Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
File: tRu6i9P6566CScnEYWi6kAI9sZQ.mft (raw, json)
Hash identifier: YagFPNPM+I952HWEsn+ySvhHGuV3bR5JsnBVRp0/Ozk=
Subject key identifier: AC:53:1A:51:EB:8A:9B:42:BE:96:07:B1:E6:B0:7F:E5:DC:F9:DF:1D
Authority key identifier: B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
Certificate issuer: /CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Certificate serial: 0199FE46F0A26C0382E7F0E49415E661071A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 21:01:25 +0000
Manifest this update: Sun 19 Oct 2025 21:01:25 +0000
Manifest next update: Mon 20 Oct 2025 21:01:25 +0000
Files and hashes: 1: tRu6i9P6566CScnEYWi6kAI9sZQ.crl (hash: yF1RlThtGg66MWS0mUm11wXR8UQbC6LIZIwzl4Pe1GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:f0:a2:6c:03:82:e7:f0:e4:94:15:e6:61:07:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Validity
Not Before: Oct 19 21:01:25 2025 GMT
Not After : Oct 20 21:01:25 2025 GMT
Subject: CN=ac531a51eb8a9b42be9607b1e6b07fe5dcf9df1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:1e:0c:6b:8c:fd:9d:20:80:ff:0c:17:cf:
e5:eb:4f:35:9f:69:df:b3:fc:fa:6d:5a:7c:e3:89:
c5:13:41:9a:75:b6:2a:93:50:47:c0:cd:96:da:6f:
04:b4:ad:8b:04:9c:16:5f:19:3f:12:f0:c9:e2:64:
c1:71:42:d0:bc:97:1c:91:28:87:d4:9a:e7:9b:0d:
20:b6:64:7c:f8:fa:ac:50:ba:26:24:1b:d0:5c:1d:
9c:47:8c:a2:2b:4b:35:75:dd:92:25:48:98:ad:d5:
82:a0:86:e6:96:8a:b0:34:61:5a:34:36:80:b3:9c:
ce:e7:e2:ba:69:cf:4d:9d:f5:0d:f2:43:f1:d4:ff:
63:7c:9b:fc:45:64:84:b0:a2:b1:9e:4b:41:ed:4a:
9a:78:dd:70:1d:5d:7f:8d:f7:f6:d2:83:d9:1b:e6:
fa:38:29:d1:66:12:d6:50:71:67:91:cf:05:17:e2:
bd:2b:36:57:2d:1c:96:0d:97:f4:71:a4:39:9c:48:
22:25:ad:b6:2f:08:05:46:a3:e4:fa:e3:a3:39:f7:
80:25:86:82:d3:f0:0f:e9:8c:6a:ac:08:21:b6:b7:
8b:06:77:68:be:37:bf:55:52:5f:7f:1d:4b:fe:7a:
f4:38:d9:c9:66:c8:db:72:93:77:c5:85:df:a0:fa:
c4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:53:1A:51:EB:8A:9B:42:BE:96:07:B1:E6:B0:7F:E5:DC:F9:DF:1D
X509v3 Authority Key Identifier:
keyid:B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:00:84:0f:8a:67:21:e1:e6:b7:85:16:cf:59:f6:2b:07:fa:
d5:51:0b:10:ad:76:70:cb:3c:c3:45:dc:0d:f9:dd:9d:e2:35:
91:f1:b2:68:b3:4a:bb:a8:8e:bc:04:67:c9:4e:05:af:3c:d5:
ad:95:9d:10:b8:03:f3:b2:de:6f:9f:a4:bb:a0:17:8b:41:eb:
e4:a9:e5:4f:52:77:2f:de:dd:df:86:8d:59:06:df:0d:7e:50:
43:97:1f:8b:85:5b:09:a8:57:1e:74:7b:47:2d:49:e8:25:46:
b9:0d:24:d1:3a:83:98:83:a4:9c:b3:c7:41:da:e9:d3:67:3d:
72:1b:f5:77:f2:ac:fc:7a:c0:4a:6b:17:ba:c0:38:68:62:d2:
05:67:d1:77:a5:97:4e:68:53:15:c4:16:22:91:ab:dd:10:4f:
d0:3f:16:55:66:ab:05:a8:8e:fe:5e:f0:19:e5:c6:9d:50:59:
3b:3e:b8:a3:74:f7:82:9e:cd:01:34:2b:51:67:62:5e:85:6b:
6d:d1:35:e1:6d:20:57:1b:b8:4a:fd:38:ef:0a:e3:a8:ba:87:
1a:c0:15:39:fa:e7:c6:83:1c:e0:c8:c2:f7:89:cb:8d:7b:41:
cb:37:32:51:3b:53:49:53:ef:ed:51:74:10:75:e0:72:ee:33:
29:79:c4:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RvCibAOC5/DklBXmYQcaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MWJiYThiZDNmYWU3YWU4MjQ5YzljNDYxNjhiYTkwMDIz
ZGIxOTQwHhcNMjUxMDE5MjEwMTI1WhcNMjUxMDIwMjEwMTI1WjAzMTEwLwYDVQQD
EyhhYzUzMWE1MWViOGE5YjQyYmU5NjA3YjFlNmIwN2ZlNWRjZjlkZjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqweDGuM/Z0ggP8MF8/l6081n2nf
s/z6bVp844nFE0GadbYqk1BHwM2W2m8EtK2LBJwWXxk/EvDJ4mTBcULQvJcckSiH
1Jrnmw0gtmR8+PqsULomJBvQXB2cR4yiK0s1dd2SJUiYrdWCoIbmloqwNGFaNDaA
s5zO5+K6ac9NnfUN8kPx1P9jfJv8RWSEsKKxnktB7UqaeN1wHV1/jff20oPZG+b6
OCnRZhLWUHFnkc8FF+K9KzZXLRyWDZf0caQ5nEgiJa22LwgFRqPk+uOjOfeAJYaC
0/AP6YxqrAghtreLBndovje/VVJffx1L/nr0ONnJZsjbcpN3xYXfoPrEHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxTGlHriptCvpYHseawf+Xc+d8dMB8GA1UdIwQY
MBaAFLUbuovT+ueugknJxGFoupACPbGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJ1Nmk5UDY1NjZDU2NuRVlXaTZrQUk5c1pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hNWE3NDAtMmJjZS00MzM4LTk5ZDct
NzgyMzEwZTY2NjJkLzEvdFJ1Nmk5UDY1NjZDU2NuRVlXaTZrQUk5c1pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9hNWE3NDAtMmJjZS00MzM4LTk5ZDctNzgyMzEwZTY2NjJk
LzEvdFJ1Nmk5UDY1NjZDU2NuRVlXaTZrQUk5c1pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQCED4pn
IeHmt4UWz1n2Kwf61VELEK12cMs8w0XcDfndneI1kfGyaLNKu6iOvARnyU4FrzzV
rZWdELgD87Leb5+ku6AXi0Hr5KnlT1J3L97d34aNWQbfDX5QQ5cfi4VbCahXHnR7
Ry1J6CVGuQ0k0TqDmIOknLPHQdrp02c9chv1d/Ks/HrASmsXusA4aGLSBWfRd6WX
TmhTFcQWIpGr3RBP0D8WVWarBaiO/l7wGeXGnVBZOz64o3T3gp7NATQrUWdiXoVr
bdE14W0gVxu4Sv047wrjqLqHGsAVOfrnxoMc4MjC94nLjXtByzcyUTtTSVPv7VF0
EHXgcu4zKXnEKw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:14 2025 by rpki-client