Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
File: TT2CE15FkxVfpq1vt_7LAfE4GLI.mft (raw, json)
Hash identifier: QnrEHngwPyMXVTSiD4E0Zr68Vvy4WQ/8QDemyTP9otk=
Subject key identifier: 1D:BA:5C:03:B2:50:69:01:A0:67:2D:A8:98:6A:76:B3:E0:40:44:79
Authority key identifier: 4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2
Certificate issuer: /CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2
Certificate serial: 019A71EE816086974DC9588E3138160E6A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
Manifest number: 0B90
Signing time: Tue 11 Nov 2025 08:00:47 +0000
Manifest this update: Tue 11 Nov 2025 08:00:47 +0000
Manifest next update: Wed 12 Nov 2025 08:00:47 +0000
Files and hashes: 1: TT2CE15FkxVfpq1vt_7LAfE4GLI.crl (hash: pbN54CHLokXPNv0juT7ubdWzc816I1IIf20thX4BaYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:81:60:86:97:4d:c9:58:8e:31:38:16:0e:6a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2
Validity
Not Before: Nov 11 08:00:47 2025 GMT
Not After : Nov 12 08:00:47 2025 GMT
Subject: CN=1dba5c03b2506901a0672da8986a76b3e0404479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:45:79:cb:93:79:dc:33:e4:02:f0:59:2e:
b1:fe:6d:8e:b4:52:c3:3c:9d:eb:36:a7:fd:5c:dd:
bb:a5:8e:a5:44:3b:b3:6a:ee:07:d5:84:d6:97:5d:
69:e5:82:f3:d8:aa:62:da:5a:2f:93:73:75:db:d7:
af:e8:2e:d3:cb:7d:dd:0e:9b:0b:05:04:ce:42:b9:
2e:86:19:ce:ca:d6:28:19:9f:78:05:0d:e3:69:5b:
02:44:29:dd:87:81:7e:4c:0f:01:99:57:cf:64:82:
2e:ca:c0:77:85:84:a8:c1:c1:01:9f:d5:3f:4e:c4:
f2:8b:83:b9:68:fd:9a:c3:75:98:70:20:c3:b7:96:
77:f8:46:96:14:c6:29:60:6e:8c:61:ae:46:5e:24:
f6:9c:29:5e:07:a4:4d:01:ad:8d:8a:45:58:05:ab:
a9:37:5a:7e:0f:74:ee:8a:86:6b:55:73:19:25:32:
e9:2f:da:5f:4e:18:ec:2a:ae:3e:7d:ef:01:34:bd:
62:78:5d:c9:45:3d:3d:7e:6a:11:b1:35:ab:c9:37:
73:ad:04:c4:05:2d:66:40:c2:9e:14:f2:27:9c:3c:
8d:51:eb:68:d6:23:a9:70:2f:ac:c4:98:20:ad:4e:
a2:0f:3d:74:35:9f:ee:91:81:ba:d6:32:11:a3:51:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BA:5C:03:B2:50:69:01:A0:67:2D:A8:98:6A:76:B3:E0:40:44:79
X509v3 Authority Key Identifier:
keyid:4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a3:45:de:98:3d:1b:94:ec:19:17:95:70:ea:74:d2:8f:07:
11:61:d6:ba:69:e3:d4:ea:d6:2f:c7:00:c3:8b:e0:0b:01:bd:
cf:2a:be:e8:ee:ad:70:4a:59:1f:c9:4a:d2:b8:cf:4f:f5:70:
7f:14:de:cc:ec:31:d6:0f:eb:ec:75:48:7a:d0:45:43:51:bc:
97:3f:5c:07:1d:fa:69:ca:2b:d0:15:e1:9e:40:35:fa:80:16:
8b:bc:eb:3a:e0:80:f4:a8:01:c6:0d:9b:9b:d5:9c:0d:27:69:
c2:52:95:4d:66:9a:d6:d6:26:cd:55:a1:3a:d0:13:c3:4d:20:
ba:ee:f1:4c:6b:ae:59:48:c7:67:d0:bf:6f:a0:79:0f:d3:e2:
f5:e4:c9:09:cf:25:d0:50:3f:f8:63:ee:14:95:df:b0:68:27:
e8:0b:f9:2e:3f:9c:35:c4:de:f2:aa:21:00:a5:74:51:e3:35:
79:66:ba:d6:66:ce:93:d9:a4:5d:70:89:4f:65:18:d4:24:32:
a6:d4:c3:0d:93:73:64:c0:fb:1a:b1:c0:2c:2b:0d:3c:fd:a2:
1f:f8:b3:16:f5:b1:52:08:14:ba:45:dc:1a:05:dd:98:0c:2f:
da:e4:7f:c4:db:8e:b6:a9:c2:e3:3b:db:96:ac:f9:f0:70:9b:
2b:26:32:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7oFghpdNyViOMTgWDmqQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2Q4MjEzNWU0NTkzMTU1ZmE2YWQ2ZmI3ZmVjYjAxZjEz
ODE4YjIwHhcNMjUxMTExMDgwMDQ3WhcNMjUxMTEyMDgwMDQ3WjAzMTEwLwYDVQQD
EygxZGJhNWMwM2IyNTA2OTAxYTA2NzJkYTg5ODZhNzZiM2UwNDA0NDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeFFecuTedwz5ALwWS6x/m2OtFLD
PJ3rNqf9XN27pY6lRDuzau4H1YTWl11p5YLz2Kpi2lovk3N129ev6C7Ty33dDpsL
BQTOQrkuhhnOytYoGZ94BQ3jaVsCRCndh4F+TA8BmVfPZIIuysB3hYSowcEBn9U/
TsTyi4O5aP2aw3WYcCDDt5Z3+EaWFMYpYG6MYa5GXiT2nCleB6RNAa2NikVYBaup
N1p+D3TuioZrVXMZJTLpL9pfThjsKq4+fe8BNL1ieF3JRT09fmoRsTWryTdzrQTE
BS1mQMKeFPInnDyNUeto1iOpcC+sxJggrU6iDz10NZ/ukYG61jIRo1ED5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB26XAOyUGkBoGctqJhqdrPgQER5MB8GA1UdIwQY
MBaAFE09ghNeRZMVX6atb7f+ywHxOBiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81OGJiOTMtZjZhMi00ODk4LWJmZDgt
MDVkODc1NmYwOTJlLzEvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81OGJiOTMtZjZhMi00ODk4LWJmZDgtMDVkODc1NmYwOTJl
LzEvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6NF3pg9
G5TsGReVcOp00o8HEWHWumnj1OrWL8cAw4vgCwG9zyq+6O6tcEpZH8lK0rjPT/Vw
fxTezOwx1g/r7HVIetBFQ1G8lz9cBx36acor0BXhnkA1+oAWi7zrOuCA9KgBxg2b
m9WcDSdpwlKVTWaa1tYmzVWhOtATw00guu7xTGuuWUjHZ9C/b6B5D9Pi9eTJCc8l
0FA/+GPuFJXfsGgn6Av5Lj+cNcTe8qohAKV0UeM1eWa61mbOk9mkXXCJT2UY1CQy
ptTDDZNzZMD7GrHALCsNPP2iH/izFvWxUggUukXcGgXdmAwv2uR/xNuOtqnC4zvb
lqz58HCbKyYyfA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:07 2025 by rpki-client