Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft
File: tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft (raw, json)
Hash identifier: u/Ox9dlMfBsBi+lvKwV1456p9mt9wBefU9RFmviA6E0=
Subject key identifier: 75:C6:8F:A0:54:51:D0:52:84:D3:16:42:54:83:FB:E2:00:E7:03:B2
Authority key identifier: B6:9A:AE:F1:CE:A1:9F:2F:92:6F:57:09:61:54:5C:FE:4E:D6:9A:F6
Certificate issuer: /CN=b69aaef1cea19f2f926f570961545cfe4ed69af6
Certificate serial: 0199FBEBD8A1024592427B255FA9C24E1A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpqu8c6hny-Sb1cJYVRc_k7WmvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft
Manifest number: 0681
Signing time: Sun 19 Oct 2025 10:02:41 +0000
Manifest this update: Sun 19 Oct 2025 10:02:41 +0000
Manifest next update: Mon 20 Oct 2025 10:02:41 +0000
Files and hashes: 1: tpqu8c6hny-Sb1cJYVRc_k7WmvY.crl (hash: lgFxHWrz2F/QWfOrDJnfCB9Oj02aG/JwtKKaPB4NqJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpqu8c6hny-Sb1cJYVRc_k7WmvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d8:a1:02:45:92:42:7b:25:5f:a9:c2:4e:1a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69aaef1cea19f2f926f570961545cfe4ed69af6
Validity
Not Before: Oct 19 10:02:41 2025 GMT
Not After : Oct 20 10:02:41 2025 GMT
Subject: CN=75c68fa05451d05284d316425483fbe200e703b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:b0:22:6d:8b:5d:32:1a:f3:23:ef:16:fb:
6e:17:cc:bd:fe:ad:43:d8:c1:84:f0:c3:30:95:2a:
20:62:96:ea:22:0c:2f:fa:1b:28:87:c8:f2:25:92:
0b:4b:7c:98:e3:04:01:45:5c:8c:f6:a4:ad:87:db:
6b:e1:96:c1:02:95:52:12:de:ed:7d:de:43:21:a3:
15:3d:7b:b5:4a:12:52:6c:c5:01:08:94:ba:13:d1:
97:88:04:1a:05:8e:bb:be:02:f5:13:78:58:d3:ba:
3b:65:74:e4:63:1a:26:ff:20:13:41:01:67:3c:46:
54:bf:fc:dd:f0:21:a7:7c:a5:27:f1:9d:5b:24:33:
f5:89:9a:70:1a:36:b8:1c:cf:ac:aa:5f:27:ae:ef:
c4:b2:f8:8e:62:f2:e0:52:47:ff:2e:aa:92:f6:04:
33:03:36:11:95:e4:49:4a:f0:05:24:32:53:3e:e8:
35:a3:45:ab:f3:c2:23:06:b2:3b:64:f0:6c:ab:71:
ff:56:93:58:da:88:75:60:d3:3a:4c:0b:a7:40:52:
5b:c3:7a:00:74:d0:09:d3:41:ac:db:b6:82:3e:fa:
5d:ae:25:80:0c:56:dc:30:dd:b5:30:5e:1b:4d:b1:
3f:0a:56:51:1c:98:45:86:22:96:30:db:74:6e:dd:
d7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C6:8F:A0:54:51:D0:52:84:D3:16:42:54:83:FB:E2:00:E7:03:B2
X509v3 Authority Key Identifier:
keyid:B6:9A:AE:F1:CE:A1:9F:2F:92:6F:57:09:61:54:5C:FE:4E:D6:9A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpqu8c6hny-Sb1cJYVRc_k7WmvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:fa:9c:f3:43:a1:36:c1:3a:a1:18:58:fe:cc:6a:f4:f3:35:
