Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
File: Tx097mN940sTx0umz7TSBb5VYn4.mft (raw, json)
Hash identifier: 6UijYshI5RV3Yz7IyLXpaXoAb6cYqNJ8wSh02GsnEds=
Subject key identifier: 04:46:FB:DA:6F:2E:4E:ED:16:D1:9C:EE:BF:F4:18:D4:4C:75:A1:9F
Authority key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
Certificate issuer: /CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Certificate serial: 019A00A30B22E2354644973A60DD547C8758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
Manifest number: 16E0
Signing time: Mon 20 Oct 2025 08:01:16 +0000
Manifest this update: Mon 20 Oct 2025 08:01:16 +0000
Manifest next update: Tue 21 Oct 2025 08:01:16 +0000
Files and hashes: 1: Tx097mN940sTx0umz7TSBb5VYn4.crl (hash: KYrVZ45hQs49KjBv/rYiQve1cTwGUcqmHf8vxPMse1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:0b:22:e2:35:46:44:97:3a:60:dd:54:7c:87:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Validity
Not Before: Oct 20 08:01:16 2025 GMT
Not After : Oct 21 08:01:16 2025 GMT
Subject: CN=0446fbda6f2e4eed16d19ceebff418d44c75a19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:26:cd:95:a4:dd:aa:e7:82:e2:50:91:40:
12:72:72:04:3a:e4:84:f2:58:17:4a:b5:47:27:4b:
5a:91:cd:47:ea:f5:53:e7:ba:e5:83:21:d3:d8:21:
45:08:c2:8e:57:13:5d:8b:23:bd:d2:1e:df:55:ec:
01:c5:44:7d:b4:2d:55:69:89:39:54:f7:3e:08:11:
f2:e8:fb:68:80:4a:79:f6:43:b0:ad:b2:97:52:5d:
91:b0:f6:41:30:c8:b3:b0:7e:b4:7c:d7:50:30:9e:
63:f6:3d:6a:1f:f8:b3:10:56:d8:b4:e4:fe:ec:7a:
7e:91:71:d1:b8:8a:85:0c:79:dc:12:93:d3:c6:4c:
7e:1b:87:e3:6e:28:98:80:d1:7d:2d:16:9e:d7:71:
70:e2:82:78:dc:0a:74:a1:ea:28:fd:cc:37:c3:e0:
10:53:e3:31:fa:44:ce:9a:58:ad:43:f5:c3:49:60:
02:f0:0b:fa:a9:a0:c9:dc:f8:d4:bf:5e:b9:f2:bf:
cc:8c:ec:a2:ee:72:1e:75:03:99:f5:34:85:0f:d3:
59:7f:ae:1d:19:48:3b:2b:cd:1d:01:e6:96:12:7d:
4b:e3:2b:ce:00:0f:d2:a8:7f:1c:ef:5f:dd:ec:ff:
cf:29:07:e5:dd:ef:2e:12:a6:0f:b2:b7:2a:25:2e:
c2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:46:FB:DA:6F:2E:4E:ED:16:D1:9C:EE:BF:F4:18:D4:4C:75:A1:9F
X509v3 Authority Key Identifier:
keyid:4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fb:45:f2:99:f9:c8:bb:2d:be:24:47:48:d6:83:65:13:83:
23:5a:a9:86:b6:72:5c:66:ce:76:b8:ba:9c:ab:01:05:70:c8:
34:ad:20:84:03:c5:51:81:4d:e5:81:79:52:62:f0:78:f1:08:
9d:eb:90:8d:68:c5:0e:8a:3a:f2:70:6c:ef:ad:21:e8:6a:d6:
9f:b6:97:3a:57:c2:cf:c1:ee:58:dd:3d:66:ce:cb:b3:ec:4d:
93:cc:4f:56:18:31:5a:46:ba:0c:cc:bf:4b:c4:89:20:89:79:
ee:a3:7b:df:43:06:82:5f:c5:e1:a9:40:6c:f0:7a:4a:b5:c1:
40:b3:ab:9e:2b:51:f6:f1:61:bb:8f:03:6a:af:69:73:95:3c:
86:90:99:fb:89:9d:51:88:26:a3:f5:03:ee:78:bd:c3:45:e3:
c9:66:1e:72:0e:8b:50:c6:59:35:61:cb:64:32:ac:08:24:c0:
74:4a:f4:be:c2:9e:59:97:79:4a:2b:22:7f:35:bd:48:b0:4d:
c8:f1:af:49:df:ee:76:5d:2a:84:85:be:b0:8c:4b:68:49:93:
7b:c6:be:d7:50:7e:9e:c6:2a:e7:05:ef:c2:7f:ba:53:8a:4e:
38:da:77:11:b8:57:7c:3a:75:2f:fa:bb:35:d7:ee:ce:7b:aa:
97:a6:64:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAowsi4jVGRJc6YN1UfIdYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWQzZGVlNjM3ZGUzNGIxM2M3NGJhNmNmYjRkMjA1YmU1
NTYyN2UwHhcNMjUxMDIwMDgwMTE2WhcNMjUxMDIxMDgwMTE2WjAzMTEwLwYDVQQD
EygwNDQ2ZmJkYTZmMmU0ZWVkMTZkMTljZWViZmY0MThkNDRjNzVhMTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApncmzZWk3arnguJQkUAScnIEOuSE
8lgXSrVHJ0takc1H6vVT57rlgyHT2CFFCMKOVxNdiyO90h7fVewBxUR9tC1VaYk5
VPc+CBHy6PtogEp59kOwrbKXUl2RsPZBMMizsH60fNdQMJ5j9j1qH/izEFbYtOT+
7Hp+kXHRuIqFDHncEpPTxkx+G4fjbiiYgNF9LRae13Fw4oJ43Ap0oeoo/cw3w+AQ
U+Mx+kTOmlitQ/XDSWAC8Av6qaDJ3PjUv1658r/MjOyi7nIedQOZ9TSFD9NZf64d
GUg7K80dAeaWEn1L4yvOAA/SqH8c71/d7P/PKQfl3e8uEqYPsrcqJS7CcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARG+9pvLk7tFtGc7r/0GNRMdaGfMB8GA1UdIwQY
MBaAFE8dPe5jfeNLE8dLps+00gW+VWJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHgwOTdtTjk0MHNUeDB1bXo3VFNCYjVWWW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMWFkZjUtNzY0Mi00ZTkwLWEwN2Ut
MWYxYjI0MTE4ZDg1LzEvVHgwOTdtTjk0MHNUeDB1bXo3VFNCYjVWWW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9hMWFkZjUtNzY0Mi00ZTkwLWEwN2UtMWYxYjI0MTE4ZDg1
LzEvVHgwOTdtTjk0MHNUeDB1bXo3VFNCYjVWWW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvtF8pn5
yLstviRHSNaDZRODI1qphrZyXGbOdri6nKsBBXDINK0ghAPFUYFN5YF5UmLwePEI
neuQjWjFDoo68nBs760h6GrWn7aXOlfCz8HuWN09Zs7Ls+xNk8xPVhgxWka6DMy/
S8SJIIl57qN730MGgl/F4alAbPB6SrXBQLOrnitR9vFhu48Daq9pc5U8hpCZ+4md
UYgmo/UD7ni9w0XjyWYecg6LUMZZNWHLZDKsCCTAdEr0vsKeWZd5SisifzW9SLBN
yPGvSd/udl0qhIW+sIxLaEmTe8a+11B+nsYq5wXvwn+6U4pOONp3EbhXfDp1L/q7
Ndfuznuql6Zkjg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:40:28 2025 by rpki-client