Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
File: TF_Sw94QWTTPD_SdJtnciFjOXdE.mft (raw, json)
Hash identifier: VW9/tRWLylq+lUjqcmd5BiotJLsPpcg4IS10kdIMIQk=
Subject key identifier: 2F:C6:60:A7:81:87:AC:DC:7F:A7:CA:C9:F8:5A:D7:D2:B0:23:64:4B
Authority key identifier: 4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
Certificate issuer: /CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
Certificate serial: 0199FDD92EA0D6BED23D042E94251ACF00B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
Manifest number: 10A0
Signing time: Sun 19 Oct 2025 19:01:32 +0000
Manifest this update: Sun 19 Oct 2025 19:01:32 +0000
Manifest next update: Mon 20 Oct 2025 19:01:32 +0000
Files and hashes: 1: TF_Sw94QWTTPD_SdJtnciFjOXdE.crl (hash: MFsUbuRztLK60bSZClP5I3k7wKmEzrrKFNMfaohc8XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:2e:a0:d6:be:d2:3d:04:2e:94:25:1a:cf:00:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
Validity
Not Before: Oct 19 19:01:32 2025 GMT
Not After : Oct 20 19:01:32 2025 GMT
Subject: CN=2fc660a78187acdc7fa7cac9f85ad7d2b023644b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:24:c2:5a:b4:43:e8:c0:aa:8b:bd:61:b2:91:
2d:f2:28:99:c9:3c:f6:c8:f7:df:e2:c0:39:ac:da:
e1:a0:aa:3d:69:70:da:60:6a:6d:9e:44:04:76:16:
51:5b:0a:8b:29:44:74:7a:49:fa:fd:d9:cb:5a:91:
12:23:4f:0d:93:9d:03:23:8c:86:42:0f:d6:cc:81:
2a:86:86:d5:02:2c:b3:77:85:7d:bc:57:10:86:66:
7a:c6:01:56:18:0a:bb:e5:0f:ef:b0:f1:b5:41:d1:
64:d2:ae:3d:6d:94:70:47:73:59:a0:4b:e5:9f:f1:
7e:c8:ad:e6:09:ba:3b:a1:2f:8b:51:9b:e6:46:3c:
fd:88:48:db:d5:27:b9:d7:9a:fe:b7:80:7a:18:ee:
56:64:16:a9:a3:7d:a5:0f:b7:57:49:bc:6a:60:c2:
32:09:0e:76:3c:9b:0d:f6:de:82:12:4f:40:52:96:
c8:e0:54:02:9e:25:7c:93:cc:7c:ba:da:d9:12:7a:
8d:66:29:19:36:81:c8:b3:8d:3d:77:74:3f:4a:fe:
f9:83:23:c3:be:2f:36:fd:64:d7:d8:6a:61:0b:10:
16:fb:7a:a8:3d:39:49:49:15:c8:04:57:ba:34:85:
78:90:4c:8a:76:00:d8:4d:91:51:84:38:5a:53:8b:
8b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C6:60:A7:81:87:AC:DC:7F:A7:CA:C9:F8:5A:D7:D2:B0:23:64:4B
X509v3 Authority Key Identifier:
keyid:4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:eb:5b:af:ee:e1:40:9e:4f:98:82:7d:ec:91:5b:71:d8:24:
3e:0b:72:7b:9f:b2:5c:65:cc:c5:97:15:34:4c:2a:29:72:88:
d9:f8:81:6d:5c:7c:38:63:e8:23:0a:69:9b:5a:40:61:1b:ee:
c3:33:5d:8b:cb:cd:44:f2:52:3a:da:b1:27:8c:92:50:d9:1e:
1c:42:78:4e:47:e9:2a:cc:0f:b1:ac:12:57:08:e6:91:3c:a9:
b0:3b:19:dc:3a:2b:87:25:36:66:09:a7:70:f8:32:12:63:87:
4c:2e:b7:b8:d5:48:df:f5:c9:b7:db:45:56:cd:1d:5d:7c:11:
ef:64:fe:90:c9:6f:3c:b3:df:38:02:b8:cc:36:84:f1:00:a4:
ee:fc:27:21:a6:35:f5:39:7f:d0:4b:b5:ca:56:68:a9:26:e5:
03:02:77:40:87:c3:12:d1:34:22:61:c0:4c:d0:4b:88:32:99:
48:0f:4d:6c:1a:65:4b:e4:36:ae:c0:6d:10:81:61:c5:31:9f:
57:b2:3d:b2:9b:0b:09:a6:8d:a3:a1:23:5f:dd:12:f6:22:3c:
f7:cf:3a:e6:a4:e5:78:08:ad:e4:b3:a7:f6:d1:89:1c:58:66:
73:60:bd:86:c3:2f:33:34:57:37:c3:4b:30:79:7a:d1:04:50:
c2:3b:61:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92S6g1r7SPQQulCUazwC5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNWZkMmMzZGUxMDU5MzRjZjBmZjQ5ZDI2ZDlkYzg4NThj
ZTVkZDEwHhcNMjUxMDE5MTkwMTMyWhcNMjUxMDIwMTkwMTMyWjAzMTEwLwYDVQQD
EygyZmM2NjBhNzgxODdhY2RjN2ZhN2NhYzlmODVhZDdkMmIwMjM2NDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CTCWrRD6MCqi71hspEt8iiZyTz2
yPff4sA5rNrhoKo9aXDaYGptnkQEdhZRWwqLKUR0ekn6/dnLWpESI08Nk50DI4yG
Qg/WzIEqhobVAiyzd4V9vFcQhmZ6xgFWGAq75Q/vsPG1QdFk0q49bZRwR3NZoEvl
n/F+yK3mCbo7oS+LUZvmRjz9iEjb1Se515r+t4B6GO5WZBapo32lD7dXSbxqYMIy
CQ52PJsN9t6CEk9AUpbI4FQCniV8k8x8utrZEnqNZikZNoHIs409d3Q/Sv75gyPD
vi82/WTX2GphCxAW+3qoPTlJSRXIBFe6NIV4kEyKdgDYTZFRhDhaU4uLswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/GYKeBh6zcf6fKyfha19KwI2RLMB8GA1UdIwQY
MBaAFExf0sPeEFk0zw/0nSbZ3IhYzl3RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEZfU3c5NFFXVFRQRF9TZEp0bmNpRmpPWGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81NGY2MDItYzcxMi00ZDcyLWE0NmEt
MjA4NTY1YmIyZDYzLzEvVEZfU3c5NFFXVFRQRF9TZEp0bmNpRmpPWGRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81NGY2MDItYzcxMi00ZDcyLWE0NmEtMjA4NTY1YmIyZDYz
LzEvVEZfU3c5NFFXVFRQRF9TZEp0bmNpRmpPWGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzetbr+7h
QJ5PmIJ97JFbcdgkPgtye5+yXGXMxZcVNEwqKXKI2fiBbVx8OGPoIwppm1pAYRvu
wzNdi8vNRPJSOtqxJ4ySUNkeHEJ4TkfpKswPsawSVwjmkTypsDsZ3DorhyU2Zgmn
cPgyEmOHTC63uNVI3/XJt9tFVs0dXXwR72T+kMlvPLPfOAK4zDaE8QCk7vwnIaY1
9Tl/0Eu1ylZoqSblAwJ3QIfDEtE0ImHATNBLiDKZSA9NbBplS+Q2rsBtEIFhxTGf
V7I9spsLCaaNo6EjX90S9iI898865qTleAit5LOn9tGJHFhmc2C9hsMvMzRXN8NL
MHl60QRQwjthMA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:33 2025 by rpki-client