Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
File: Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft (raw, json)
Hash identifier: z+8250lVzsw5EqI0+4UeIA0ttvmoxUkCU6dBeVUe6Oc=
Subject key identifier: 98:57:4C:14:18:47:FF:BC:63:3B:B7:74:CD:79:4B:9B:08:2F:0F:53
Authority key identifier: 4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8
Certificate issuer: /CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
Certificate serial: 0199FC58DB148DD9681C38606225C8631C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
Manifest number: 04AB
Signing time: Sun 19 Oct 2025 12:01:45 +0000
Manifest this update: Sun 19 Oct 2025 12:01:45 +0000
Manifest next update: Mon 20 Oct 2025 12:01:45 +0000
Files and hashes: 1: Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl (hash: JviRLnvsnnxTfFrfOJvgNItVUKwXRJMnXRMvvbl7+fQ=)
2: dRB7xJtajjzk6UoGyoSGsT51giI.roa (hash: YcmDNZ/enUR0rChrVz40koeNmEa+q2s38R7f9KQbajo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:db:14:8d:d9:68:1c:38:60:62:25:c8:63:1c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
Validity
Not Before: Oct 19 12:01:45 2025 GMT
Not After : Oct 20 12:01:45 2025 GMT
Subject: CN=98574c141847ffbc633bb774cd794b9b082f0f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:ff:a3:5f:3b:78:7f:ea:40:d1:da:69:64:
bb:64:3f:e0:46:da:6f:d5:93:20:41:62:d8:c8:9b:
b3:32:4f:3f:56:0c:c7:9b:5f:4c:8d:68:3c:29:33:
9b:a7:97:a4:fe:07:1f:6b:f8:97:1d:85:29:d7:84:
41:be:52:cb:02:e6:e1:1f:25:e3:24:fc:e4:8c:a3:
5c:50:c6:b9:53:b7:71:02:88:8b:a5:ed:26:ab:a9:
8a:3e:74:eb:d7:b5:5e:07:bc:66:d5:0d:b5:c0:a4:
eb:49:2c:82:02:5a:e2:ee:90:39:a7:2f:4a:c0:a9:
62:ac:bb:00:ca:f5:51:1e:57:25:98:8a:d4:3c:81:
39:82:a7:b2:d1:e0:2b:dd:87:db:35:f5:cd:d8:e9:
df:ec:4b:f4:38:3b:cf:05:d0:3d:d2:57:8a:91:66:
3d:1c:f9:0d:25:dc:0d:e5:83:41:bb:2c:42:40:3a:
36:50:82:61:53:e2:47:f2:6b:c4:95:7b:db:05:68:
7b:50:f9:79:1a:b3:62:e4:d5:6c:06:26:8b:0c:81:
b2:c8:a0:3b:48:a1:64:1f:bc:af:71:b6:a6:39:9b:
e7:e5:16:c4:f1:f5:58:29:42:d3:12:d7:dc:94:98:
ba:60:9f:f9:d9:50:82:4d:b9:b2:cd:3a:e7:29:1b:
a0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:57:4C:14:18:47:FF:BC:63:3B:B7:74:CD:79:4B:9B:08:2F:0F:53
X509v3 Authority Key Identifier:
keyid:4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:28:26:c0:b1:6e:5d:f4:d8:0c:f0:24:b4:3c:fc:b9:40:ee:
8b:b9:21:ce:14:65:1c:8c:81:74:c8:f7:13:69:48:c1:38:c8:
