Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
File: TmROKYPFxQTYAPLQWCsYLrq_JIc.mft (raw, json)
Hash identifier: 9j8ZDR7z1fcLBRHDX4AlAY69khPoQTEocfFogFUXL74=
Subject key identifier: CD:EF:88:0A:A3:33:8C:6B:B2:00:6F:48:1F:53:93:41:B1:25:28:B9
Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Certificate issuer: /CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Certificate serial: 0199FBEAC672AC559EE81151BA5B00FA01B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
Manifest number: 09A4
Signing time: Sun 19 Oct 2025 10:01:31 +0000
Manifest this update: Sun 19 Oct 2025 10:01:31 +0000
Manifest next update: Mon 20 Oct 2025 10:01:31 +0000
Files and hashes: 1: TmROKYPFxQTYAPLQWCsYLrq_JIc.crl (hash: I6Vk/lPI728jwtDWMDmLduUKLmc8FhPs1Y36Urq6qZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c6:72:ac:55:9e:e8:11:51:ba:5b:00:fa:01:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Validity
Not Before: Oct 19 10:01:31 2025 GMT
Not After : Oct 20 10:01:31 2025 GMT
Subject: CN=cdef880aa3338c6bb2006f481f539341b12528b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:6d:52:64:53:3a:d6:b0:0e:20:50:a6:13:
c2:8d:0b:09:ec:4c:9b:a1:54:9e:c0:00:16:82:a0:
bb:e9:1d:0e:6e:5b:9e:3f:d1:d8:d5:54:18:bf:c0:
79:f0:bc:a7:e3:3b:49:b0:0e:6c:02:25:4c:44:f6:
46:61:39:4b:15:5c:7e:b9:12:c4:9e:02:83:54:d0:
93:60:33:6d:89:f9:76:b0:83:72:bb:5c:3c:83:6b:
ad:f5:af:17:f6:b1:43:f9:f9:30:f0:08:87:50:4f:
20:3d:01:c2:a0:36:54:f2:b0:fd:1c:7b:c7:64:e7:
bc:2c:70:94:b8:06:85:d5:ca:12:71:46:d9:2d:73:
d3:8a:5a:55:0c:52:7d:21:f8:b7:de:97:60:da:a8:
bb:9e:96:10:31:ea:52:c0:88:6e:9e:89:7a:43:29:
d3:60:5f:46:3e:06:1d:87:9c:f7:72:19:66:07:a6:
62:6a:16:e3:10:e9:65:99:22:27:b7:6a:7e:55:cf:
f8:ba:4a:e2:22:ec:50:a3:27:3b:0c:79:76:ff:74:
ee:57:8e:9e:f0:76:0d:a3:69:ad:45:d2:eb:2a:b0:
68:be:37:79:ff:c8:7f:8d:70:7c:b6:1c:d8:b3:9c:
d1:f1:d4:50:d6:44:b1:ce:56:e2:bf:9e:d4:e6:f8:
31:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EF:88:0A:A3:33:8C:6B:B2:00:6F:48:1F:53:93:41:B1:25:28:B9
X509v3 Authority Key Identifier:
keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6c:a9:33:56:88:8b:4f:e8:58:dc:de:41:03:1e:09:6f:3a:
fd:9d:49:82:b5:49:3e:fd:46:c4:2b:36:f9:ed:36:ff:0e:10:
ca:5d:8b:c3:1f:6b:80:28:d3:b6:c7:53:82:be:1f:d5:97:67:
8a:43:ba:55:fa:1c:3c:d7:1b:d5:8c:01:be:65:0b:55:c8:a9:
bd:6d:8b:bb:71:f8:7a:77:14:df:36:e3:1e:b9:1c:62:0f:9e:
ef:07:55:4f:db:d0:08:43:03:3c:34:70:66:eb:bf:7e:a5:46:
a7:4e:40:d1:3d:ea:69:1c:e1:4f:37:f8:af:95:d9:24:52:4f:
50:a2:09:cd:f8:3b:18:8d:88:cc:49:3d:ea:fb:41:4c:2c:63:
d7:70:c1:e8:e1:61:79:b4:75:19:22:e5:62:d4:c8:01:69:73:
05:ac:39:2c:a4:4c:be:83:fc:c4:6b:a1:86:c7:a3:b8:47:c4:
05:5d:f2:6c:d2:da:80:75:b0:11:46:95:ee:a0:45:bf:75:ae:
8e:30:10:91:a7:f2:30:a7:2d:cd:15:49:d6:c8:9b:d7:ea:85:
27:66:60:8f:8e:ab:51:59:3f:85:1f:23:9e:c7:6e:c9:63:ce:
31:6a:bd:63:8b:56:8d:43:fd:53:f8:63:7a:03:b1:3d:30:08:
f3:d8:86:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76sZyrFWe6BFRulsA+gG0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNjQ0ZTI5ODNjNWM1MDRkODAwZjJkMDU4MmIxODJlYmFi
ZjI0ODcwHhcNMjUxMDE5MTAwMTMxWhcNMjUxMDIwMTAwMTMxWjAzMTEwLwYDVQQD
EyhjZGVmODgwYWEzMzM4YzZiYjIwMDZmNDgxZjUzOTM0MWIxMjUyOGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodBtUmRTOtawDiBQphPCjQsJ7Eyb
oVSewAAWgqC76R0OblueP9HY1VQYv8B58Lyn4ztJsA5sAiVMRPZGYTlLFVx+uRLE
ngKDVNCTYDNtifl2sINyu1w8g2ut9a8X9rFD+fkw8AiHUE8gPQHCoDZU8rD9HHvH
ZOe8LHCUuAaF1coScUbZLXPTilpVDFJ9Ifi33pdg2qi7npYQMepSwIhunol6QynT
YF9GPgYdh5z3chlmB6ZiahbjEOllmSInt2p+Vc/4ukriIuxQoyc7DHl2/3TuV46e
8HYNo2mtRdLrKrBovjd5/8h/jXB8thzYs5zR8dRQ1kSxzlbiv57U5vgx0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3viAqjM4xrsgBvSB9Tk0GxJSi5MB8GA1UdIwQY
MBaAFE5kTimDxcUE2ADy0FgrGC66vySHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMGU2YTItOGIyMC00NDgwLWE4YWIt
YjM4OGM1NzcwZTA0LzEvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9jMGU2YTItOGIyMC00NDgwLWE4YWItYjM4OGM1NzcwZTA0
LzEvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmypM1aI
i0/oWNzeQQMeCW86/Z1JgrVJPv1GxCs2+e02/w4Qyl2Lwx9rgCjTtsdTgr4f1Zdn
ikO6VfocPNcb1YwBvmULVcipvW2Lu3H4encU3zbjHrkcYg+e7wdVT9vQCEMDPDRw
Zuu/fqVGp05A0T3qaRzhTzf4r5XZJFJPUKIJzfg7GI2IzEk96vtBTCxj13DB6OFh
ebR1GSLlYtTIAWlzBaw5LKRMvoP8xGuhhsejuEfEBV3ybNLagHWwEUaV7qBFv3Wu
jjAQkafyMKctzRVJ1sib1+qFJ2Zgj46rUVk/hR8jnsduyWPOMWq9Y4tWjUP9U/hj
egOxPTAI89iGgQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:31 2025 by rpki-client