Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
File: tgcVWH7cyzJajXwPWkLY8EOHHbc.mft (raw, json)
Hash identifier: w3tQnIOlxOaVRfPO10l7Q92mSWsu+XqCl+3uPFJzlsM=
Subject key identifier: 2F:45:23:17:0C:7D:D5:08:72:25:46:34:15:63:B9:D0:F7:33:19:15
Authority key identifier: B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
Certificate issuer: /CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Certificate serial: 0199FDD96267DD9583FC0013741A01376352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
Manifest number: 0208
Signing time: Sun 19 Oct 2025 19:01:46 +0000
Manifest this update: Sun 19 Oct 2025 19:01:46 +0000
Manifest next update: Mon 20 Oct 2025 19:01:46 +0000
Files and hashes: 1: tgcVWH7cyzJajXwPWkLY8EOHHbc.crl (hash: s7uBJuny0ebZ09WgR2mY6GQgzJlDQOrFX33Snsd24Z8=)
2: zAVl6KN24j-HKETuiZlV3hao63U.roa (hash: djF473q/t5BuBhPbvFB06yhsIPQKmfmJ61GIeE/TTOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:62:67:dd:95:83:fc:00:13:74:1a:01:37:63:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Validity
Not Before: Oct 19 19:01:46 2025 GMT
Not After : Oct 20 19:01:46 2025 GMT
Subject: CN=2f4523170c7dd508722546341563b9d0f7331915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:c9:88:24:7f:ac:6f:06:6c:66:db:6b:a3:
1c:dd:7e:9b:19:8f:27:de:4e:c8:33:d5:8d:9f:60:
d2:61:b0:cb:d4:c7:69:f1:c1:ae:dd:1a:f0:68:03:
b6:a0:8a:61:00:5e:20:7a:08:36:cc:67:ec:b3:1e:
b8:da:54:54:a2:cc:05:d3:bf:10:e4:81:fd:bb:57:
68:83:5e:15:f2:43:f4:49:51:36:53:e5:46:b7:68:
a2:b2:08:3a:ab:c4:f7:7f:bc:59:0e:8a:de:97:22:
d4:5c:a8:92:24:f0:6b:98:7a:43:60:26:ef:de:70:
45:5e:84:5c:c7:47:5a:98:d4:a6:a7:ed:f7:09:ab:
ee:0e:ce:08:18:5a:36:f6:20:a6:68:53:05:52:15:
16:ce:41:f9:44:54:8d:47:12:bd:f0:79:4e:03:5f:
4e:ad:95:6f:12:f7:6e:b1:92:08:52:e7:be:ee:0b:
fa:b5:29:73:68:52:60:af:8a:5a:21:3e:8f:4f:70:
07:6c:2e:90:4a:59:c9:8e:83:6d:47:29:7d:5e:cb:
b0:c5:fb:60:16:19:75:c5:88:70:95:4e:59:dd:9e:
53:02:b4:52:4e:d6:fd:f2:6e:8c:30:38:d7:0f:99:
3d:30:a8:8f:0a:a4:2b:05:de:11:1b:14:39:3d:46:
b9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:45:23:17:0C:7D:D5:08:72:25:46:34:15:63:B9:D0:F7:33:19:15
X509v3 Authority Key Identifier:
keyid:B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:36:c0:41:df:b6:c2:4a:66:2e:fa:d8:30:64:31:50:54:0f:
f0:eb:ca:9a:85:a6:13:23:7f:5e:1d:89:68:c4:6d:18:fb:bd:
