Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
File: TkJsh9-8xVLceQ_sPtHN56j4huk.mft (raw, json)
Hash identifier: a05rhcKUCCV7jaNj6zf6cngbS3iy9JUCXjUq46nGGVQ=
Subject key identifier: D7:F0:B3:18:0B:B7:A1:AC:8A:01:E1:57:73:27:EF:74:47:F9:EA:4B
Authority key identifier: 4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
Certificate issuer: /CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Certificate serial: 019A71B8F09569984A9534FD5ECCAD09FBE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
Manifest number: 0A5D
Signing time: Tue 11 Nov 2025 07:02:16 +0000
Manifest this update: Tue 11 Nov 2025 07:02:16 +0000
Manifest next update: Wed 12 Nov 2025 07:02:16 +0000
Files and hashes: 1: TkJsh9-8xVLceQ_sPtHN56j4huk.crl (hash: aFflj6T3eyMnez2dP7PdXS7vH1rvY5asRyhIXtSmq8E=)
2: o1pkGMrhjFIHajUuas6hn3OkprM.roa (hash: vhDUewSi85hdhWxPSoEhr0a9lvOVAXD09OTRvqe5guU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f0:95:69:98:4a:95:34:fd:5e:cc:ad:09:fb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Validity
Not Before: Nov 11 07:02:16 2025 GMT
Not After : Nov 12 07:02:16 2025 GMT
Subject: CN=d7f0b3180bb7a1ac8a01e1577327ef7447f9ea4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:a2:d2:64:6f:df:36:a6:66:11:a8:4c:0b:
91:5f:be:49:c8:f7:d8:89:82:4c:3b:74:27:9c:e2:
7a:f4:ec:39:67:a3:a7:41:44:2c:95:4f:7c:bb:e7:
1a:5c:27:1a:6b:f3:89:69:c5:34:ae:33:65:20:da:
3d:8c:69:7d:d8:30:2c:2b:7b:21:77:bb:ec:e3:e0:
ea:f8:9f:a0:aa:f0:7c:4f:65:1d:3f:82:b7:91:a8:
ed:89:29:35:ed:52:b4:46:f8:09:3f:1d:8f:50:48:
9c:b2:e3:5e:79:81:71:5a:de:c6:3d:c6:3d:3b:ce:
c4:f0:66:d0:64:8d:ec:6e:cc:f5:13:17:5b:cd:ee:
8e:b8:ac:ae:f3:c0:c2:54:6f:db:09:e1:57:4b:92:
b1:5a:7e:3d:90:61:0d:50:44:2c:16:ee:57:38:ba:
98:78:ef:49:03:a7:d2:24:ab:31:28:50:bf:1f:db:
4f:70:7a:96:f0:80:79:a2:18:e2:85:82:f4:e7:62:
6c:2e:99:a9:52:61:a1:cf:4a:39:df:ae:6b:81:9c:
80:0d:2c:64:b3:aa:1e:66:66:2d:b6:dd:ba:9c:45:
98:23:ea:e4:69:2f:8e:a2:3d:cb:14:20:b1:86:06:
21:1f:dc:63:ff:5d:0d:c0:b9:4a:e3:ff:32:61:48:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F0:B3:18:0B:B7:A1:AC:8A:01:E1:57:73:27:EF:74:47:F9:EA:4B
X509v3 Authority Key Identifier:
keyid:4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:72:77:be:84:b5:34:88:9e:10:0c:cf:cb:ef:7d:49:e8:08:
9f:2d:95:70:20:1f:4b:4f:d1:f9:28:ab:25:0d:17:a1:3c:65:
16:10:63:59:6b:d4:1b:ed:b1:18:75:45:13:fd:38:22:bd:cc:
08:53:66:3c:8b:a1:1c:15:ff:7f:35:44:df:1b:b3:26:a8:4b:
f9:1b:77:5a:35:fd:9f:85:06:f4:7e:23:96:00:0c:d6:e9:3e:
9f:48:e6:f6:88:85:d1:68:9f:fe:8b:5d:49:5f:30:6f:72:24:
c3:33:f4:c4:97:31:51:14:0a:19:d7:fb:47:55:3b:88:ef:73:
75:5c:6c:47:ee:c8:c3:e6:19:dc:cb:a3:fc:2d:4c:1c:18:b3:
d8:a2:4d:e6:20:89:42:9d:d3:81:98:de:af:79:0c:c6:20:f0:
d3:d9:1b:82:54:c8:5f:ec:f2:53:3a:48:10:78:b5:f9:5a:ec:
a6:92:c2:86:3e:45:a6:df:13:25:41:c1:fc:1f:75:d6:d4:f5:
5b:0e:78:72:35:bd:ed:ca:f9:69:bf:02:77:ea:2e:97:71:9e:
ee:56:30:7b:0f:9b:f2:d7:7d:68:38:a5:9a:78:47:8e:4a:43:
99:35:22:82:2a:02:8b:ad:7a:8e:48:7b:a7:3a:32:f2:86:be:
8f:d0:80:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuPCVaZhKlTT9XsytCfviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNDI2Yzg3ZGZiY2M1NTJkYzc5MGZlYzNlZDFjZGU3YThm
ODg2ZTkwHhcNMjUxMTExMDcwMjE2WhcNMjUxMTEyMDcwMjE2WjAzMTEwLwYDVQQD
EyhkN2YwYjMxODBiYjdhMWFjOGEwMWUxNTc3MzI3ZWY3NDQ3ZjllYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyWi0mRv3zamZhGoTAuRX75JyPfY
iYJMO3QnnOJ69Ow5Z6OnQUQslU98u+caXCcaa/OJacU0rjNlINo9jGl92DAsK3sh
d7vs4+Dq+J+gqvB8T2UdP4K3kajtiSk17VK0RvgJPx2PUEicsuNeeYFxWt7GPcY9
O87E8GbQZI3sbsz1Exdbze6OuKyu88DCVG/bCeFXS5KxWn49kGENUEQsFu5XOLqY
eO9JA6fSJKsxKFC/H9tPcHqW8IB5ohjihYL052JsLpmpUmGhz0o5365rgZyADSxk
s6oeZmYttt26nEWYI+rkaS+Ooj3LFCCxhgYhH9xj/10NwLlK4/8yYUhfXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfwsxgLt6GsigHhV3Mn73RH+epLMB8GA1UdIwQY
MBaAFE5CbIffvMVS3HkP7D7Rzeeo+IbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lNWJkYzctZWIwNi00NjI2LTg0ZDct
MTNkYTc0Y2QzNWE0LzEvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9lNWJkYzctZWIwNi00NjI2LTg0ZDctMTNkYTc0Y2QzNWE0
LzEvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXJ3voS1
NIieEAzPy+99SegIny2VcCAfS0/R+SirJQ0XoTxlFhBjWWvUG+2xGHVFE/04Ir3M
CFNmPIuhHBX/fzVE3xuzJqhL+Rt3WjX9n4UG9H4jlgAM1uk+n0jm9oiF0Wif/otd
SV8wb3IkwzP0xJcxURQKGdf7R1U7iO9zdVxsR+7Iw+YZ3Muj/C1MHBiz2KJN5iCJ
Qp3TgZjer3kMxiDw09kbglTIX+zyUzpIEHi1+VrsppLChj5Fpt8TJUHB/B911tT1
Ww54cjW97cr5ab8Cd+oul3Ge7lYwew+b8td9aDilmnhHjkpDmTUigioCi616jkh7
pzoy8oa+j9CAHA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:23 2025 by rpki-client