Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier: Zgz5CtqxOwhJfXJfZu15rseQUKgZWlW2FhBHdwrkfoQ=
Subject key identifier: 25:BC:5E:FF:EA:6B:CC:09:ED:5B:3B:09:83:52:C6:F4:5B:09:0A:78
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial: 0199FD3442CF615A92560C727AC59951C30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:24 +0000
Manifest this update: Sun 19 Oct 2025 16:01:24 +0000
Manifest next update: Mon 20 Oct 2025 16:01:24 +0000
Files and hashes: 1: 7YKaewqyZbI9lVFIivFUL2FPVzU.roa (hash: wf42n7crwFg9XaXHUPxEE3NTHiwbzXO1xRDVNEMLG6A=)
2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: 8NDfSNBhmKYOgjut9mhXc/SxrlD6eYFsPwID8sgyV9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:42:cf:61:5a:92:56:0c:72:7a:c5:99:51:c3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
Validity
Not Before: Oct 19 16:01:24 2025 GMT
Not After : Oct 20 16:01:24 2025 GMT
Subject: CN=25bc5effea6bcc09ed5b3b098352c6f45b090a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:2b:5c:1e:d9:e9:99:88:48:bc:7a:3a:4d:
aa:0d:07:fb:93:a0:23:f2:38:bb:02:5f:0c:cc:a1:
27:16:a4:07:fb:da:f6:b9:44:9f:15:2d:ae:15:00:
70:23:6c:e9:ad:4b:4c:98:ce:14:d5:13:1a:dd:86:
5a:80:43:a7:19:fa:6f:3b:4d:c0:1e:0a:c5:a9:10:
07:9e:e7:8e:2a:2d:08:34:e9:68:e2:82:3b:bb:af:
17:dc:69:36:11:e6:b5:9a:b4:6d:60:10:62:36:2e:
58:0c:00:74:b6:06:79:e8:99:4b:c0:91:e5:cf:3e:
0f:07:2d:79:83:38:28:9a:13:6a:f6:61:12:85:4d:
3d:3d:eb:09:dc:96:21:fa:64:d5:7e:23:09:fa:48:
6b:ef:d5:3d:98:24:6c:a0:4d:8a:c7:f3:32:88:e1:
ed:de:7c:19:89:c6:d6:e6:46:37:0d:34:a0:a0:3d:
68:45:a7:b8:a0:21:8d:c4:37:80:ba:92:f5:e4:48:
76:fb:3a:d0:a8:53:fb:af:cb:e4:e5:f5:6b:cc:e2:
54:61:a3:b9:b2:a8:db:a1:0b:0a:85:0d:41:b7:8a:
7c:52:11:bc:b1:67:a4:b0:9a:a2:9d:81:b1:8a:9a:
48:ad:d5:c5:46:79:03:1c:f8:23:2d:f2:8e:1a:f3:
36:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BC:5E:FF:EA:6B:CC:09:ED:5B:3B:09:83:52:C6:F4:5B:09:0A:78
X509v3 Authority Key Identifier:
keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5c:66:f9:b5:b6:12:e6:d6:4c:4a:a5:12:c6:62:d4:95:80:
7b:90:bb:b1:52:6f:7b:fb:f5:7f:5b:dd:f9:a0:10:52:06:af:
1f:3e:16:92:7d:68:7b:b7:e5:d6:58:ff:4f:8e:af:47:87:da:
57:6e:e3:52:52:1a:f4:f1:e0:c4:4f:3f:92:12:e1:90:53:25:
21:01:36:1e:cb:cb:17:6f:2e:aa:1f:6d:0e:ab:16:45:05:4d:
ea:e7:ce:e9:9d:04:53:a2:22:5a:c7:c1:65:4f:b8:f7:8f:01:
e5:5b:ba:40:63:7a:ca:34:09:64:a0:28:72:0f:73:9c:7f:ce:
01:2f:01:71:cc:94:ca:c5:7b:8d:ae:b0:96:36:5a:e5:b4:4e:
fa:22:e7:45:80:8b:39:62:c1:85:05:e3:df:cb:56:2a:e7:e9:
35:53:a2:cc:1b:10:e4:75:71:41:ef:99:6f:57:c5:9d:dc:53:
85:03:d2:60:30:6d:30:59:85:2e:72:46:e0:a5:c3:c1:fa:46:
f9:1e:a5:46:fa:fd:d4:c5:a7:b8:4d:b4:12:1f:5d:15:b7:fd:
19:05:dd:a6:22:b6:6d:29:93:78:bb:84:c6:7a:90:a6:40:85:
fa:17:5f:80:16:23:69:15:c8:66:28:5c:76:1c:61:3a:77:17:
c4:e2:31:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NELPYVqSVgxyesWZUcMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYTM3MTFkYzVkZTQ1ZjJmNWI0NzkwMTY1OWU5NTZkOTM4
MjcyZmUwHhcNMjUxMDE5MTYwMTI0WhcNMjUxMDIwMTYwMTI0WjAzMTEwLwYDVQQD
EygyNWJjNWVmZmVhNmJjYzA5ZWQ1YjNiMDk4MzUyYzZmNDViMDkwYTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WArXB7Z6ZmISLx6Ok2qDQf7k6Aj
8ji7Al8MzKEnFqQH+9r2uUSfFS2uFQBwI2zprUtMmM4U1RMa3YZagEOnGfpvO03A
HgrFqRAHnueOKi0INOlo4oI7u68X3Gk2Eea1mrRtYBBiNi5YDAB0tgZ56JlLwJHl
zz4PBy15gzgomhNq9mEShU09PesJ3JYh+mTVfiMJ+khr79U9mCRsoE2Kx/MyiOHt
3nwZicbW5kY3DTSgoD1oRae4oCGNxDeAupL15Eh2+zrQqFP7r8vk5fVrzOJUYaO5
sqjboQsKhQ1Bt4p8UhG8sWeksJqinYGxippIrdXFRnkDHPgjLfKOGvM2pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCW8Xv/qa8wJ7Vs7CYNSxvRbCQp4MB8GA1UdIwQY
MBaAFE2jcR3F3kXy9bR5AWWelW2TgnL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hODMxYzAtNDU3Yy00YmE4LWJlYzct
ZTI1MTEwOWJmZDE5LzEvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hODMxYzAtNDU3Yy00YmE4LWJlYzctZTI1MTEwOWJmZDE5
LzEvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFxm+bW2
EubWTEqlEsZi1JWAe5C7sVJve/v1f1vd+aAQUgavHz4Wkn1oe7fl1lj/T46vR4fa
V27jUlIa9PHgxE8/khLhkFMlIQE2HsvLF28uqh9tDqsWRQVN6ufO6Z0EU6IiWsfB
ZU+4948B5Vu6QGN6yjQJZKAocg9znH/OAS8BccyUysV7ja6wljZa5bRO+iLnRYCL
OWLBhQXj38tWKufpNVOizBsQ5HVxQe+Zb1fFndxThQPSYDBtMFmFLnJG4KXDwfpG
+R6lRvr91MWnuE20Eh9dFbf9GQXdpiK2bSmTeLuExnqQpkCF+hdfgBYjaRXIZihc
dhxhOncXxOIxAQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:41 2025 by rpki-client