Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
File: Tchxtd3wdAsxfR4042smgQu5gCY.mft (raw, json)
Hash identifier: ZMUCGcoLECYu9r++wNAVMI0PMlDUdJeiDKMq57SeEqA=
Subject key identifier: D5:87:60:1A:6A:8C:48:78:6A:01:E9:9D:88:D0:7E:FE:7F:51:D6:26
Authority key identifier: 4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
Certificate issuer: /CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Certificate serial: 019A29D4E868CC7B152B1F891CD420A75157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
Manifest number: 09CB
Signing time: Tue 28 Oct 2025 08:00:10 +0000
Manifest this update: Tue 28 Oct 2025 08:00:10 +0000
Manifest next update: Wed 29 Oct 2025 08:00:10 +0000
Files and hashes: 1: Tchxtd3wdAsxfR4042smgQu5gCY.crl (hash: 2GK0pZNonTsddMh+u+ANLktBMeNDGNkOiQhS0B9RuyY=)
2: paYxpLOj5q1m1CkvSIrYuNJXnfY.roa (hash: oASY8mwNlrx1vBXDbDUsEVfC2Mdva3sHjU/P5M6cgKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d4:e8:68:cc:7b:15:2b:1f:89:1c:d4:20:a7:51:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Validity
Not Before: Oct 28 08:00:10 2025 GMT
Not After : Oct 29 08:00:10 2025 GMT
Subject: CN=d587601a6a8c48786a01e99d88d07efe7f51d626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:78:7a:1c:ba:5d:30:a3:13:2f:ee:14:1b:
06:e7:8c:94:a7:5d:e9:ee:ba:0d:a7:7e:d0:14:a3:
6b:35:ff:a1:b6:4a:ac:01:ce:49:6b:d3:eb:ef:a0:
e8:e0:38:8d:86:46:c0:6d:4e:98:c7:76:4a:38:12:
d4:f5:e8:d5:b2:69:16:51:b1:84:96:b5:47:c8:e1:
62:cc:f3:8e:c5:96:1d:8e:46:18:dc:41:1a:4c:12:
49:0b:5f:9b:e1:82:12:cf:c2:33:75:ab:cb:ad:ee:
0a:8c:77:01:35:40:01:89:67:16:92:bb:60:f7:75:
7f:a0:fa:15:98:72:00:eb:a6:c0:72:28:a6:8e:87:
4b:ee:4b:da:15:92:2c:c7:ba:43:b9:68:65:aa:c2:
de:a2:ba:8b:2e:cd:2e:99:6a:77:8f:29:79:8a:dc:
03:50:f8:2b:83:64:f0:41:91:1c:bf:63:64:95:7d:
ec:a2:69:79:93:a6:0f:27:5d:15:a3:e2:02:ba:84:
de:33:bf:f9:f5:7c:22:3d:f3:9c:06:27:d1:e6:dc:
d5:eb:49:ea:83:99:52:90:13:cd:90:e9:4f:73:70:
dd:34:01:ee:8e:66:08:38:4b:66:b8:77:46:3a:db:
1c:c2:3d:f2:25:90:47:b5:78:4f:61:cd:28:67:a2:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:87:60:1A:6A:8C:48:78:6A:01:E9:9D:88:D0:7E:FE:7F:51:D6:26
X509v3 Authority Key Identifier:
keyid:4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7b:2b:d2:90:29:a6:c3:9f:b5:74:01:46:2d:bf:25:35:72:
96:e2:78:7c:43:1d:f2:9e:80:14:a6:49:f3:6f:12:ef:a7:d9:
