Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
File: tt41SvltyILzXBLU9fpnUHY6tyA.mft (raw, json)
Hash identifier: 38ylvc7c8ostbfur4BMs1w1ufCbUWop+Gcdyfi57QaU=
Subject key identifier: 2E:D6:D6:90:93:2C:5E:CC:B7:CD:70:A3:F2:5E:8D:AA:F4:84:33:04
Authority key identifier: B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
Certificate issuer: /CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Certificate serial: 0199FBEB22DE6D4CCBD565554293494E8F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
Manifest number: 0E08
Signing time: Sun 19 Oct 2025 10:01:55 +0000
Manifest this update: Sun 19 Oct 2025 10:01:55 +0000
Manifest next update: Mon 20 Oct 2025 10:01:55 +0000
Files and hashes: 1: tt41SvltyILzXBLU9fpnUHY6tyA.crl (hash: /Y0OqKUotiEH7z8f2FymdwUnSiUk1fFnIREKD0UUB4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:22:de:6d:4c:cb:d5:65:55:42:93:49:4e:8f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Validity
Not Before: Oct 19 10:01:55 2025 GMT
Not After : Oct 20 10:01:55 2025 GMT
Subject: CN=2ed6d690932c5eccb7cd70a3f25e8daaf4843304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:78:52:71:f9:ed:8e:ab:f7:c4:2f:dd:3b:
21:9e:c6:ea:07:6c:56:6a:af:c0:2f:09:ba:2c:a2:
04:98:e3:e8:45:85:b2:57:5f:3f:14:48:9c:a7:56:
4e:63:dd:00:76:e6:28:42:dd:35:f0:ce:2a:8a:05:
ce:76:36:47:be:9e:27:df:b2:8c:63:68:5e:81:4e:
37:c8:a3:3d:63:85:b8:1b:3a:9e:98:63:f5:c6:ce:
d3:d3:b4:a1:41:a6:97:63:50:37:bb:31:b5:73:92:
59:b5:76:da:cd:97:08:3c:8e:57:aa:03:77:5a:05:
50:93:be:63:2c:85:9b:94:43:76:d9:8f:05:46:ab:
f9:c7:1c:9e:7b:8e:60:6f:f3:41:10:7c:42:5b:7e:
a2:32:72:9c:fa:72:fe:da:77:cc:84:67:16:e0:d8:
26:b4:46:83:b7:f9:b5:4c:be:45:77:20:ce:48:4e:
dc:8f:8c:03:6f:41:b7:81:1b:5e:bd:2f:ed:bd:d2:
fd:74:ba:da:0e:82:3d:65:3f:2a:57:b4:c5:cc:c2:
71:cf:ac:d2:33:b6:6c:df:3b:5a:9c:5c:3f:fe:27:
48:1f:6f:cf:66:d1:bd:68:97:b7:3a:7b:24:30:44:
f3:43:ee:48:b2:ed:73:0e:8e:c2:70:f2:eb:8d:ce:
00:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D6:D6:90:93:2C:5E:CC:B7:CD:70:A3:F2:5E:8D:AA:F4:84:33:04
X509v3 Authority Key Identifier:
keyid:B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:44:e0:44:96:a2:9a:6a:f2:bc:47:e0:2b:80:d1:af:61:fd:
cf:b9:f8:0a:84:20:93:aa:f4:94:84:5d:2e:bb:4c:99:05:43:
e7:15:8b:08:da:56:51:f5:f0:a4:a2:b8:ad:1c:b4:17:3f:e6:
