Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json)
Hash identifier: kF3Ge/91V4kjpS+tEKskOcfly2+o+TVvzb5mkcWzlkg=
Subject key identifier: 2A:60:E8:09:B4:FF:B9:4D:FC:0E:70:22:87:C6:02:99:BB:36:40:FF
Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Certificate serial: 0199FC584A014B66E416DC84A75378A97F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 12:01:08 +0000
Manifest this update: Sun 19 Oct 2025 12:01:08 +0000
Manifest next update: Mon 20 Oct 2025 12:01:08 +0000
Files and hashes: 1: A19KF2VhmqgRITxahuDcRts8KJs.roa (hash: YirbVHhxW1CKNUwQAz3dz5QapLv5A3zZT5MHBNEVZ34=)
2: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: cJ/20+eSrf30wEVB8Wa49EYFbAiXzWMb82YKiJWiBNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:4a:01:4b:66:e4:16:dc:84:a7:53:78:a9:7f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Validity
Not Before: Oct 19 12:01:08 2025 GMT
Not After : Oct 20 12:01:08 2025 GMT
Subject: CN=2a60e809b4ffb94dfc0e702287c60299bb3640ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:66:94:5b:c6:9f:11:05:6b:dd:51:1d:5e:
9c:ba:33:fe:fb:45:7b:1a:87:4f:bd:19:0a:7a:ff:
d2:2d:d1:02:a3:a2:4d:1a:c5:54:ec:40:12:e3:38:
74:da:93:56:6f:6b:80:f3:27:27:09:e8:ed:b6:41:
c1:68:f9:fa:68:8c:fe:de:bb:2c:13:1e:e4:44:c4:
b1:a8:e8:a8:80:1e:d3:3b:3a:69:b6:ac:b3:43:95:
e4:3e:04:92:2a:cf:2d:57:99:e8:d9:e6:ed:c7:81:
c9:2a:56:b4:2d:7a:89:b4:c0:2c:c8:95:58:c4:47:
1d:3c:d4:de:8a:8a:d6:8b:f0:f6:0a:74:75:9a:f6:
ef:a5:f4:c0:0d:12:37:f9:ff:93:bb:66:88:54:6d:
50:48:b9:fd:37:0d:c6:6d:37:be:52:56:3e:b0:52:
f4:6b:f6:d1:e4:6c:f0:87:7a:56:07:83:2b:33:a8:
42:1e:82:3a:c0:b9:99:3f:a2:91:db:67:99:f5:61:
75:da:bb:7a:6d:13:3a:39:ab:cb:07:f0:a3:ce:b0:
47:cc:7d:c6:1f:bf:8b:d9:cc:4b:e0:79:96:8e:71:
21:65:5b:5b:fd:9a:d5:65:c6:48:28:7f:09:04:68:
55:15:1c:9a:3b:3d:dc:b8:6e:7e:14:22:e2:55:78:
a8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:60:E8:09:B4:FF:B9:4D:FC:0E:70:22:87:C6:02:99:BB:36:40:FF
X509v3 Authority Key Identifier:
keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f9:e9:50:8b:0c:30:81:38:4f:3e:d1:8e:91:13:85:d4:d4:
a3:68:7f:6f:9c:77:27:3c:da:23:d9:f7:5c:7e:7b:75:9c:5d:
bf:5d:db:a8:ca:1f:72:a2:53:d3:09:33:95:51:5b:3f:14:1b:
31:6f:22:12:a0:d1:b7:11:3e:90:b0:b6:5c:0c:9d:a1:32:a6:
42:4f:46:a2:e3:57:46:3d:45:39:04:46:6d:fe:9f:cb:f2:5a:
4b:5e:b0:32:02:e4:c7:5c:a9:e8:32:8c:ae:14:0d:10:bf:aa:
5b:0d:c9:97:c0:fb:18:c4:f9:2e:a0:84:bf:cf:c8:6d:14:10:
7d:69:4a:d7:da:8d:b7:b5:a5:d2:54:02:6f:30:55:00:ea:5f:
95:8c:17:bb:9d:50:4f:8b:5a:a0:57:b9:83:2e:18:4b:ad:85:
f2:66:9f:a9:21:2d:75:6f:80:2a:38:84:dd:39:7d:cc:5c:31:
1c:dd:00:ac:cb:04:1b:d7:07:6e:b2:8d:39:75:8e:1d:9a:08:
fc:72:d7:1b:1b:5d:9c:c1:e5:ec:07:2f:da:8a:87:13:3c:2f:
6c:3c:f1:83:1f:70:de:51:85:ee:80:76:77:77:73:bb:dd:d8:
65:7e:8d:f7:00:b9:76:8c:c6:ec:6c:95:70:7e:47:01:5d:74:
1a:13:9b:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WEoBS2bkFtyEp1N4qX9BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ZjBmODM4YWZiYzEzMjI2ODA1NDRlZDFjOWM1YTJiMDk5
NjVkOWYwHhcNMjUxMDE5MTIwMTA4WhcNMjUxMDIwMTIwMTA4WjAzMTEwLwYDVQQD
EygyYTYwZTgwOWI0ZmZiOTRkZmMwZTcwMjI4N2M2MDI5OWJiMzY0MGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXdmlFvGnxEFa91RHV6cujP++0V7
GodPvRkKev/SLdECo6JNGsVU7EAS4zh02pNWb2uA8ycnCejttkHBaPn6aIz+3rss
Ex7kRMSxqOiogB7TOzpptqyzQ5XkPgSSKs8tV5no2ebtx4HJKla0LXqJtMAsyJVY
xEcdPNTeiorWi/D2CnR1mvbvpfTADRI3+f+Tu2aIVG1QSLn9Nw3GbTe+UlY+sFL0
a/bR5Gzwh3pWB4MrM6hCHoI6wLmZP6KR22eZ9WF12rt6bRM6OavLB/CjzrBHzH3G
H7+L2cxL4HmWjnEhZVtb/ZrVZcZIKH8JBGhVFRyaOz3cuG5+FCLiVXioYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpg6Am0/7lN/A5wIofGApm7NkD/MB8GA1UdIwQY
MBaAFLXw+DivvBMiaAVE7RycWisJll2fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zMjA1MTItOTFjYi00MzgzLTk3NjEt
YTUyZGM5YzIyMDdjLzEvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8zMjA1MTItOTFjYi00MzgzLTk3NjEtYTUyZGM5YzIyMDdj
LzEvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfnpUIsM
MIE4Tz7RjpEThdTUo2h/b5x3JzzaI9n3XH57dZxdv13bqMofcqJT0wkzlVFbPxQb
MW8iEqDRtxE+kLC2XAydoTKmQk9GouNXRj1FOQRGbf6fy/JaS16wMgLkx1yp6DKM
rhQNEL+qWw3Jl8D7GMT5LqCEv8/IbRQQfWlK19qNt7Wl0lQCbzBVAOpflYwXu51Q
T4taoFe5gy4YS62F8mafqSEtdW+AKjiE3Tl9zFwxHN0ArMsEG9cHbrKNOXWOHZoI
/HLXGxtdnMHl7Acv2oqHEzwvbDzxgx9w3lGF7oB2d3dzu93YZX6N9wC5dozG7GyV
cH5HAV10GhObyQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:32 2025 by rpki-client