Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
File: TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft (raw, json)
Hash identifier: nvov/i6P6keyaEZBwIMKoj6keEjbhs3GB5VwTrT8CE0=
Subject key identifier: BC:B6:87:88:22:73:B9:49:52:F5:9F:81:86:DA:3A:18:70:35:68:87
Authority key identifier: 4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
Certificate issuer: /CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Certificate serial: 0199FC8F24AC2E1932DCEB293498EAE098BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
Manifest number: 01A8
Signing time: Sun 19 Oct 2025 13:01:03 +0000
Manifest this update: Sun 19 Oct 2025 13:01:03 +0000
Manifest next update: Mon 20 Oct 2025 13:01:03 +0000
Files and hashes: 1: TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl (hash: usSwTaKFEJEB/2K919CDOnmJ9Udd0d0nTitlnqB9d1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:24:ac:2e:19:32:dc:eb:29:34:98:ea:e0:98:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Validity
Not Before: Oct 19 13:01:03 2025 GMT
Not After : Oct 20 13:01:03 2025 GMT
Subject: CN=bcb687882273b94952f59f8186da3a1870356887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:23:3f:ef:ac:14:12:d5:af:12:0a:f9:a1:
7c:db:7a:69:ff:00:8b:aa:f3:4f:27:9d:7f:70:a0:
c5:7d:3d:ae:fc:61:11:ab:37:9e:c4:33:b1:08:eb:
c0:fd:b0:5c:56:0c:e0:ad:e9:26:c5:02:bd:e0:ec:
22:eb:a9:a8:87:7a:6f:51:c2:81:51:0c:97:ee:e7:
00:69:3b:69:30:f2:6e:35:7f:08:3f:ee:f1:80:ed:
73:60:f4:c1:22:1d:9e:50:60:fc:00:44:33:b2:b8:
64:3e:c0:43:8a:01:24:d8:49:e7:9f:05:9e:10:fa:
6a:df:72:73:ac:32:37:f9:af:84:cf:16:40:d4:9d:
00:31:bd:c0:cc:4e:cb:54:e2:be:0b:7f:55:fe:6f:
79:d1:66:f6:ae:77:94:48:c4:4d:ed:a7:ab:ae:ce:
ca:f2:5c:da:59:00:5c:5f:bc:9a:a7:5e:5a:05:d5:
3b:66:14:f7:d4:d3:d0:f2:47:68:7d:db:63:e3:e6:
5f:a6:3b:f0:e2:ea:b9:2e:9e:7b:41:2a:4d:09:47:
54:7c:75:dd:13:0d:32:60:0c:7f:7f:5b:9c:85:71:
78:9f:49:64:a1:da:0c:a6:18:99:ac:9c:46:2a:f4:
da:97:68:6f:c7:99:89:12:e6:2f:cf:35:24:9c:dc:
fa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B6:87:88:22:73:B9:49:52:F5:9F:81:86:DA:3A:18:70:35:68:87
X509v3 Authority Key Identifier:
keyid:4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f4:b8:33:6a:07:c6:dc:0b:95:f1:29:cc:f1:df:c2:46:28:
24:46:c3:4e:2d:54:7f:91:94:9d:fa:80:8a:ce:d4:4a:82:7f:
21:1d:81:72:e9:70:44:81:24:c8:12:46:2d:a7:25:57:3e:b8:
41:2a:a1:9e:3d:e1:9a:db:34:fa:d2:60:6a:9c:79:59:7a:f8:
90:01:2e:65:38:01:a5:87:cc:76:ee:0a:03:5b:1c:e8:95:0d:
81:21:b6:7e:d3:12:ab:65:c2:54:1c:f0:6b:7a:37:72:f5:89:
71:33:0e:77:b2:4e:2e:d8:98:c1:77:4b:96:1f:0a:5d:58:14:
ae:51:92:48:00:62:51:95:e5:b1:b3:df:05:94:93:0b:64:20:
55:f8:4d:65:02:d5:25:6f:55:4c:11:3c:6f:9a:f4:28:e6:cc:
13:c8:f2:b0:c4:28:09:31:68:3c:db:e4:2d:e8:43:94:b0:81:
19:64:b1:1f:e4:3f:eb:7c:d8:ef:32:ec:2d:bf:f4:60:bc:73:
3a:58:82:58:60:84:b1:e8:76:83:aa:96:c1:ad:f5:d4:dd:7d:
a4:54:fc:03:86:5a:72:59:fb:b3:7f:81:fa:33:d8:41:77:7d:
67:9d:86:84:a2:3c:15:04:7a:c8:b7:90:9e:69:09:5a:1b:17:
fb:57:4e:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jySsLhky3OspNJjq4Ji6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYzAyMzBjZDQxNWQ4NmU4NmZkODg5MzEzNDI4N2NlNTRh
Njg3ZDcwHhcNMjUxMDE5MTMwMTAzWhcNMjUxMDIwMTMwMTAzWjAzMTEwLwYDVQQD
EyhiY2I2ODc4ODIyNzNiOTQ5NTJmNTlmODE4NmRhM2ExODcwMzU2ODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKIjP++sFBLVrxIK+aF823pp/wCL
qvNPJ51/cKDFfT2u/GERqzeexDOxCOvA/bBcVgzgrekmxQK94Owi66moh3pvUcKB
UQyX7ucAaTtpMPJuNX8IP+7xgO1zYPTBIh2eUGD8AEQzsrhkPsBDigEk2EnnnwWe
EPpq33JzrDI3+a+EzxZA1J0AMb3AzE7LVOK+C39V/m950Wb2rneUSMRN7aerrs7K
8lzaWQBcX7yap15aBdU7ZhT31NPQ8kdofdtj4+Zfpjvw4uq5Lp57QSpNCUdUfHXd
Ew0yYAx/f1uchXF4n0lkodoMphiZrJxGKvTal2hvx5mJEuYvzzUknNz6JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLy2h4gic7lJUvWfgYbaOhhwNWiHMB8GA1UdIwQY
MBaAFE3AIwzUFdhuhv2IkxNCh85UpofXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGNBakROUVYyRzZHX1lpVEUwS0h6bFNtaDljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mNTZmYTktZjlmZS00MGY1LWE4NTMt
ODMyYWI4NDQxNzJiLzEvVGNBakROUVYyRzZHX1lpVEUwS0h6bFNtaDljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9mNTZmYTktZjlmZS00MGY1LWE4NTMtODMyYWI4NDQxNzJi
LzEvVGNBakROUVYyRzZHX1lpVEUwS0h6bFNtaDljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/S4M2oH
xtwLlfEpzPHfwkYoJEbDTi1Uf5GUnfqAis7USoJ/IR2BculwRIEkyBJGLaclVz64
QSqhnj3hmts0+tJgapx5WXr4kAEuZTgBpYfMdu4KA1sc6JUNgSG2ftMSq2XCVBzw
a3o3cvWJcTMOd7JOLtiYwXdLlh8KXVgUrlGSSABiUZXlsbPfBZSTC2QgVfhNZQLV
JW9VTBE8b5r0KObME8jysMQoCTFoPNvkLehDlLCBGWSxH+Q/63zY7zLsLb/0YLxz
OliCWGCEseh2g6qWwa311N19pFT8A4Zacln7s3+B+jPYQXd9Z52GhKI8FQR6yLeQ
nmkJWhsX+1dOsw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:02 2025 by rpki-client