Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
File: TO94CCwHKSqq4kD27P06_bp4uMo.mft (raw, json)
Hash identifier: VcGBhmTD1x838tkWTObOBZGBQVgo7XQpr8G3+eONklI=
Subject key identifier: BC:89:66:79:C4:6C:76:DF:CA:DA:A7:5F:E5:4A:B2:76:54:67:42:86
Authority key identifier: 4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA
Certificate issuer: /CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
Certificate serial: 019A71EEBA5C841A162CB13E52928B5A994E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
Manifest number: 04C7
Signing time: Tue 11 Nov 2025 08:01:01 +0000
Manifest this update: Tue 11 Nov 2025 08:01:01 +0000
Manifest next update: Wed 12 Nov 2025 08:01:01 +0000
Files and hashes: 1: TO94CCwHKSqq4kD27P06_bp4uMo.crl (hash: yZ8dMbomPZaHlAkAA0rpf9BrDft3aGlzewt1/qfsXQ4=)
2: wqDhS7gdeGbdKyK4P2B2xid5RCk.roa (hash: pzt+fKb4dYAAFu+QRte1CXzAs8gCt6ejAy8RnTWXAJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ba:5c:84:1a:16:2c:b1:3e:52:92:8b:5a:99:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
Validity
Not Before: Nov 11 08:01:01 2025 GMT
Not After : Nov 12 08:01:01 2025 GMT
Subject: CN=bc896679c46c76dfcadaa75fe54ab27654674286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:1a:d3:cf:4c:0e:82:0a:cb:86:03:61:85:
99:9c:bf:df:9e:9e:0d:f8:20:a4:b1:dc:9b:00:47:
40:57:f5:9f:64:c4:2e:e1:8e:dd:eb:b6:9a:75:69:
a2:2b:16:18:13:15:39:f8:39:b4:b6:68:22:9d:a9:
6a:14:37:69:f5:61:6a:19:e3:95:84:e8:71:e2:8d:
64:c6:87:b2:92:e1:b1:29:a8:03:b9:9f:ae:48:23:
b2:8f:3f:09:ed:20:28:26:75:37:6b:81:06:cf:40:
24:62:dc:b5:03:56:77:79:c3:7d:14:9f:eb:98:67:
c9:83:ac:62:1a:38:55:ab:57:55:24:71:e3:0e:b2:
2d:75:84:b1:c6:ad:58:52:e7:2d:dc:02:94:a3:83:
73:af:6a:35:d7:fc:6a:f1:59:93:85:42:5a:83:bd:
54:3e:f4:0d:63:11:8d:30:c6:2d:d6:2c:d2:35:45:
3a:d6:5c:9d:dc:63:8a:44:df:fe:6f:cd:bc:94:44:
e1:18:78:8e:eb:38:6a:81:ac:66:6c:f4:11:76:d5:
66:f1:1c:dc:1b:e5:a8:57:f7:0f:01:52:8f:49:2a:
07:71:26:38:3e:ec:3d:f7:ef:cf:d0:33:06:c5:79:
69:71:18:5a:05:ac:64:9a:a1:ca:ba:6c:d4:b2:20:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:89:66:79:C4:6C:76:DF:CA:DA:A7:5F:E5:4A:B2:76:54:67:42:86
X509v3 Authority Key Identifier:
keyid:4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:af:3b:eb:d1:df:79:a3:76:d3:7a:60:3b:8a:b2:e8:8a:ff:
98:0e:59:bd:b2:2b:1f:ff:2b:5a:01:69:79:7d:a3:c9:d8:eb:
91:5f:dd:fd:89:d5:e4:2c:1b:6d:b8:75:7e:21:a0:6d:01:97:
89:47:fd:fe:51:d9:4f:7c:a9:62:1a:28:a8:5d:b3:45:17:af:
97:09:ec:b2:fe:28:59:19:12:b2:ac:97:00:43:e9:63:47:60:
77:d9:e4:2e:8a:f4:c4:d6:7b:73:6f:dc:d4:4d:b7:42:e6:ec:
e0:06:99:ce:52:45:ba:59:27:b1:3c:6c:39:13:78:57:1c:7d:
57:2e:5b:10:58:72:c2:e3:c6:36:78:16:f0:40:3d:f1:27:68:
fe:cc:2b:61:ab:16:22:9a:66:78:3f:46:29:6f:be:26:00:3e:
6c:34:31:4e:db:f1:2d:5f:e4:30:df:0d:f3:ec:61:dc:22:6a:
38:a0:e3:05:3d:73:27:96:27:5f:0e:38:6f:33:50:89:3d:c9:
5b:22:dd:61:73:6d:ee:6b:12:55:1e:1c:91:43:b2:2c:c3:2e:
7f:a6:37:cd:fd:05:b9:b6:06:11:04:01:13:aa:39:dd:ee:60:
c9:72:58:31:a9:d3:07:15:3c:24:79:9e:be:ee:75:07:15:db:
fa:97:51:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7rpchBoWLLE+UpKLWplOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZWY3ODA4MmMwNzI5MmFhYWUyNDBmNmVjZmQzYWZkYmE3
OGI4Y2EwHhcNMjUxMTExMDgwMTAxWhcNMjUxMTEyMDgwMTAxWjAzMTEwLwYDVQQD
EyhiYzg5NjY3OWM0NmM3NmRmY2FkYWE3NWZlNTRhYjI3NjU0Njc0Mjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIwa089MDoIKy4YDYYWZnL/fnp4N
+CCksdybAEdAV/WfZMQu4Y7d67aadWmiKxYYExU5+Dm0tmginalqFDdp9WFqGeOV
hOhx4o1kxoeykuGxKagDuZ+uSCOyjz8J7SAoJnU3a4EGz0AkYty1A1Z3ecN9FJ/r
mGfJg6xiGjhVq1dVJHHjDrItdYSxxq1YUuct3AKUo4Nzr2o11/xq8VmThUJag71U
PvQNYxGNMMYt1izSNUU61lyd3GOKRN/+b828lEThGHiO6zhqgaxmbPQRdtVm8Rzc
G+WoV/cPAVKPSSoHcSY4Puw99+/P0DMGxXlpcRhaBaxkmqHKumzUsiDQ3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyJZnnEbHbfytqnX+VKsnZUZ0KGMB8GA1UdIwQY
MBaAFEzveAgsBykqquJA9uz9Ov26eLjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xNmZiYmYtNmNkZC00OWI3LThjMjEt
ODgzYjkwY2QxMzRhLzEvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xNmZiYmYtNmNkZC00OWI3LThjMjEtODgzYjkwY2QxMzRh
LzEvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdK8769Hf
eaN203pgO4qy6Ir/mA5ZvbIrH/8rWgFpeX2jydjrkV/d/YnV5Cwbbbh1fiGgbQGX
iUf9/lHZT3ypYhooqF2zRRevlwnssv4oWRkSsqyXAEPpY0dgd9nkLor0xNZ7c2/c
1E23Qubs4AaZzlJFulknsTxsORN4Vxx9Vy5bEFhywuPGNngW8EA98Sdo/swrYasW
IppmeD9GKW++JgA+bDQxTtvxLV/kMN8N8+xh3CJqOKDjBT1zJ5YnXw44bzNQiT3J
WyLdYXNt7msSVR4ckUOyLMMuf6Y3zf0FubYGEQQBE6o53e5gyXJYManTBxU8JHme
vu51BxXb+pdRgg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:15 2025 by rpki-client