Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
File: tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft (raw, json)
Hash identifier: FfevR8huP+HVJYWUv5k2/a+81Yr02Xu3sKCIUKBNuJA=
Subject key identifier: F8:27:3A:BA:2C:C4:42:33:D8:E2:DC:F9:84:89:36:92:33:39:D4:8C
Authority key identifier: B6:05:D1:90:1C:57:11:00:B8:9A:5C:48:C3:A7:06:57:84:15:71:96
Certificate issuer: /CN=b605d1901c571100b89a5c48c3a7065784157196
Certificate serial: 0199FC5892F856AB8AEF3C4307227747E2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
Manifest number: 0947
Signing time: Sun 19 Oct 2025 12:01:27 +0000
Manifest this update: Sun 19 Oct 2025 12:01:27 +0000
Manifest next update: Mon 20 Oct 2025 12:01:27 +0000
Files and hashes: 1: tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl (hash: em3FZ5NFTg7CWVBOtt+nHE7iiQ/asGUu+XZNgg4PkE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:92:f8:56:ab:8a:ef:3c:43:07:22:77:47:e2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b605d1901c571100b89a5c48c3a7065784157196
Validity
Not Before: Oct 19 12:01:27 2025 GMT
Not After : Oct 20 12:01:27 2025 GMT
Subject: CN=f8273aba2cc44233d8e2dcf9848936923339d48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a4:be:82:d6:97:e8:55:11:ee:36:8f:f2:73:
ec:b4:9a:e2:93:50:17:d0:08:6a:a4:29:56:e2:bd:
a4:a6:01:0a:50:79:50:a6:b6:be:64:df:53:b6:56:
b1:31:cc:6b:bd:ab:ed:33:0d:2b:7f:10:43:3d:29:
26:ee:83:e1:1f:04:73:fb:07:8c:75:e3:d4:f4:b5:
6a:a0:08:87:38:a7:6c:3e:69:5d:28:4b:76:b5:f5:
e9:6b:9d:97:9d:28:2a:21:1f:99:ae:04:1b:b4:ad:
e3:a9:53:2d:3d:80:9b:4c:1e:77:56:83:5a:36:86:
6d:82:63:ec:a8:59:ef:b7:b6:36:db:8a:ce:45:81:
53:1a:be:47:ec:23:67:23:62:11:7a:d7:e2:83:e7:
ca:4e:40:e1:db:23:97:90:96:ac:58:52:ed:ad:c2:
43:f8:f6:82:bf:28:12:bf:f3:a9:68:dd:5a:45:05:
ce:a4:64:41:6e:a0:14:91:95:9d:0f:a0:cf:d5:c3:
f1:4a:76:b6:3b:c0:d7:44:39:57:31:fe:93:6d:d3:
17:81:71:d4:f6:f8:61:a6:c2:eb:bb:0d:b3:14:03:
22:af:67:dc:8d:53:17:f7:90:56:3d:da:c3:e4:5e:
95:08:5f:ad:40:03:ee:75:ca:29:64:bb:be:b6:b7:
ee:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:27:3A:BA:2C:C4:42:33:D8:E2:DC:F9:84:89:36:92:33:39:D4:8C
X509v3 Authority Key Identifier:
keyid:B6:05:D1:90:1C:57:11:00:B8:9A:5C:48:C3:A7:06:57:84:15:71:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a3:91:6c:93:ed:38:e2:ba:e2:f8:83:1a:ab:2f:82:dd:84:
90:7f:07:d8:85:58:9f:22:a2:bd:8d:69:55:e3:91:40:8b:0e:
44:1b:ee:fb:2b:90:17:20:31:66:3d:d2:cc:ae:4c:1d:56:a6:
22:f0:80:de:d1:3b:b6:cc:32:fa:41:ed:9b:f3:08:eb:86:34:
6f:b7:d4:e5:06:c7:2f:10:27:45:b0:7f:23:17:ff:b0:be:0a:
8c:89:b0:f8:2e:85:46:89:f6:15:20:c8:c4:fa:0f:e8:63:da:
d8:ca:03:b7:51:24:b8:e0:13:d0:24:e7:92:ce:ee:46:ae:9f:
34:5f:45:0a:51:4d:e1:2b:d1:fb:91:ef:1d:99:d1:97:53:57:
03:74:01:ce:77:7b:01:e7:e4:ad:61:4a:ec:50:6c:f0:99:ae:
f1:76:34:60:31:c5:60:5e:a5:78:f6:80:87:d4:7a:7f:fe:3d:
2f:b4:32:c0:71:b0:99:59:7d:78:21:cd:3e:83:de:dd:95:9b:
5e:9d:8b:69:0d:3b:b4:44:24:35:cf:a7:30:9c:83:29:79:fe:
85:f9:bf:65:4c:49:62:f9:2c:64:88:2f:81:98:17:ec:05:8b:
f0:15:25:5a:4c:d8:d7:12:fa:d3:79:17:37:05:25:2f:8a:03:
3f:ac:54:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WJL4VquK7zxDByJ3R+LGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MDVkMTkwMWM1NzExMDBiODlhNWM0OGMzYTcwNjU3ODQx
NTcxOTYwHhcNMjUxMDE5MTIwMTI3WhcNMjUxMDIwMTIwMTI3WjAzMTEwLwYDVQQD
EyhmODI3M2FiYTJjYzQ0MjMzZDhlMmRjZjk4NDg5MzY5MjMzMzlkNDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aS+gtaX6FUR7jaP8nPstJrik1AX
0AhqpClW4r2kpgEKUHlQpra+ZN9TtlaxMcxrvavtMw0rfxBDPSkm7oPhHwRz+weM
dePU9LVqoAiHOKdsPmldKEt2tfXpa52XnSgqIR+ZrgQbtK3jqVMtPYCbTB53VoNa
NoZtgmPsqFnvt7Y224rORYFTGr5H7CNnI2IRetfig+fKTkDh2yOXkJasWFLtrcJD
+PaCvygSv/OpaN1aRQXOpGRBbqAUkZWdD6DP1cPxSna2O8DXRDlXMf6TbdMXgXHU
9vhhpsLruw2zFAMir2fcjVMX95BWPdrD5F6VCF+tQAPudcopZLu+trfuDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgnOrosxEIz2OLc+YSJNpIzOdSMMB8GA1UdIwQY
MBaAFLYF0ZAcVxEAuJpcSMOnBleEFXGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGdYUmtCeFhFUUM0bWx4SXc2Y0dWNFFWY1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85MDA4MGEtMzEyZS00N2QzLWI2Y2Et
ZThlYzA1YzkzMjdkLzEvdGdYUmtCeFhFUUM0bWx4SXc2Y0dWNFFWY1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85MDA4MGEtMzEyZS00N2QzLWI2Y2EtZThlYzA1YzkzMjdk
LzEvdGdYUmtCeFhFUUM0bWx4SXc2Y0dWNFFWY1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqORbJPt
OOK64viDGqsvgt2EkH8H2IVYnyKivY1pVeORQIsORBvu+yuQFyAxZj3SzK5MHVam
IvCA3tE7tswy+kHtm/MI64Y0b7fU5QbHLxAnRbB/Ixf/sL4KjImw+C6FRon2FSDI
xPoP6GPa2MoDt1EkuOAT0CTnks7uRq6fNF9FClFN4SvR+5HvHZnRl1NXA3QBznd7
AefkrWFK7FBs8Jmu8XY0YDHFYF6lePaAh9R6f/49L7QywHGwmVl9eCHNPoPe3ZWb
Xp2LaQ07tEQkNc+nMJyDKXn+hfm/ZUxJYvksZIgvgZgX7AWL8BUlWkzY1xL603kX
NwUlL4oDP6xU6g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:12 2025 by rpki-client