Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
File: Tm_7mQbuvrofWxpVju1jcvZTzoY.mft (raw, json)
Hash identifier: sFp8ALU+O9VaPKA0cwXFCyzwnSFl3/Ksn2hIAtMUFsE=
Subject key identifier: 62:7C:F2:18:75:D3:02:71:B2:E1:78:87:10:A5:08:6C:B6:D3:5C:B2
Authority key identifier: 4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
Certificate issuer: /CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Certificate serial: 019A7225FE03299B0C8ECCC1542764C3BFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:23 +0000
Manifest this update: Tue 11 Nov 2025 09:01:23 +0000
Manifest next update: Wed 12 Nov 2025 09:01:23 +0000
Files and hashes: 1: Tm_7mQbuvrofWxpVju1jcvZTzoY.crl (hash: dcP6+m2XvX0xAz9zf+FKQoNVfa5vNyqG+H7C6cc9QiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:fe:03:29:9b:0c:8e:cc:c1:54:27:64:c3:bf:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Validity
Not Before: Nov 11 09:01:23 2025 GMT
Not After : Nov 12 09:01:23 2025 GMT
Subject: CN=627cf21875d30271b2e1788710a5086cb6d35cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:f3:74:6c:dd:1f:05:42:4d:88:da:2b:32:
7f:03:a6:c7:b9:92:73:3d:eb:84:04:84:03:90:83:
6f:8d:13:d2:6a:3b:c9:87:9c:57:82:fd:a1:db:5c:
43:f2:5a:75:55:3f:ff:c1:32:a1:0c:12:55:13:9c:
cf:d6:99:c2:52:94:7a:67:c7:fd:b7:60:88:11:0f:
db:2e:d5:e6:91:2e:90:05:8a:ac:8a:2b:0d:4d:fd:
f2:f3:ec:6e:4b:0f:43:fd:6f:90:cc:79:f6:cb:c5:
a5:16:97:ce:0b:f5:d1:91:31:07:f6:7b:4c:25:d1:
fb:1b:82:7d:05:6a:aa:2d:29:04:92:c5:6d:22:c7:
dd:ba:40:f1:b5:e7:63:36:36:22:02:48:76:52:d8:
2a:6f:28:c0:6e:01:17:bf:2b:6d:f4:1b:63:be:76:
db:4a:41:06:48:ee:00:95:1c:a4:56:32:f0:77:49:
05:2a:fe:e7:0a:02:03:9a:a8:18:3a:3f:08:e5:5e:
2c:e6:78:79:83:6a:94:71:0a:6f:4a:a5:ad:54:d9:
97:3c:9a:83:04:32:da:7a:3b:89:27:62:43:ad:0b:
4c:d2:e6:e9:d5:c8:4d:fb:e2:c3:bc:3b:e7:3d:4d:
36:b5:53:0d:b0:6b:51:48:1e:87:47:42:1c:a8:99:
be:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7C:F2:18:75:D3:02:71:B2:E1:78:87:10:A5:08:6C:B6:D3:5C:B2
X509v3 Authority Key Identifier:
keyid:4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:de:49:6d:9d:e1:f8:de:f5:bc:73:e6:ea:7c:c2:09:c0:12:
a9:9d:1c:60:e6:3e:d7:fc:b2:0a:c0:0b:86:ee:46:d3:76:72:
08:22:1a:96:af:6e:7f:dd:f6:94:3e:10:b1:f6:94:c2:47:c0:
fa:98:8e:1b:74:10:76:b6:39:c6:c6:42:d0:e0:8c:71:9f:b3:
6b:11:98:7b:12:c9:8f:4b:73:63:a4:f2:37:89:a4:4a:05:10:
f6:4f:aa:41:fa:3f:a7:80:a9:bb:26:d9:c2:a8:b1:9d:ca:95:
5b:4f:b0:4a:79:8f:15:f4:9d:f2:18:68:ae:c4:4e:fa:9e:b1:
3a:f7:53:74:1e:8c:c2:fe:05:bb:68:4c:42:a5:9e:51:8e:ec:
bf:0d:60:72:8c:03:a7:66:52:78:e2:07:75:22:ae:14:ac:d8:
3e:4e:15:d9:21:1f:e1:54:b5:96:7a:1d:81:6a:7f:f6:35:9d:
eb:cb:be:0e:3a:43:af:cc:63:0b:e9:a6:4a:dc:88:d6:ef:e2:
9a:e1:71:b4:a1:77:b7:65:47:3e:82:e1:12:89:4b:5a:2a:48:
9f:7a:90:d5:db:c6:11:e2:9e:ee:62:8d:c9:48:7d:9b:ea:ff:
14:b4:7e:de:75:32:2d:c8:eb:16:97:4a:08:16:4a:fd:56:dd:
d5:7e:0e:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJf4DKZsMjszBVCdkw7+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNmZmYjk5MDZlZWJlYmExZjViMWE1NThlZWQ2MzcyZjY1
M2NlODYwHhcNMjUxMTExMDkwMTIzWhcNMjUxMTEyMDkwMTIzWjAzMTEwLwYDVQQD
Eyg2MjdjZjIxODc1ZDMwMjcxYjJlMTc4ODcxMGE1MDg2Y2I2ZDM1Y2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E7zdGzdHwVCTYjaKzJ/A6bHuZJz
PeuEBIQDkINvjRPSajvJh5xXgv2h21xD8lp1VT//wTKhDBJVE5zP1pnCUpR6Z8f9
t2CIEQ/bLtXmkS6QBYqsiisNTf3y8+xuSw9D/W+QzHn2y8WlFpfOC/XRkTEH9ntM
JdH7G4J9BWqqLSkEksVtIsfdukDxtedjNjYiAkh2UtgqbyjAbgEXvytt9Btjvnbb
SkEGSO4AlRykVjLwd0kFKv7nCgIDmqgYOj8I5V4s5nh5g2qUcQpvSqWtVNmXPJqD
BDLaejuJJ2JDrQtM0ubp1chN++LDvDvnPU02tVMNsGtRSB6HR0IcqJm+6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJ88hh10wJxsuF4hxClCGy201yyMB8GA1UdIwQY
MBaAFE5v+5kG7r66H1saVY7tY3L2U86GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xOTgwYmQtMDc1My00MTYxLWI2ZjUt
OWM3MmUxNTdhYmIzLzEvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xOTgwYmQtMDc1My00MTYxLWI2ZjUtOWM3MmUxNTdhYmIz
LzEvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGt5JbZ3h
+N71vHPm6nzCCcASqZ0cYOY+1/yyCsALhu5G03ZyCCIalq9uf932lD4QsfaUwkfA
+piOG3QQdrY5xsZC0OCMcZ+zaxGYexLJj0tzY6TyN4mkSgUQ9k+qQfo/p4CpuybZ
wqixncqVW0+wSnmPFfSd8hhorsRO+p6xOvdTdB6Mwv4Fu2hMQqWeUY7svw1gcowD
p2ZSeOIHdSKuFKzYPk4V2SEf4VS1lnodgWp/9jWd68u+DjpDr8xjC+mmStyI1u/i
muFxtKF3t2VHPoLhEolLWipIn3qQ1dvGEeKe7mKNyUh9m+r/FLR+3nUyLcjrFpdK
CBZK/Vbd1X4OGw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:41 2025 by rpki-client