Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
File: Tu8gTX6G_4FiSmGBKG521DOHa8c.mft (raw, json)
Hash identifier: QWs5TQFeDfAIvk9gwphK9YcLQjHuhl2NIqYyts4tVvA=
Subject key identifier: 98:4D:2C:16:6F:B3:DD:38:CD:94:FB:9E:49:E6:76:A2:DF:EE:7E:61
Authority key identifier: 4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
Certificate issuer: /CN=4eef204d7e86ff81624a6181286e76d433876bc7
Certificate serial: 0199FBEC3E24F310C58517F97C13A034B3FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
Manifest number: 15E2
Signing time: Sun 19 Oct 2025 10:03:07 +0000
Manifest this update: Sun 19 Oct 2025 10:03:07 +0000
Manifest next update: Mon 20 Oct 2025 10:03:07 +0000
Files and hashes: 1: Tu8gTX6G_4FiSmGBKG521DOHa8c.crl (hash: VhLHE8ZSwfBN3L2VsezDjzrcO7z8EC6h5XMzRRw/cds=)
2: shBm13sVD-3FD9e1R6_cr96dhfU.roa (hash: n/xarPDtIVC1p+Buc2MZvYZnuxYBvdgfF2U0DRag658=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:3e:24:f3:10:c5:85:17:f9:7c:13:a0:34:b3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef204d7e86ff81624a6181286e76d433876bc7
Validity
Not Before: Oct 19 10:03:07 2025 GMT
Not After : Oct 20 10:03:07 2025 GMT
Subject: CN=984d2c166fb3dd38cd94fb9e49e676a2dfee7e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:e2:89:fb:02:f1:ac:a0:f8:3e:db:56:c6:
e0:f3:d3:3b:25:b5:77:c6:4b:86:ce:67:2f:e4:fb:
9c:7c:fe:e9:41:b5:54:d1:78:f8:2e:cc:2b:6e:b7:
c0:de:7c:89:ed:3c:50:11:c4:46:6c:91:eb:4b:b9:
a2:2f:02:13:35:cb:62:2e:67:6f:0c:9c:0c:61:94:
d6:f0:e0:64:ea:b7:ff:24:c2:32:c8:32:13:5b:92:
68:2d:2e:34:f9:12:5b:b7:a3:85:d4:a6:ee:a5:f3:
5b:e1:8b:09:90:41:64:7a:87:a0:4d:8d:87:59:be:
c5:40:9a:08:52:7e:b6:8e:2a:7d:e0:84:f8:ed:76:
b8:ca:36:23:3c:c3:e1:88:e5:05:eb:95:1a:fe:8a:
0e:c7:54:1c:bc:3b:43:a7:98:94:3f:50:78:7d:37:
c8:de:d2:df:20:ea:d4:8a:87:e5:41:b2:ef:21:21:
49:1a:55:03:0d:79:d8:4d:5f:e7:df:be:f1:59:57:
21:a4:18:25:06:22:57:f1:43:51:4c:36:37:ec:4c:
dd:73:e3:20:9c:77:0b:91:e6:68:20:3f:28:37:43:
f6:28:85:91:d6:45:aa:84:6d:8c:8a:7a:26:2b:a5:
ce:68:3f:3f:0d:82:a1:df:c5:5f:a4:8a:ce:7a:ac:
78:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4D:2C:16:6F:B3:DD:38:CD:94:FB:9E:49:E6:76:A2:DF:EE:7E:61
X509v3 Authority Key Identifier:
keyid:4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bd:0f:11:9a:b0:72:c5:bf:79:dc:fe:33:ab:cd:a9:47:be:
3a:f6:09:7b:97:9e:be:29:5a:c2:0c:ec:9b:f2:a8:db:14:ed:
df:81:55:55:cb:ed:8b:db:76:84:7e:c1:89:56:71:fb:b0:e3:
9a:63:93:27:62:7b:e1:bc:2a:77:e2:a3:90:4d:d7:3c:a5:e7:
37:f6:84:e1:fa:c9:5d:c3:9e:8c:63:05:ae:ae:e1:45:8b:98:
ff:6d:e5:49:b6:12:64:ec:15:77:4b:a4:37:ef:a6:0c:a0:52:
80:a3:c3:57:6e:e8:a4:58:a3:cb:67:94:2d:d0:03:13:f4:f8:
a7:51:87:b1:b8:8f:e2:bc:db:30:f2:f7:37:9b:c2:2a:88:4c:
e4:60:be:41:a1:6d:1d:bb:91:c1:ea:be:5f:5d:d6:1f:d7:16:
79:2f:7f:01:96:20:00:41:7f:c0:ea:3d:cd:22:2d:78:3c:90:
f6:aa:8c:43:6b:88:10:6e:3c:45:4d:b6:82:d4:b2:b0:a2:c3:
27:e2:14:78:ca:f2:ff:91:6e:07:0e:f0:3d:d9:04:f4:db:b5:
80:c2:4f:49:67:41:26:3c:68:c0:fa:31:66:9a:22:f3:88:92:
d2:56:b8:e6:76:15:79:1a:27:64:3b:9f:4a:18:51:90:68:2e:
a7:3c:6c:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77D4k8xDFhRf5fBOgNLP7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZWYyMDRkN2U4NmZmODE2MjRhNjE4MTI4NmU3NmQ0MzM4
NzZiYzcwHhcNMjUxMDE5MTAwMzA3WhcNMjUxMDIwMTAwMzA3WjAzMTEwLwYDVQQD
Eyg5ODRkMmMxNjZmYjNkZDM4Y2Q5NGZiOWU0OWU2NzZhMmRmZWU3ZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt37iifsC8ayg+D7bVsbg89M7JbV3
xkuGzmcv5PucfP7pQbVU0Xj4LswrbrfA3nyJ7TxQEcRGbJHrS7miLwITNctiLmdv
DJwMYZTW8OBk6rf/JMIyyDITW5JoLS40+RJbt6OF1KbupfNb4YsJkEFkeoegTY2H
Wb7FQJoIUn62jip94IT47Xa4yjYjPMPhiOUF65Ua/ooOx1QcvDtDp5iUP1B4fTfI
3tLfIOrUioflQbLvISFJGlUDDXnYTV/n377xWVchpBglBiJX8UNRTDY37Ezdc+Mg
nHcLkeZoID8oN0P2KIWR1kWqhG2MinomK6XOaD8/DYKh38VfpIrOeqx4DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhNLBZvs904zZT7nknmdqLf7n5hMB8GA1UdIwQY
MBaAFE7vIE1+hv+BYkphgShudtQzh2vHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHU4Z1RYNkdfNEZpU21HQktHNTIxRE9IYThjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82OTMyMmQtYWQ3MS00ODc3LWE0NzAt
OWFkOTA5OWRlMWQzLzEvVHU4Z1RYNkdfNEZpU21HQktHNTIxRE9IYThjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82OTMyMmQtYWQ3MS00ODc3LWE0NzAtOWFkOTA5OWRlMWQz
LzEvVHU4Z1RYNkdfNEZpU21HQktHNTIxRE9IYThjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATL0PEZqw
csW/edz+M6vNqUe+OvYJe5eevilawgzsm/Ko2xTt34FVVcvti9t2hH7BiVZx+7Dj
mmOTJ2J74bwqd+KjkE3XPKXnN/aE4frJXcOejGMFrq7hRYuY/23lSbYSZOwVd0uk
N++mDKBSgKPDV27opFijy2eULdADE/T4p1GHsbiP4rzbMPL3N5vCKohM5GC+QaFt
HbuRweq+X13WH9cWeS9/AZYgAEF/wOo9zSIteDyQ9qqMQ2uIEG48RU22gtSysKLD
J+IUeMry/5FuBw7wPdkE9Nu1gMJPSWdBJjxowPoxZpoi84iS0la45nYVeRonZDuf
ShhRkGgupzxszQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:21 2025 by rpki-client