5a:a9:6f:1b:3b:65:73:51:21:27:36:d4:97:18:41:48:23:f2:
a5:33:17:44:b8:db:70:13:15:ad:e6:8e:f5:4d:e3:e7:27:69:
ae:2a:59:09:e0:0f:91:d9:9a:df:63:72:3e:16:01:a0:eb:5a:
e2:72:e3:d4:87:a8:a8:e9:0c:cf:8a:6d:49:0e:c7:46:52:bc:
28:68:ba:cb:00:2c:57:9b:73:27:15:b7:e6:23:c0:1a:97:6a:
0e:2e:6d:37:02:70:dd:67:84:47:5b:9e:a8:49:32:d1:97:55:
c7:73:d0:6d:1a:12:88:56:00:c6:65:42:94:f5:66:01:48:36:
f0:4c:5a:7e:ae:8a:bd:53:66:a4:c0:25:21:a8:6f:25:2b:84:
eb:33:14:b4:05:a2:11:5f:43:93:72:08:37:03:44:8d:8a:68:
56:63:0f:cb:7e:1a:10:5a:28:97:af:d4:be:cd:71:f0:4f:5f:
b9:ca:aa:4d:b3:c2:d1:5a:fa:40:e0:e9:5e:cc:6e:58:eb:5a:
3f:b4:e9:6d:b8:73:32:cc:65:bc:cb:c2:a8:82:a8:9a:ba:68:
86:24:76:f8:02:fc:1a:8e:d7:28:81:ef:cf:09:84:4e:7a:df:
17:22:b1:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn769ihAkWSQnslX6nCThqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OWFhZWYxY2VhMTlmMmY5MjZmNTcwOTYxNTQ1Y2ZlNGVk
NjlhZjYwHhcNMjUxMDE5MTAwMjQxWhcNMjUxMDIwMTAwMjQxWjAzMTEwLwYDVQQD
Eyg3NWM2OGZhMDU0NTFkMDUyODRkMzE2NDI1NDgzZmJlMjAwZTcwM2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbiwIm2LXTIa8yPvFvtuF8y9/q1D
2MGE8MMwlSogYpbqIgwv+hsoh8jyJZILS3yY4wQBRVyM9qSth9tr4ZbBApVSEt7t
fd5DIaMVPXu1ShJSbMUBCJS6E9GXiAQaBY67vgL1E3hY07o7ZXTkYxom/yATQQFn
PEZUv/zd8CGnfKUn8Z1bJDP1iZpwGja4HM+sql8nru/EsviOYvLgUkf/LqqS9gQz
AzYRleRJSvAFJDJTPug1o0Wr88IjBrI7ZPBsq3H/VpNY2oh1YNM6TAunQFJbw3oA
dNAJ00Gs27aCPvpdriWADFbcMN21MF4bTbE/ClZRHJhFhiKWMNt0bt3XMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXGj6BUUdBShNMWQlSD++IA5wOyMB8GA1UdIwQY
MBaAFLaarvHOoZ8vkm9XCWFUXP5O1pr2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHBxdThjNmhueS1TYjFjSllWUmNfazdXbXZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mMDE3MTItNzJiYi00MDg4LThiNjEt
N2ZlMjBmMmVmZWQ0LzEvdHBxdThjNmhueS1TYjFjSllWUmNfazdXbXZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mMDE3MTItNzJiYi00MDg4LThiNjEtN2ZlMjBmMmVmZWQ0
LzEvdHBxdThjNmhueS1TYjFjSllWUmNfazdXbXZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvqc80Oh
NsE6oRhY/sxq9PM1WqlvGztlc1EhJzbUlxhBSCPypTMXRLjbcBMVreaO9U3j5ydp
ripZCeAPkdma32NyPhYBoOta4nLj1IeoqOkMz4ptSQ7HRlK8KGi6ywAsV5tzJxW3
5iPAGpdqDi5tNwJw3WeER1ueqEky0ZdVx3PQbRoSiFYAxmVClPVmAUg28Exafq6K
vVNmpMAlIahvJSuE6zMUtAWiEV9Dk3IINwNEjYpoVmMPy34aEFool6/Uvs1x8E9f
ucqqTbPC0Vr6QODpXsxuWOtaP7TpbbhzMsxlvMvCqIKomrpohiR2+AL8Go7XKIHv
zwmETnrfFyKxoA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:11 2025 by rpki-client