a0:ad:fe:ed:12:3a:5c:25:24:c5:8a:be:d5:1a:db:49:78:10:
f5:15:81:37:89:7f:4c:9c:0a:fd:65:00:f4:5b:d6:14:53:cd:
d2:b1:b4:60:ed:c5:e0:a4:6a:de:0f:83:1c:d4:33:28:3e:fd:
b6:ac:82:2f:4c:b4:b2:c6:98:08:e0:2a:9f:e2:4d:c3:83:97:
8e:be:a2:91:0f:d5:79:ea:6f:6a:11:82:cc:d5:a1:d0:32:d7:
67:a8:af:f3:c4:23:a7:0c:5a:e7:64:98:09:f2:29:b2:cf:8d:
e0:44:ad:da:40:2c:51:48:38:44:e2:d8:74:b8:d3:26:b5:55:
2c:cf:31:bb:57:21:2f:a9:b0:59:12:8b:b7:c4:4a:f7:72:bd:
66:76:4f:09:81:7a:7e:fb:1e:09:02:80:ec:68:12:31:8c:8c:
05:44:ee:b3:bd:28:2c:a9:2a:39:d7:3a:cf:da:48:1a:30:2e:
c6:3f:03:bf:9c:ec:fd:85:04:86:b0:5f:62:6c:83:59:76:82:
ec:12:c5:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76yLebUzL1WVVQpNJTo+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZGUzNTRhZjk2ZGM4ODJmMzVjMTJkNGY1ZmE2NzUwNzYz
YWI3MjAwHhcNMjUxMDE5MTAwMTU1WhcNMjUxMDIwMTAwMTU1WjAzMTEwLwYDVQQD
EygyZWQ2ZDY5MDkzMmM1ZWNjYjdjZDcwYTNmMjVlOGRhYWY0ODQzMzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZt4UnH57Y6r98Qv3TshnsbqB2xW
aq/ALwm6LKIEmOPoRYWyV18/FEicp1ZOY90AduYoQt018M4qigXOdjZHvp4n37KM
Y2hegU43yKM9Y4W4GzqemGP1xs7T07ShQaaXY1A3uzG1c5JZtXbazZcIPI5XqgN3
WgVQk75jLIWblEN22Y8FRqv5xxyee45gb/NBEHxCW36iMnKc+nL+2nfMhGcW4Ngm
tEaDt/m1TL5FdyDOSE7cj4wDb0G3gRtevS/tvdL9dLraDoI9ZT8qV7TFzMJxz6zS
M7Zs3ztanFw//idIH2/PZtG9aJe3OnskMETzQ+5Isu1zDo7CcPLrjc4AjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7W1pCTLF7Mt81wo/Jejar0hDMEMB8GA1UdIwQY
MBaAFLbeNUr5bciC81wS1PX6Z1B2OrcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHQ0MVN2bHR5SUx6WEJMVTlmcG5VSFk2dHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82ZTAwMGUtZTc1NS00N2U2LTk5YTgt
MzU0ODcxYTg1YzdhLzEvdHQ0MVN2bHR5SUx6WEJMVTlmcG5VSFk2dHlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82ZTAwMGUtZTc1NS00N2U2LTk5YTgtMzU0ODcxYTg1Yzdh
LzEvdHQ0MVN2bHR5SUx6WEJMVTlmcG5VSFk2dHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUTgRJai
mmryvEfgK4DRr2H9z7n4CoQgk6r0lIRdLrtMmQVD5xWLCNpWUfXwpKK4rRy0Fz/m
oK3+7RI6XCUkxYq+1RrbSXgQ9RWBN4l/TJwK/WUA9FvWFFPN0rG0YO3F4KRq3g+D
HNQzKD79tqyCL0y0ssaYCOAqn+JNw4OXjr6ikQ/VeepvahGCzNWh0DLXZ6iv88Qj
pwxa52SYCfIpss+N4ESt2kAsUUg4ROLYdLjTJrVVLM8xu1chL6mwWRKLt8RK93K9
ZnZPCYF6fvseCQKA7GgSMYyMBUTus70oLKkqOdc6z9pIGjAuxj8Dv5zs/YUEhrBf
YmyDWXaC7BLFlg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:17 2025 by rpki-client