Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
File: TnzINx7SS6z2esqLkCzucGr8Yks.mft (raw, json)
Hash identifier: zNL2beCdx/uPOLmZKl7mDHeOyjT3LeFnr5mIPHHq1qk=
Subject key identifier: 68:18:85:4A:A0:5E:4C:8E:3E:D8:F4:E0:C5:D0:8C:6F:64:F4:A5:B6
Authority key identifier: 4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
Certificate issuer: /CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Certificate serial: 0199FC2192D5E3C26AA4402090D0C14144BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: AFXKRWkq4CEJ7e_q_TT8oCKNDgs.roa (hash: vvcSpEWzby7j1iGxx2OT88XWdiMYKYH4weh98eM4dfY=)
2: TnzINx7SS6z2esqLkCzucGr8Yks.crl (hash: R9WvwaNHd4/VPAjr0SmFjuIls0ds1B581GvsBO2wpQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:92:d5:e3:c2:6a:a4:40:20:90:d0:c1:41:44:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=6818854aa05e4c8e3ed8f4e0c5d08c6f64f4a5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:44:a0:6c:7f:99:bf:78:b7:25:d2:aa:12:d3:
b1:f7:a5:30:70:be:ea:46:ae:40:2a:f3:42:81:3d:
f0:78:6d:96:da:1c:fb:89:e0:4e:21:9c:e8:08:0e:
41:c6:a9:40:24:ca:c9:87:b9:ce:c7:88:ba:d8:9d:
0f:8e:19:9d:07:55:aa:88:3f:d1:27:3c:d9:cc:3b:
12:bd:ed:34:84:a9:66:74:45:f5:97:49:f9:82:fb:
0c:e6:e4:63:54:30:92:8f:94:64:51:77:b7:0b:7f:
d1:92:74:ca:0d:63:e0:52:65:6f:c2:c7:bd:04:c9:
0b:fd:6f:8d:58:a0:79:64:4c:f2:6d:12:70:af:4d:
65:78:91:f4:58:ac:94:2c:61:d6:cd:de:68:d8:5c:
73:f3:90:c6:d7:1d:fd:02:04:77:58:58:39:52:2f:
2c:91:a8:7a:19:a7:c4:26:7c:83:4f:6e:e1:68:8c:
e6:6a:72:21:02:40:f0:fd:b2:25:cb:87:8f:0f:4e:
b1:21:13:cd:7c:50:49:c0:93:39:5d:aa:9e:6f:de:
78:35:8b:90:57:60:5a:7e:75:27:a5:2b:23:bf:da:
86:21:42:aa:f0:73:a6:36:6c:60:a6:a8:39:51:a1:
33:24:a6:d0:82:ac:14:b5:34:88:bf:07:19:94:9a:
e7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:18:85:4A:A0:5E:4C:8E:3E:D8:F4:E0:C5:D0:8C:6F:64:F4:A5:B6
X509v3 Authority Key Identifier:
keyid:4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:73:ae:d6:57:17:29:bf:60:6f:b4:ce:7f:87:1c:be:20:a2:
d7:df:93:eb:73:3c:72:2d:68:6f:36:dd:42:89:3b:ae:97:ed:
89:c8:46:0e:25:a2:f3:70:c1:74:8c:aa:b2:6d:46:3d:fe:d8:
42:0c:e1:a6:d2:93:33:d7:4b:f4:e1:f2:ca:35:ca:7c:14:8d:
97:2b:19:25:aa:2c:0f:bd:24:f2:49:d9:2d:4b:8c:c9:bf:1f:
ee:03:27:dd:ae:d0:33:6b:32:a0:9e:f7:d4:4c:c6:f5:49:6e:
4c:0f:95:97:ac:a1:af:85:e4:e4:46:ae:75:61:a8:1a:3d:25:
7f:7c:fb:d9:4b:55:3c:99:ee:b4:fd:43:91:3b:a9:e8:65:86:
88:8c:56:ca:37:43:11:aa:d5:95:bc:2c:97:0f:bd:de:c8:28:
9f:d2:2e:7e:99:4b:ce:0f:73:0a:a8:f9:9e:4c:55:ff:9c:99:
15:81:51:ff:05:a0:54:11:34:d1:52:37:bd:57:a4:cc:c9:02:
22:95:e4:6f:5b:d9:a0:9d:4f:07:7e:43:8d:ea:77:c5:f7:3a:
e5:5d:02:ea:5e:62:f5:f6:fb:22:5e:f8:b0:bd:58:3a:17:86:
c8:d6:f3:5b:62:33:bd:71:b0:13:a6:83:1c:7e:28:09:96:8f:
05:89:63:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IZLV48JqpEAgkNDBQUS8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlN2NjODM3MWVkMjRiYWNmNjdhY2E4YjkwMmNlZTcwNmFm
YzYyNGIwHhcNMjUxMDE5MTEwMTIyWhcNMjUxMDIwMTEwMTIyWjAzMTEwLwYDVQQD
Eyg2ODE4ODU0YWEwNWU0YzhlM2VkOGY0ZTBjNWQwOGM2ZjY0ZjRhNWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3USgbH+Zv3i3JdKqEtOx96UwcL7q
Rq5AKvNCgT3weG2W2hz7ieBOIZzoCA5BxqlAJMrJh7nOx4i62J0PjhmdB1WqiD/R
JzzZzDsSve00hKlmdEX1l0n5gvsM5uRjVDCSj5RkUXe3C3/RknTKDWPgUmVvwse9
BMkL/W+NWKB5ZEzybRJwr01leJH0WKyULGHWzd5o2Fxz85DG1x39AgR3WFg5Ui8s
kah6GafEJnyDT27haIzmanIhAkDw/bIly4ePD06xIRPNfFBJwJM5Xaqeb954NYuQ
V2BafnUnpSsjv9qGIUKq8HOmNmxgpqg5UaEzJKbQgqwUtTSIvwcZlJrnfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgYhUqgXkyOPtj04MXQjG9k9KW2MB8GA1UdIwQY
MBaAFE58yDce0kus9nrKi5As7nBq/GJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG56SU54N1NTNnoyZXNxTGtDenVjR3I4WWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8wYjRjZGYtYjQ4Ni00YTU4LTgwMGQt
OGVkNWE3OWRlODM1LzEvVG56SU54N1NTNnoyZXNxTGtDenVjR3I4WWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8wYjRjZGYtYjQ4Ni00YTU4LTgwMGQtOGVkNWE3OWRlODM1
LzEvVG56SU54N1NTNnoyZXNxTGtDenVjR3I4WWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHOu1lcX
Kb9gb7TOf4ccviCi19+T63M8ci1obzbdQok7rpftichGDiWi83DBdIyqsm1GPf7Y
QgzhptKTM9dL9OHyyjXKfBSNlysZJaosD70k8knZLUuMyb8f7gMn3a7QM2syoJ73
1EzG9UluTA+Vl6yhr4Xk5EaudWGoGj0lf3z72UtVPJnutP1DkTup6GWGiIxWyjdD
EarVlbwslw+93sgon9IufplLzg9zCqj5nkxV/5yZFYFR/wWgVBE00VI3vVekzMkC
IpXkb1vZoJ1PB35Djep3xfc65V0C6l5i9fb7Il74sL1YOheGyNbzW2IzvXGwE6aD
HH4oCZaPBYlj2A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:25 2025 by rpki-client