Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
File: TnCtvlP18oWwVz3yRuJdUWUdeEk.mft (raw, json)
Hash identifier: r+KR6Mqmlks3rRSePr6eR4TuAsEo81il3Tb1iYdO620=
Subject key identifier: 3F:A9:CA:CC:67:8F:3A:33:BD:6B:06:BE:C8:64:6E:39:95:A0:D2:B4
Authority key identifier: 4E:70:AD:BE:53:F5:F2:85:B0:57:3D:F2:46:E2:5D:51:65:1D:78:49
Certificate issuer: /CN=4e70adbe53f5f285b0573df246e25d51651d7849
Certificate serial: 0199FFC8C6C610106235AFBE82567EEF0D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
Manifest number: 0198
Signing time: Mon 20 Oct 2025 04:02:52 +0000
Manifest this update: Mon 20 Oct 2025 04:02:52 +0000
Manifest next update: Tue 21 Oct 2025 04:02:52 +0000
Files and hashes: 1: TnCtvlP18oWwVz3yRuJdUWUdeEk.crl (hash: p1NKzIHv7XAW6JKH+Ld2cQDI/5GPpzesZbObiihypBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:c6:c6:10:10:62:35:af:be:82:56:7e:ef:0d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e70adbe53f5f285b0573df246e25d51651d7849
Validity
Not Before: Oct 20 04:02:52 2025 GMT
Not After : Oct 21 04:02:52 2025 GMT
Subject: CN=3fa9cacc678f3a33bd6b06bec8646e3995a0d2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:aa:b1:97:77:97:27:cd:16:25:82:60:01:2c:
19:e1:b8:f8:a3:5a:36:7b:d1:7c:92:42:40:70:68:
46:b6:f9:0d:82:5e:c0:8d:8d:ba:7b:ba:77:4c:21:
67:39:1f:7f:39:9a:3c:79:49:af:1a:51:2f:6f:18:
a1:4e:e6:54:7d:74:99:39:10:66:41:89:71:a9:f0:
55:03:11:40:18:b3:99:a6:c3:e2:a2:ec:7c:7e:77:
45:39:a6:b3:ad:93:d6:f7:c0:3d:d0:d5:7d:b7:08:
0b:17:c0:41:ed:51:50:fd:f8:a5:8d:63:59:42:d9:
ad:6f:57:24:ff:2d:05:77:3b:55:c9:d2:fa:7b:9b:
93:ef:04:50:49:ad:0d:eb:8f:c8:43:40:23:f3:ef:
6c:b1:89:52:09:1c:cf:78:4b:a3:3e:3d:24:ea:49:
3f:8b:8e:0c:9f:e5:ab:e0:a4:1e:2e:2a:a2:de:f1:
f3:03:7c:8d:e9:a5:48:6e:70:86:38:a0:a5:00:b6:
9c:07:47:cd:98:79:c5:c8:a9:02:52:7a:f3:32:fb:
8b:46:49:c0:94:57:c4:c5:4a:09:54:1c:20:ba:52:
ed:72:4b:a1:ea:bc:0f:00:c6:e2:22:61:ac:0a:63:
98:29:37:70:a8:01:15:5c:cc:2f:0b:9e:13:2f:64:
aa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A9:CA:CC:67:8F:3A:33:BD:6B:06:BE:C8:64:6E:39:95:A0:D2:B4
X509v3 Authority Key Identifier:
keyid:4E:70:AD:BE:53:F5:F2:85:B0:57:3D:F2:46:E2:5D:51:65:1D:78:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f8:75:ef:53:42:8f:8f:12:c4:9b:db:6a:4c:da:38:38:be:
f3:6e:63:8e:cb:99:94:20:72:b2:49:b2:d7:ac:18:a5:dc:24:
e8:20:43:31:05:83:08:74:59:f0:84:1c:ec:3b:e6:d7:d1:ab:
b1:e4:a5:b3:0d:12:76:4b:cd:d2:7d:9f:da:bb:9b:72:e8:c5:
9d:e3:35:66:99:b7:47:8a:87:bb:10:f2:9e:13:9b:11:23:63:
47:65:0d:e9:9a:78:85:9b:92:83:b5:b8:9f:05:cb:ed:f4:f8:
4c:ec:a8:2a:d5:c6:97:9a:4f:4e:c4:83:fd:52:5c:f2:91:ff:
db:8d:a5:94:77:6b:73:c3:23:27:8f:8d:9d:b9:7a:ec:39:41:
a7:70:1b:95:7b:01:b4:5c:02:e2:85:6b:f0:8f:0a:13:7d:f4:
1f:2f:aa:62:6f:b7:1a:24:be:70:77:1c:d9:4f:d6:42:26:5b:
7d:91:ba:49:d2:ef:42:c4:52:30:4b:7b:42:1c:2b:57:84:d8:
e7:7b:d5:03:75:93:73:e0:2f:72:b5:0b:8c:45:43:e0:50:8f:
97:cd:be:db:7f:dc:3d:8c:73:8b:11:3e:e4:f2:78:1c:39:85:
aa:0e:00:e4:92:fa:e5:bc:fb:af:fb:a5:b0:d5:4c:db:52:1a:
6f:c8:74:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yMbGEBBiNa++glZ+7w0BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNzBhZGJlNTNmNWYyODViMDU3M2RmMjQ2ZTI1ZDUxNjUx
ZDc4NDkwHhcNMjUxMDIwMDQwMjUyWhcNMjUxMDIxMDQwMjUyWjAzMTEwLwYDVQQD
EygzZmE5Y2FjYzY3OGYzYTMzYmQ2YjA2YmVjODY0NmUzOTk1YTBkMmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Kqxl3eXJ80WJYJgASwZ4bj4o1o2
e9F8kkJAcGhGtvkNgl7AjY26e7p3TCFnOR9/OZo8eUmvGlEvbxihTuZUfXSZORBm
QYlxqfBVAxFAGLOZpsPioux8fndFOaazrZPW98A90NV9twgLF8BB7VFQ/filjWNZ
Qtmtb1ck/y0FdztVydL6e5uT7wRQSa0N64/IQ0Aj8+9ssYlSCRzPeEujPj0k6kk/
i44Mn+Wr4KQeLiqi3vHzA3yN6aVIbnCGOKClALacB0fNmHnFyKkCUnrzMvuLRknA
lFfExUoJVBwgulLtckuh6rwPAMbiImGsCmOYKTdwqAEVXMwvC54TL2SqBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+pysxnjzozvWsGvshkbjmVoNK0MB8GA1UdIwQY
MBaAFE5wrb5T9fKFsFc98kbiXVFlHXhJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG5DdHZsUDE4b1d3VnozeVJ1SmRVV1VkZUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83NGY0M2UtYmJmZS00OTYwLThmMzMt
YzFlNmMxYjMxOTFkLzEvVG5DdHZsUDE4b1d3VnozeVJ1SmRVV1VkZUVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83NGY0M2UtYmJmZS00OTYwLThmMzMtYzFlNmMxYjMxOTFk
LzEvVG5DdHZsUDE4b1d3VnozeVJ1SmRVV1VkZUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovh171NC
j48SxJvbakzaODi+825jjsuZlCByskmy16wYpdwk6CBDMQWDCHRZ8IQc7Dvm19Gr
seSlsw0SdkvN0n2f2rubcujFneM1Zpm3R4qHuxDynhObESNjR2UN6Zp4hZuSg7W4
nwXL7fT4TOyoKtXGl5pPTsSD/VJc8pH/242llHdrc8MjJ4+Nnbl67DlBp3AblXsB
tFwC4oVr8I8KE330Hy+qYm+3GiS+cHcc2U/WQiZbfZG6SdLvQsRSMEt7QhwrV4TY
53vVA3WTc+AvcrULjEVD4FCPl82+23/cPYxzixE+5PJ4HDmFqg4A5JL65bz7r/ul
sNVM21Iab8h0yA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:50 2025 by rpki-client