0d:e3:c6:59:86:de:64:24:45:6d:6f:3c:71:f1:83:74:20:1c:
ca:c9:cf:34:f4:6f:3f:7c:de:aa:9e:5c:ce:69:bd:25:00:9d:
f6:23:a5:ad:66:07:11:4f:84:1e:cc:34:c1:fc:fc:7f:c3:30:
df:52:d1:01:f1:16:74:52:8d:ce:ba:27:a5:0d:c9:ab:14:1a:
5e:e7:ba:ed:fb:5f:9a:19:40:12:08:82:22:61:09:cb:d8:be:
56:4d:d4:33:de:4c:58:ca:fc:bd:df:a4:ab:62:06:10:3f:b5:
48:f1:31:b4:5c:e2:9e:fe:32:91:88:45:b3:4b:5c:1f:26:2f:
da:72:4f:02:5c:81:2b:12:db:15:dc:6e:e0:3e:b3:13:1a:f0:
f2:07:65:98:82:82:54:b5:fe:10:02:69:d2:0f:fc:ef:26:c4:
42:07:89:24:45:8b:a7:c0:7a:60:f1:59:5d:3f:e5:af:a7:55:
1b:4b:fb:a4:81:fa:2c:73:b5:76:1d:4c:f3:3f:ec:83:57:e8:
83:5e:09:60:19:ec:73:3e:5f:75:18:f6:79:0c:6e:72:ed:ac:
dd:8b:84:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WNsUjdloHDhgYiXIYxwoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNmIzMmQ5ZDNlYmM2ZWU0OWJkNmZhNmNkOTBlNGY1Yzdk
NTQ0ZTgwHhcNMjUxMDE5MTIwMTQ1WhcNMjUxMDIwMTIwMTQ1WjAzMTEwLwYDVQQD
Eyg5ODU3NGMxNDE4NDdmZmJjNjMzYmI3NzRjZDc5NGI5YjA4MmYwZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXL/o187eH/qQNHaaWS7ZD/gRtpv
1ZMgQWLYyJuzMk8/VgzHm19MjWg8KTObp5ek/gcfa/iXHYUp14RBvlLLAubhHyXj
JPzkjKNcUMa5U7dxAoiLpe0mq6mKPnTr17VeB7xm1Q21wKTrSSyCAlri7pA5py9K
wKlirLsAyvVRHlclmIrUPIE5gqey0eAr3YfbNfXN2Onf7Ev0ODvPBdA90leKkWY9
HPkNJdwN5YNBuyxCQDo2UIJhU+JH8mvElXvbBWh7UPl5GrNi5NVsBiaLDIGyyKA7
SKFkH7yvcbamOZvn5RbE8fVYKULTEtfclJi6YJ/52VCCTbmyzTrnKRugtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhXTBQYR/+8Yzu3dM15S5sILw9TMB8GA1UdIwQY
MBaAFE5rMtnT68buSb1vps2Q5PXH1UToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1zeTJkUHJ4dTVKdlctbXpaRGs5Y2ZWUk9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82Mjc0ZDctOGQxYy00OTNiLTljMjIt
MDk2ZWUyOWQ5OTdkLzEvVG1zeTJkUHJ4dTVKdlctbXpaRGs5Y2ZWUk9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82Mjc0ZDctOGQxYy00OTNiLTljMjItMDk2ZWUyOWQ5OTdk
LzEvVG1zeTJkUHJ4dTVKdlctbXpaRGs5Y2ZWUk9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIigmwLFu
XfTYDPAktDz8uUDui7khzhRlHIyBdMj3E2lIwTjIDePGWYbeZCRFbW88cfGDdCAc
ysnPNPRvP3zeqp5czmm9JQCd9iOlrWYHEU+EHsw0wfz8f8Mw31LRAfEWdFKNzron
pQ3JqxQaXue67ftfmhlAEgiCImEJy9i+Vk3UM95MWMr8vd+kq2IGED+1SPExtFzi
nv4ykYhFs0tcHyYv2nJPAlyBKxLbFdxu4D6zExrw8gdlmIKCVLX+EAJp0g/87ybE
QgeJJEWLp8B6YPFZXT/lr6dVG0v7pIH6LHO1dh1M8z/sg1fog14JYBnscz5fdRj2
eQxucu2s3YuEEA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:00 2025 by rpki-client