a0:d3:90:
f8:69:64:c3:a5:20:51:87:32:d3:8d:31:ed:78:f3:8b:5a:65:
28:ba:25:5b:60:03:74:ef:aa:4e:eb:25:fb:74:18:b6:43:10:
08:04:06:4f:66:17:ae:73:9c:fe:36:0c:2d:63:1e:7c:44:e2:
82:ff:28:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOho9t1mqaGeOH4OWGF2ujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZGQ2OTczNDkzY2UwYzM4NDliOGI5MTliNzUwMmJhNWZh
MDEzZDcwHhcNMjUxMTA0MTEwMDMyWhcNMjUxMTA1MTEwMDMyWjAzMTEwLwYDVQQD
Eyg2ZGIyZmExMTJlZTNkYjAwNGVjZWRmZTNjNTM1NWQyYTU5NDQzZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNXQW/h+lJ3525V9wNgg2xeUxPo7
xbAvl3+618KS9B7VHmNsOB8pddIix2htwUeAqIa5Q9qpuzcI/TysfhyyDek1Rkna
zS673Mqx64x5MKjZ0ISDOXdHIgJJHoP9iqXJnqQqWpd3smOCFjEO5QgGLVPUtPnH
OkrsItNAnjKKrqe2MLhvrHzCHXgUF2/037fCJfLWh2pkBy7MieD85qiOnzq8RwhW
U4J5uUNR0mLhnA9ojN7TbywlOA8qXU89UvHyGCXBGrB3YiAu++P2baRkmFCS6oe5
h7oUisTWs/ImVDwUfcxbbgR67N5kFl4vHKUahPhHuanQ0FV63j3bRtRJqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2y+hEu49sATs7f48U1XSpZRD3DMB8GA1UdIwQY
MBaAFEzdaXNJPODDhJuLkZt1ArpfoBPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQt
Y2MwZjUwYmRhMTU5LzEvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQtY2MwZjUwYmRhMTU5
LzEvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnd0KSjj4
lR7mUvoRLIs89xL+GIgcI/o5jw+7fJ+yx6gAKsfUnJAkZKTwP/cFxb+u4oomVVqa
+7h8+nuX/WEgwldGR904oaqHhennSd0VGtRcGl0dP+1jhj0l1HTIk5oLClkEBAsg
1kNqMF7x5iMZKhCt+qDoxUqeR5gfSilRbDQq8Bs92tkxwHKc+3bBzC8JXJkKSBIS
+mOVmJiDn/QXTvF7V0qXXvs9J2nCkJuAMyD5J5luHlP6ZsNk+qvuFpCnKZy4oNOQ
+Glkw6UgUYcy040x7Xjzi1plKLolW2ADdO+qTusl+3QYtkMQCAQGT2YXrnOc/jYM
LWMefETigv8oqA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:33 2025 by rpki-client