32:b9:ad:3b:3c:19:02:06:73:78:38:c7:80:5f:65:8e:bf:11:
9d:34:cf:d6:d4:3e:ef:bf:3f:4d:cb:bc:15:26:ef:ab:0b:13:
e4:9c:b0:5e:d8:32:35:ee:d4:34:45:8b:73:b8:41:3a:ef:aa:
da:3d:87:47:d4:e5:e2:0a:dd:02:6f:36:a3:98:da:22:a4:7d:
b6:69:8b:1c:de:ec:d1:84:88:fb:34:0a:aa:eb:d3:d7:a4:93:
e0:a7:ea:b6:cd:c2:c4:b5:7a:2f:35:40:ab:59:b2:87:62:82:
ec:ed:f1:aa:9e:59:1e:9e:56:79:a9:fa:5f:86:9a:ce:23:4a:
48:ef:70:2c:75:5f:7f:b8:56:8c:bf:5d:b1:5e:14:1e:9a:c2:
26:3e:28:98:e0:17:f5:ae:15:c1:1b:69:8a:c3:17:d1:bd:a5:
9c:b0:fd:a1:63:31:ec:03:5b:44:f1:4a:1f:64:06:a3:b8:55:
e7:86:43:03:ca:7a:cc:5f:ec:fc:5c:5b:7d:a3:49:14:2a:da:
17:b0:27:bd:16:12:ed:a7:c5:3e:a1:e4:73:cc:21:74:d5:57:
9b:ec:5f:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92WJn3ZWD/AATdBoBN2NSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MDcxNTU4N2VkY2NiMzI1YThkN2MwZjVhNDJkOGYwNDM4
NzFkYjcwHhcNMjUxMDE5MTkwMTQ2WhcNMjUxMDIwMTkwMTQ2WjAzMTEwLwYDVQQD
EygyZjQ1MjMxNzBjN2RkNTA4NzIyNTQ2MzQxNTYzYjlkMGY3MzMxOTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuTJiCR/rG8GbGbba6Mc3X6bGY8n
3k7IM9WNn2DSYbDL1Mdp8cGu3RrwaAO2oIphAF4gegg2zGfssx642lRUoswF078Q
5IH9u1dog14V8kP0SVE2U+VGt2iisgg6q8T3f7xZDorelyLUXKiSJPBrmHpDYCbv
3nBFXoRcx0damNSmp+33CavuDs4IGFo29iCmaFMFUhUWzkH5RFSNRxK98HlOA19O
rZVvEvdusZIIUue+7gv6tSlzaFJgr4paIT6PT3AHbC6QSlnJjoNtRyl9Xsuwxftg
Fhl1xYhwlU5Z3Z5TArRSTtb98m6MMDjXD5k9MKiPCqQrBd4RGxQ5PUa5twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9FIxcMfdUIciVGNBVjudD3MxkVMB8GA1UdIwQY
MBaAFLYHFVh+3MsyWo18D1pC2PBDhx23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGdjVldIN2N5ekphalh3UFdrTFk4RU9ISGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8zNTlkNzEtMWU5ZS00MzlmLTkzZjEt
MWY1NDI4Njg0ZmM3LzEvdGdjVldIN2N5ekphalh3UFdrTFk4RU9ISGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8zNTlkNzEtMWU5ZS00MzlmLTkzZjEtMWY1NDI4Njg0ZmM3
LzEvdGdjVldIN2N5ekphalh3UFdrTFk4RU9ISGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDbAQd+2
wkpmLvrYMGQxUFQP8OvKmoWmEyN/Xh2JaMRtGPu9MrmtOzwZAgZzeDjHgF9ljr8R
nTTP1tQ+778/Tcu8FSbvqwsT5JywXtgyNe7UNEWLc7hBOu+q2j2HR9Tl4grdAm82
o5jaIqR9tmmLHN7s0YSI+zQKquvT16ST4Kfqts3CxLV6LzVAq1myh2KC7O3xqp5Z
Hp5Wean6X4aaziNKSO9wLHVff7hWjL9dsV4UHprCJj4omOAX9a4VwRtpisMX0b2l
nLD9oWMx7ANbRPFKH2QGo7hV54ZDA8p6zF/s/FxbfaNJFCraF7AnvRYS7afFPqHk
c8whdNVXm+xfTQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:19 2025 by rpki-client