78:b7:8c:a0:88:53:d0:f3:31:67:be:a5:61:28:70:2e:3a:61:
ec:7a:57:35:45:33:5d:fa:10:75:5c:f6:70:54:af:12:52:1f:
f8:25:cd:21:b9:ce:8e:41:f4:27:c9:27:2b:f9:07:66:36:fc:
be:c5:11:79:cd:4f:4e:02:78:0c:93:ad:53:f8:26:c3:bd:1c:
b6:f1:a8:46:aa:b5:d4:5c:bf:84:9f:44:56:59:ea:7a:95:39:
cc:15:17:c3:7a:36:69:57:42:21:06:bc:82:de:d0:d7:c7:81:
af:e2:a7:90:dd:7d:40:24:0c:fd:33:c2:8e:90:20:7b:db:eb:
b9:03:11:4e:d1:31:03:49:56:a3:b7:28:2c:57:2b:72:19:29:
c4:0e:d3:2e:08:2c:f7:0e:6f:42:4c:68:7f:4d:e8:63:a6:d5:
3e:38:df:e1:e8:08:47:27:8f:5b:68:78:e7:a4:c0:75:c3:d0:
99:01:41:12:1f:14:0f:58:1e:87:db:29:8c:46:69:4e:9e:a9:
2b:b3:b8:e7:44:a7:2f:21:b6:57:35:20:12:10:af:84:35:f3:
70:ad:9a:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZop1OhozHsVKx+JHNQgp1FXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYzg3MWI1ZGRmMDc0MGIzMTdkMWUzNGUzNmIyNjgxMGJi
OTgwMjYwHhcNMjUxMDI4MDgwMDEwWhcNMjUxMDI5MDgwMDEwWjAzMTEwLwYDVQQD
EyhkNTg3NjAxYTZhOGM0ODc4NmEwMWU5OWQ4OGQwN2VmZTdmNTFkNjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqup4ehy6XTCjEy/uFBsG54yUp13p
7roNp37QFKNrNf+htkqsAc5Ja9Pr76Do4DiNhkbAbU6Yx3ZKOBLU9ejVsmkWUbGE
lrVHyOFizPOOxZYdjkYY3EEaTBJJC1+b4YISz8IzdavLre4KjHcBNUABiWcWkrtg
93V/oPoVmHIA66bAciimjodL7kvaFZIsx7pDuWhlqsLeorqLLs0umWp3jyl5itwD
UPgrg2TwQZEcv2NklX3soml5k6YPJ10Vo+ICuoTeM7/59XwiPfOcBifR5tzV60nq
g5lSkBPNkOlPc3DdNAHujmYIOEtmuHdGOtscwj3yJZBHtXhPYc0oZ6Im/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWHYBpqjEh4agHpnYjQfv5/UdYmMB8GA1UdIwQY
MBaAFE3IcbXd8HQLMX0eNONrJoELuYAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGNoeHRkM3dkQXN4ZlI0MDQyc21nUXU1Z0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zNTVlZmItMjZiMC00MTEyLWI0YjUt
OTNjMjk2NDBiYmZlLzEvVGNoeHRkM3dkQXN4ZlI0MDQyc21nUXU1Z0NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8zNTVlZmItMjZiMC00MTEyLWI0YjUtOTNjMjk2NDBiYmZl
LzEvVGNoeHRkM3dkQXN4ZlI0MDQyc21nUXU1Z0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3sr0pAp
psOftXQBRi2/JTVyluJ4fEMd8p6AFKZJ828S76fZeLeMoIhT0PMxZ76lYShwLjph
7HpXNUUzXfoQdVz2cFSvElIf+CXNIbnOjkH0J8knK/kHZjb8vsURec1PTgJ4DJOt
U/gmw70ctvGoRqq11Fy/hJ9EVlnqepU5zBUXw3o2aVdCIQa8gt7Q18eBr+KnkN19
QCQM/TPCjpAge9vruQMRTtExA0lWo7coLFcrchkpxA7TLggs9w5vQkxof03oY6bV
Pjjf4egIRyePW2h456TAdcPQmQFBEh8UD1geh9spjEZpTp6pK7O450SnLyG2VzUg
EhCvhDXzcK2aHg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 16:21:43 2025 by rpki-client