Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
File: tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft (raw, json)
Hash identifier: 1LRYllbPFhLpWM7bvdVxsCS1HZvPzsBv6lflA4JJCZU=
Subject key identifier: A8:40:0A:43:86:CD:5A:2F:97:32:A1:4A:6B:90:5A:B0:C6:CA:E3:A4
Authority key identifier: B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
Certificate issuer: /CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Certificate serial: 0199FE46E1A6C848B9AE1A8638B6EC44D68F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
Manifest number: 0381
Signing time: Sun 19 Oct 2025 21:01:22 +0000
Manifest this update: Sun 19 Oct 2025 21:01:22 +0000
Manifest next update: Mon 20 Oct 2025 21:01:22 +0000
Files and hashes: 1: ZmF3lPkl3dsARIFpHN7vz5QHbFs.roa (hash: ukfiioKav9S2J4a6qVoPDRL9RQGgYfvHu1FXDGi1Nzg=)
2: tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl (hash: 9oPU5i901dKzxdWJmv++SyUWKQeZS3/bkUctfPu3c34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:e1:a6:c8:48:b9:ae:1a:86:38:b6:ec:44:d6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Validity
Not Before: Oct 19 21:01:22 2025 GMT
Not After : Oct 20 21:01:22 2025 GMT
Subject: CN=a8400a4386cd5a2f9732a14a6b905ab0c6cae3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:cd:9e:6e:08:4b:fb:1b:cc:b4:8a:c7:7e:
eb:2e:97:e6:2f:f9:b1:ea:46:2e:cd:12:91:90:4d:
e1:4e:73:44:66:6b:57:20:58:a4:35:95:df:5c:65:
29:39:19:b6:2d:cf:7a:4a:eb:e3:3f:7a:28:12:40:
fa:a5:b7:19:cc:58:e8:4b:41:15:c0:00:84:ac:61:
86:87:bc:1b:15:4d:ba:c8:88:a3:ab:f6:6c:6f:f8:
e9:03:13:b4:ad:2d:f8:a6:26:76:13:78:a3:0f:d2:
2a:b6:74:6f:90:81:34:d2:3d:d8:e0:fe:7f:97:31:
4d:31:1f:fe:5e:02:fa:47:5c:cd:ea:a5:1c:ff:1e:
4a:a4:1d:9c:75:39:9f:73:36:00:25:93:f2:4a:b7:
ac:7d:e9:1c:7e:c4:92:a5:2c:fe:12:3b:39:96:f8:
82:25:79:04:29:74:eb:65:e4:fe:14:27:db:42:30:
6f:5c:6e:3c:f5:a4:ef:01:04:71:55:ce:fd:5a:1d:
76:24:d2:e7:0c:a0:7f:50:20:d1:e8:35:66:00:5c:
c3:8c:df:c5:bd:db:d2:46:51:43:0a:f4:81:da:86:
af:f7:e4:8d:c4:a6:08:35:30:b9:fa:dd:58:2f:ae:
d8:12:0b:98:f9:15:62:b4:f1:fb:4b:dd:50:59:1b:
93:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:40:0A:43:86:CD:5A:2F:97:32:A1:4A:6B:90:5A:B0:C6:CA:E3:A4
X509v3 Authority Key Identifier:
keyid:B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ad:f5:72:77:87:f8:48:8d:c6:62:5c:bc:8b:f8:60:8c:1b:
99:b2:32:85:f1:c0:74:3b:ec:d0:27:fc:10:2e:21:ce:f7:ea:
