Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
File: TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json)
Hash identifier: l4UdlwuHS3AfbJ9qYwQhYT16hKu8Awy+PQr7/t+dHyw=
Subject key identifier: 3A:00:B7:C6:12:FB:76:C2:68:1D:F5:28:72:5A:8B:B0:34:D0:F3:95
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial: 0199FBEAAE3111BC31DF795B30B63EFEC04F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:01:25 +0000
Manifest this update: Sun 19 Oct 2025 10:01:25 +0000
Manifest next update: Mon 20 Oct 2025 10:01:25 +0000
Files and hashes: 1: B9-Xs7dhnKZZ3y2oqYpIdAWmlNw.roa (hash: TgNafOFIPNxSy2OvvIzhsdKUEZp12L7C7S2Pd52eKm0=)
2: QNGb0gtG4GRClc-idD7pOZ3NKu4.roa (hash: RBMmyAJB99vMalTNtIMZJrCnoBdNekiveW7iLd5Zyt4=)
3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: /4w10Kh0IAb58fR6R00WQ4IZrGwEnftnHLV0QOAbgI8=)
4: uL8wQ5suTSJs6R1LegMqq0w_KnA.roa (hash: q1cpaZXwQ8FTgzr+1V+AjkI0yfC5jTYIkOuwUOw+jNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ae:31:11:bc:31:df:79:5b:30:b6:3e:fe:c0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Validity
Not Before: Oct 19 10:01:25 2025 GMT
Not After : Oct 20 10:01:25 2025 GMT
Subject: CN=3a00b7c612fb76c2681df528725a8bb034d0f395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:07:e7:a9:21:28:2d:3b:45:98:2a:f2:5c:6f:
66:ca:02:35:60:79:99:82:98:fb:56:6a:50:4a:e1:
95:22:f8:cf:a1:40:ca:3f:d8:1c:f7:e7:e8:e4:2e:
2d:e4:ce:6d:17:4a:d0:e9:d0:0c:68:b7:2a:56:2f:
b8:7a:c6:be:23:be:a6:64:93:e8:a2:93:f2:a7:15:
5a:fe:b0:77:59:08:04:6f:cc:de:64:d9:b4:c7:b7:
3b:e7:36:46:d4:85:f8:63:5d:3b:94:90:06:8d:d1:
b1:12:78:2d:62:ba:e1:50:5b:90:63:e8:83:45:17:
ab:29:31:95:0d:dc:ce:b6:dc:ba:ef:bd:74:75:a7:
b8:66:83:65:f7:6a:72:31:c1:9a:16:29:8c:5b:e4:
8f:d7:f3:f8:ae:37:b3:af:45:a5:de:bf:1d:24:71:
8f:d3:7f:96:ee:b0:85:81:3c:c8:79:74:fd:d1:2e:
3f:f6:6f:6a:4c:9f:32:40:59:49:27:2e:bd:06:4f:
92:25:12:20:43:95:b7:70:c5:cd:57:55:99:35:21:
59:fc:26:5c:cd:52:cc:af:52:17:b2:59:6b:ba:79:
be:04:83:b9:c2:df:db:be:50:dd:c8:7b:28:81:ee:
21:e7:09:59:8a:e9:42:e4:0c:51:63:a8:56:98:73:
96:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:00:B7:C6:12:FB:76:C2:68:1D:F5:28:72:5A:8B:B0:34:D0:F3:95
X509v3 Authority Key Identifier:
keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:77:58:a4:59:45:8c:ef:e8:31:cd:a3:2d:db:bc:fc:e4:2e:
79:2a:04:f4:7c:03:99:28:a3:76:f7:72:e0:b7:73:65:72:04:
72:43:f9:67:b7:88:3b:67:ef:e0:5a:e1:c8:24:e5:b3:ad:c7:
9f:7c:40:60:f3:68:8b:53:70:f8:8e:41:e8:d1:e4:f6:72:9e:
f0:5c:13:43:71:2e:64:43:15:5f:fb:35:5b:a5:14:05:73:e9:
7d:bc:31:37:e2:84:27:f1:70:ed:f5:85:cb:c6:4a:22:9a:0b:
38:68:53:51:91:89:e3:71:c9:3b:f0:e8:40:1c:86:d6:cd:3e:
d3:56:fd:09:a6:5b:b9:c8:6d:54:42:69:40:9f:a0:5b:d9:39:
41:22:93:32:fb:0e:dd:fb:b8:c3:f6:42:0d:17:67:37:ef:88:
c1:1c:d5:e2:68:64:1c:3b:af:d2:50:bf:9e:57:76:e7:c8:a9:
f7:0d:68:f5:31:f4:45:3b:d0:15:11:d1:28:e2:09:90:6b:77:
a6:81:2f:9e:6e:6e:f8:3c:03:9a:a8:f7:c7:cd:c7:74:f0:4a:
42:30:d8:bb:2c:36:f9:f5:45:4f:3f:41:09:05:b3:50:81:0c:
80:1d:bd:93:16:11:60:78:84:4a:2e:d7:4f:ca:a6:73:4d:53:
47:aa:81:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76q4xEbwx33lbMLY+/sBPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYzM5MWRjNjE1ZmQ0YTNhZDEwYzBmMmFiOGIwYTUwNmQw
MzllZDgwHhcNMjUxMDE5MTAwMTI1WhcNMjUxMDIwMTAwMTI1WjAzMTEwLwYDVQQD
EygzYTAwYjdjNjEyZmI3NmMyNjgxZGY1Mjg3MjVhOGJiMDM0ZDBmMzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gfnqSEoLTtFmCryXG9mygI1YHmZ
gpj7VmpQSuGVIvjPoUDKP9gc9+fo5C4t5M5tF0rQ6dAMaLcqVi+4esa+I76mZJPo
opPypxVa/rB3WQgEb8zeZNm0x7c75zZG1IX4Y107lJAGjdGxEngtYrrhUFuQY+iD
RRerKTGVDdzOtty67710dae4ZoNl92pyMcGaFimMW+SP1/P4rjezr0Wl3r8dJHGP
03+W7rCFgTzIeXT90S4/9m9qTJ8yQFlJJy69Bk+SJRIgQ5W3cMXNV1WZNSFZ/CZc
zVLMr1IXsllrunm+BIO5wt/bvlDdyHsoge4h5wlZiulC5AxRY6hWmHOWqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoAt8YS+3bCaB31KHJai7A00POVMB8GA1UdIwQY
MBaAFE3DkdxhX9SjrRDA8quLClBtA57YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEt
ZmQyOTE1ZDRjZDVhLzEvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEtZmQyOTE1ZDRjZDVh
LzEvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3dYpFlF
jO/oMc2jLdu8/OQueSoE9HwDmSijdvdy4LdzZXIEckP5Z7eIO2fv4FrhyCTls63H
n3xAYPNoi1Nw+I5B6NHk9nKe8FwTQ3EuZEMVX/s1W6UUBXPpfbwxN+KEJ/Fw7fWF
y8ZKIpoLOGhTUZGJ43HJO/DoQByG1s0+01b9CaZbuchtVEJpQJ+gW9k5QSKTMvsO
3fu4w/ZCDRdnN++IwRzV4mhkHDuv0lC/nld258ip9w1o9TH0RTvQFRHRKOIJkGt3
poEvnm5u+DwDmqj3x83HdPBKQjDYuyw2+fVFTz9BCQWzUIEMgB29kxYRYHiESi7X
T8qmc01TR6qBSg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:21 2025 by rpki-client