Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json)
Hash identifier: PEupzXnW2vbPDhTLCPIXd4o7jKt93Kom8XGmdV2ZMpM=
Subject key identifier: 91:BB:90:10:1E:8E:43:7B:DE:23:D6:8D:14:5F:0F:4F:B4:A6:E9:BB
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 019A006C47553D19F2C1C5C172983BA77166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 07:01:27 +0000
Manifest this update: Mon 20 Oct 2025 07:01:27 +0000
Manifest next update: Tue 21 Oct 2025 07:01:27 +0000
Files and hashes: 1: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: Dwo0ou5LsEGkOsT+mGYj6lFvq0tS8iuxOnzvGjU2M1E=)
2: bs1HYE5HpmfRDe1IWRWlAw4_YbQ.roa (hash: /9wCX+4PJTuFTnMcFlhOot3PdJrbFSkbu3ySPd314JY=)
3: kvulLtgS7l9j5cL5cr_z1UEgt1M.roa (hash: lwycUBIUeNB/fogCEgMYVAepQLASER5k8Ye40EXBAoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:47:55:3d:19:f2:c1:c5:c1:72:98:3b:a7:71:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Oct 20 07:01:27 2025 GMT
Not After : Oct 21 07:01:27 2025 GMT
Subject: CN=91bb90101e8e437bde23d68d145f0f4fb4a6e9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5b:6e:bb:25:13:03:39:7a:ca:3a:1b:d3:52:
95:0b:4f:ac:f0:56:a6:4a:9c:87:b7:bf:5b:17:84:
2e:f4:f5:f9:8e:d8:60:71:02:cc:5c:a0:09:f9:fa:
b5:53:b7:10:d2:e2:51:25:6f:10:e4:61:dd:7a:17:
bf:a9:a1:b9:1d:8b:79:8a:fc:5e:b5:81:ea:d6:c0:
f8:25:48:b7:ba:20:19:23:c5:f8:a9:f1:4f:68:85:
c7:a9:c5:04:b5:e2:63:94:57:52:92:36:dc:65:11:
05:c6:0d:a3:2e:6f:73:aa:77:45:c3:89:0d:0a:bd:
ab:11:a2:8c:cf:7e:ae:d4:ae:71:ed:bc:0b:55:d8:
24:a6:04:a2:df:b2:8d:8c:e7:59:5d:cd:6f:b6:c5:
4e:a2:17:85:a9:f3:a3:e0:7b:45:f3:5f:3c:da:c6:
3e:27:99:a8:6e:7b:a6:75:36:38:3f:ad:f7:47:dd:
09:a9:a0:a3:88:bf:57:9e:1f:79:69:4c:44:3c:25:
73:12:20:aa:c9:77:e9:17:5c:e3:cc:66:2e:26:99:
38:82:b6:07:f0:04:82:0e:a0:52:43:24:a6:46:d8:
4d:5b:93:ac:a9:c6:37:34:25:24:7a:e7:da:46:74:
c9:04:c7:ac:b0:b0:1d:69:52:64:82:78:17:ce:22:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BB:90:10:1E:8E:43:7B:DE:23:D6:8D:14:5F:0F:4F:B4:A6:E9:BB
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8a:5e:9b:4e:1b:5a:10:67:8e:aa:16:85:8a:c6:d1:43:72:
a4:40:69:fc:76:58:c5:e7:a2:0a:ef:fc:98:3c:5e:d4:29:80:
73:79:58:7a:74:d6:7b:0d:5c:5d:79:8c:af:20:1c:52:5d:18:
54:6d:62:79:d7:4e:78:1c:8f:0b:5a:25:5a:93:6e:d6:39:63:
27:12:f8:77:d2:94:24:ac:9e:29:55:6a:62:e7:84:e1:69:68:
13:5a:10:0e:43:21:c4:29:c1:ef:6c:e6:09:4d:5e:76:01:d1:
9f:38:31:f6:24:15:74:5d:c6:1e:5a:fb:ad:6d:d0:ff:cb:22:
a2:5d:02:32:f2:e1:46:0d:56:8e:f9:9b:3f:0d:cc:31:9f:26:
6d:9f:63:d4:f5:d3:66:61:77:f0:86:0e:19:02:a9:b0:9f:8e:
ff:09:6b:ef:d0:0d:97:c7:c1:45:ed:30:bf:ce:1b:68:1c:e4:
20:8a:28:fb:aa:07:37:e9:c3:e6:64:2e:10:a2:e7:3c:a9:85:
9d:e6:e8:05:75:50:0b:7b:5f:02:29:23:2b:e9:ef:a8:27:0b:
44:a6:0a:7a:36:e2:71:bc:7f:f2:b6:a3:7b:39:87:b4:d4:cf:
16:bd:97:06:0f:b1:c5:98:96:a8:e6:08:63:94:ef:77:67:a6:
85:46:23:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbEdVPRnywcXBcpg7p3FmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2JjNWUwNDVlYWE1Zjc2MmE5MTQ2MjQ0YzE5MjQ4YjYy
YmE5NzYwHhcNMjUxMDIwMDcwMTI3WhcNMjUxMDIxMDcwMTI3WjAzMTEwLwYDVQQD
Eyg5MWJiOTAxMDFlOGU0MzdiZGUyM2Q2OGQxNDVmMGY0ZmI0YTZlOWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlltuuyUTAzl6yjob01KVC0+s8Fam
SpyHt79bF4Qu9PX5jthgcQLMXKAJ+fq1U7cQ0uJRJW8Q5GHdehe/qaG5HYt5ivxe
tYHq1sD4JUi3uiAZI8X4qfFPaIXHqcUEteJjlFdSkjbcZREFxg2jLm9zqndFw4kN
Cr2rEaKMz36u1K5x7bwLVdgkpgSi37KNjOdZXc1vtsVOoheFqfOj4HtF81882sY+
J5mobnumdTY4P633R90JqaCjiL9Xnh95aUxEPCVzEiCqyXfpF1zjzGYuJpk4grYH
8ASCDqBSQySmRthNW5OsqcY3NCUkeufaRnTJBMessLAdaVJkgngXziJJ2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJG7kBAejkN73iPWjRRfD0+0pum7MB8GA1UdIwQY
MBaAFEzLxeBF6qX3YqkUYkTBkki2K6l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDct
YTdjNTlkZGNmNzZiLzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDctYTdjNTlkZGNmNzZi
LzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYpem04b
WhBnjqoWhYrG0UNypEBp/HZYxeeiCu/8mDxe1CmAc3lYenTWew1cXXmMryAcUl0Y
VG1ieddOeByPC1olWpNu1jljJxL4d9KUJKyeKVVqYueE4WloE1oQDkMhxCnB72zm
CU1edgHRnzgx9iQVdF3GHlr7rW3Q/8siol0CMvLhRg1WjvmbPw3MMZ8mbZ9j1PXT
ZmF38IYOGQKpsJ+O/wlr79ANl8fBRe0wv84baBzkIIoo+6oHN+nD5mQuEKLnPKmF
neboBXVQC3tfAikjK+nvqCcLRKYKejbicbx/8rajezmHtNTPFr2XBg+xxZiWqOYI
Y5Tvd2emhUYjlQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:31 2025 by rpki-client