16:6b:92:a0:c6:bd:0f:9e:f1:ba:f9:9a:a3:de:9a:e7:79:43:
55:6a:ea:a3:72:e7:93:4c:fe:5b:1b:6d:3a:ba:d8:75:44:07:
d5:c5:a4:b3:e4:d3:83:a8:fb:96:fe:a9:af:b5:fe:51:37:b5:
a5:78:b0:4c:0e:a7:6a:7f:f9:ce:61:32:9c:2f:c8:ce:66:ea:
e5:33:e0:6b:2d:ac:01:09:3a:1a:e0:30:9b:d7:da:df:27:20:
3b:14:ad:27:5e:00:84:10:3a:c7:e3:73:5c:b0:0f:42:a7:f7:
92:00:44:03:4f:5c:67:18:f4:38:f2:d8:d5:3c:fc:76:35:92:
37:ad:7c:f5:9c:ba:51:1b:fd:72:55:fa:a7:f9:d6:15:51:73:
fd:d5:ee:2a:d1:60:d5:9a:0b:73:48:a2:77:46:e6:96:a4:49:
19:5e:a1:18:16:e7:60:32:ba:9f:e1:55:7c:8e:a8:39:ce:da:
a3:ce:d0:99:e1:83:fb:dd:e0:6a:8f:35:58:ed:24:12:91:54:
d1:bd:62:f3:3f:6a:2f:eb:d2:42:43:77:62:59:dd:4c:c2:1f:
15:b1:c7:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RuGmyEi5rhqGOLbsRNaPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YzI4OGU5NjNlMGU5ZjgyZDFjNmE3ZmQ4NGVjNWFhMzQw
YWJhOGYwHhcNMjUxMDE5MjEwMTIyWhcNMjUxMDIwMjEwMTIyWjAzMTEwLwYDVQQD
EyhhODQwMGE0Mzg2Y2Q1YTJmOTczMmExNGE2YjkwNWFiMGM2Y2FlM2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SXNnm4IS/sbzLSKx37rLpfmL/mx
6kYuzRKRkE3hTnNEZmtXIFikNZXfXGUpORm2Lc96SuvjP3ooEkD6pbcZzFjoS0EV
wACErGGGh7wbFU26yIijq/Zsb/jpAxO0rS34piZ2E3ijD9IqtnRvkIE00j3Y4P5/
lzFNMR/+XgL6R1zN6qUc/x5KpB2cdTmfczYAJZPySresfekcfsSSpSz+Ejs5lviC
JXkEKXTrZeT+FCfbQjBvXG489aTvAQRxVc79Wh12JNLnDKB/UCDR6DVmAFzDjN/F
vdvSRlFDCvSB2oav9+SNxKYINTC5+t1YL67YEguY+RVitPH7S91QWRuTVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhACkOGzVovlzKhSmuQWrDGyuOkMB8GA1UdIwQY
MBaAFLXCiOlj4On4LRxqf9hOxao0CrqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNLSTZXUGc2Zmd0SEdwXzJFN0ZxalFLdW84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzM0OTEtYzY5OS00MmI1LTkwYTct
Y2M3ZTlhYjA5ZmI4LzEvdGNLSTZXUGc2Zmd0SEdwXzJFN0ZxalFLdW84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kYzM0OTEtYzY5OS00MmI1LTkwYTctY2M3ZTlhYjA5ZmI4
LzEvdGNLSTZXUGc2Zmd0SEdwXzJFN0ZxalFLdW84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkq31cneH
+EiNxmJcvIv4YIwbmbIyhfHAdDvs0Cf8EC4hzvfqFmuSoMa9D57xuvmao96a53lD
VWrqo3Lnk0z+WxttOrrYdUQH1cWks+TTg6j7lv6pr7X+UTe1pXiwTA6nan/5zmEy
nC/Izmbq5TPgay2sAQk6GuAwm9fa3ycgOxStJ14AhBA6x+NzXLAPQqf3kgBEA09c
Zxj0OPLY1Tz8djWSN6189Zy6URv9clX6p/nWFVFz/dXuKtFg1ZoLc0iid0bmlqRJ
GV6hGBbnYDK6n+FVfI6oOc7ao87QmeGD+93gao81WO0kEpFU0b1i8z9qL+vSQkN3
YlndTMIfFbHHtQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:52:24 2025 by rpki-client