Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: b55hs2ZrJWALKtQG387+B0/nYnQYKKcBZMSrvT4jxAs=
Subject key identifier: 9D:CB:6C:6C:06:61:54:8D:AF:0C:26:F0:46:04:79:A2:C0:42:F7:B8
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 0199FC5831B55715DC8D0806C3736CB0121F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 16F1
Signing time: Sun 19 Oct 2025 12:01:02 +0000
Manifest this update: Sun 19 Oct 2025 12:01:02 +0000
Manifest next update: Mon 20 Oct 2025 12:01:02 +0000
Files and hashes: 1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: 5JFPz6om4Wyfc6GhAZhc4A2ps9BRYY8iIPA1euLzH4s=)
2: UJkgkdZDflLDM8Sv7O6kD5lIHQs.roa (hash: pX1z+1kUoCvGFytibnsII/Eh3CoZC8NSq38jqzyhHR8=)
3: fCleNlHbxsVeZ3a7P97pQRFlLZI.roa (hash: K6pa8uD3+UnxthRe3sa6TzSI5KyrtrPrEufxbM2IShA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:31:b5:57:15:dc:8d:08:06:c3:73:6c:b0:12:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Oct 19 12:01:02 2025 GMT
Not After : Oct 20 12:01:02 2025 GMT
Subject: CN=9dcb6c6c0661548daf0c26f0460479a2c042f7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:51:36:f0:96:a5:51:09:4a:4a:75:81:50:4d:
78:3f:c6:3f:be:57:35:de:bc:88:3d:0c:fe:76:a4:
1c:78:f6:18:df:52:50:49:5b:c8:3d:a2:6e:12:89:
f1:de:13:d6:94:b0:cc:c2:0c:1c:87:9f:cb:52:59:
44:cd:9d:31:8e:82:6a:44:56:9e:b4:e4:c6:40:c9:
13:44:44:34:dd:f7:fd:ad:49:17:2f:a6:43:83:58:
a4:51:4d:da:45:32:ee:dd:0d:a8:31:15:ca:3c:95:
b6:52:39:92:61:00:93:df:07:23:d3:09:4a:6f:de:
06:bc:1e:d1:c1:31:c6:cb:50:90:64:7b:33:fb:d6:
62:67:22:4e:9e:41:dc:96:bd:24:f5:60:e5:cd:ef:
f1:d2:91:05:67:e2:a0:02:3d:2e:59:a3:c4:db:e6:
79:ff:b0:ba:69:75:72:7c:2f:51:95:84:cf:1d:56:
5c:f6:d3:b7:65:59:d6:8b:08:3f:ac:60:e9:37:f6:
d2:1e:e1:fd:24:98:f3:83:c2:1a:95:79:37:78:28:
ea:b9:dd:7c:4a:f6:f1:23:da:c8:4e:be:09:2d:7f:
75:69:84:63:b0:e8:b6:51:8b:1b:06:d5:ef:04:e5:
f3:9e:7b:c0:98:49:46:d8:d5:61:4a:1e:2c:2c:ae:
4e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CB:6C:6C:06:61:54:8D:AF:0C:26:F0:46:04:79:A2:C0:42:F7:B8
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a2:54:a8:53:57:e7:49:91:f9:1c:da:67:87:7d:df:90:48:
2e:f8:e8:9a:ed:cc:68:d0:00:c5:98:fc:56:3c:e7:fe:a1:c4:
f9:69:5d:ae:0e:38:52:35:94:fd:88:5f:d6:d1:84:ef:a6:e9:
06:31:62:8c:6c:45:07:69:f3:56:e4:60:12:4b:e0:1f:10:44:
f2:58:86:7c:d1:a8:3c:54:1a:3a:fd:c2:c2:3b:52:4c:41:fb:
e8:74:4f:c6:2a:06:c1:0a:5d:36:e1:c5:50:70:0a:3f:22:95:
0a:47:73:55:08:68:0a:f0:f4:91:8a:da:5a:10:d2:f8:00:7b:
4e:bc:af:eb:88:47:38:00:dc:13:07:03:7f:ae:d0:9f:ba:b6:
92:fe:9a:31:61:82:63:94:47:92:92:dd:a8:ae:7a:e8:9e:42:
5a:d2:9c:f3:cf:f8:e6:b8:80:d2:7d:d0:67:cb:c3:81:42:ad:
20:ab:d2:45:b1:fb:f0:00:a2:b9:ce:9b:04:ad:d4:22:b0:7e:
ff:e0:85:5d:d1:81:47:2e:10:7f:8c:62:04:50:a9:56:7e:78:
2b:df:5f:0c:1f:67:35:cb:40:4b:ec:0e:eb:c4:65:7d:85:77:
4d:46:f8:98:6f:69:7b:e1:fb:40:60:d3:ac:da:68:e3:7b:e7:
8e:eb:84:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WDG1VxXcjQgGw3NssBIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNTE0NmJiNGUyMTk3NDRmNThjMjY4ZTllYzYyMWMxOGRk
MjI5YzMwHhcNMjUxMDE5MTIwMTAyWhcNMjUxMDIwMTIwMTAyWjAzMTEwLwYDVQQD
Eyg5ZGNiNmM2YzA2NjE1NDhkYWYwYzI2ZjA0NjA0NzlhMmMwNDJmN2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VE28JalUQlKSnWBUE14P8Y/vlc1
3ryIPQz+dqQcePYY31JQSVvIPaJuEonx3hPWlLDMwgwch5/LUllEzZ0xjoJqRFae
tOTGQMkTREQ03ff9rUkXL6ZDg1ikUU3aRTLu3Q2oMRXKPJW2UjmSYQCT3wcj0wlK
b94GvB7RwTHGy1CQZHsz+9ZiZyJOnkHclr0k9WDlze/x0pEFZ+KgAj0uWaPE2+Z5
/7C6aXVyfC9RlYTPHVZc9tO3ZVnWiwg/rGDpN/bSHuH9JJjzg8IalXk3eCjqud18
SvbxI9rITr4JLX91aYRjsOi2UYsbBtXvBOXznnvAmElG2NVhSh4sLK5O+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3LbGwGYVSNrwwm8EYEeaLAQve4MB8GA1UdIwQY
MBaAFE5RRrtOIZdE9Ywmjp7GIcGN0inDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yNWI1NGEtZTc3MC00NGFiLWEwMDQt
YzkyMGM1MTdkNjAwLzEvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yNWI1NGEtZTc3MC00NGFiLWEwMDQtYzkyMGM1MTdkNjAw
LzEvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKJUqFNX
50mR+RzaZ4d935BILvjomu3MaNAAxZj8Vjzn/qHE+Wldrg44UjWU/Yhf1tGE76bp
BjFijGxFB2nzVuRgEkvgHxBE8liGfNGoPFQaOv3CwjtSTEH76HRPxioGwQpdNuHF
UHAKPyKVCkdzVQhoCvD0kYraWhDS+AB7Tryv64hHOADcEwcDf67Qn7q2kv6aMWGC
Y5RHkpLdqK566J5CWtKc88/45riA0n3QZ8vDgUKtIKvSRbH78ACiuc6bBK3UIrB+
/+CFXdGBRy4Qf4xiBFCpVn54K99fDB9nNctAS+wO68RlfYV3TUb4mG9pe+H7QGDT
rNpo43vnjuuEfg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:23 2025 by rpki-client