Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
File: tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft (raw, json)
Hash identifier: U3YctpAzHqHivc6tzXyKEfDddbrIdeNX6AKZ5C6KSmc=
Subject key identifier: 01:C9:D9:10:E5:C2:4F:BA:CE:F1:87:7F:40:B7:04:08:72:A5:9F:A4
Authority key identifier: B6:05:D1:90:1C:57:11:00:B8:9A:5C:48:C3:A7:06:57:84:15:71:96
Certificate issuer: /CN=b605d1901c571100b89a5c48c3a7065784157196
Certificate serial: 019A72258510EB22FA724A089E4842C78482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
Manifest number: 0984
Signing time: Tue 11 Nov 2025 09:00:52 +0000
Manifest this update: Tue 11 Nov 2025 09:00:52 +0000
Manifest next update: Wed 12 Nov 2025 09:00:52 +0000
Files and hashes: 1: tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl (hash: MAEgkvFIYy0PAfnk53k4hMTDx0JllG4Z/ym0F/uJCRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:85:10:eb:22:fa:72:4a:08:9e:48:42:c7:84:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b605d1901c571100b89a5c48c3a7065784157196
Validity
Not Before: Nov 11 09:00:52 2025 GMT
Not After : Nov 12 09:00:52 2025 GMT
Subject: CN=01c9d910e5c24fbacef1877f40b7040872a59fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4e:5e:92:e3:14:8a:12:4e:48:07:3f:0c:fa:
49:52:31:98:58:e6:c3:9c:4a:80:71:9a:2a:2d:2c:
2a:61:4f:b0:77:69:24:26:58:dd:bb:59:f9:8e:6b:
51:8b:6c:1c:d1:bf:8a:f8:44:42:eb:14:bc:69:08:
76:07:09:6b:db:12:cd:93:57:a4:5f:7c:be:0b:5f:
5b:ce:b2:02:d8:a0:63:84:67:7c:f1:18:d8:6b:d8:
1c:b6:ad:cd:df:fe:7a:03:f0:57:b6:27:f4:5c:a3:
0e:bf:f4:9c:bc:9b:ce:3b:08:f7:83:c1:9b:c4:e0:
35:4f:e4:51:ff:59:29:07:ae:a5:a9:e9:79:f7:f0:
a1:c8:92:dd:3f:9a:cb:8c:85:f8:6f:6c:42:28:bc:
6c:bc:01:b5:19:49:4d:2f:86:31:91:4e:cc:78:20:
20:d5:df:37:10:ff:55:04:79:ab:cc:f0:7a:c5:69:
62:52:f7:2b:63:0c:e5:d9:c4:95:67:01:90:f5:75:
ce:a6:16:cb:9a:f7:6b:7b:b6:21:03:74:a1:f6:30:
43:42:7c:c8:81:1d:ba:60:ec:5d:6c:e9:a9:87:98:
97:95:59:11:23:f1:ce:ee:c1:18:25:97:74:11:e0:
ea:4b:d7:0e:fc:5c:74:1b:6e:f6:13:d9:12:e4:86:
b3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C9:D9:10:E5:C2:4F:BA:CE:F1:87:7F:40:B7:04:08:72:A5:9F:A4
X509v3 Authority Key Identifier:
keyid:B6:05:D1:90:1C:57:11:00:B8:9A:5C:48:C3:A7:06:57:84:15:71:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e9:a2:7b:94:3b:fb:7e:a3:91:9b:06:b9:7b:42:49:8c:e9:
17:f1:8a:62:45:21:f6:32:49:70:b2:0c:08:14:12:cb:25:fe:
8a:75:4c:50:1f:87:97:ac:4e:8f:fa:b2:2e:f4:31:2d:23:12:
dc:d9:36:6d:60:ed:d7:a7:49:82:90:ce:2e:b9:0a:03:f1:cb:
11:ce:a0:3d:15:ef:a8:ca:7a:1c:d1:8d:1b:33:5a:f8:07:11:
36:6b:1d:ef:ef:57:9a:a2:4b:ae:83:6c:fd:1d:aa:ed:40:70:
6b:db:7b:56:32:d7:ba:78:d9:ca:90:68:96:3b:1c:03:74:9f:
df:26:1d:19:a4:96:c7:75:2a:08:6d:a0:bf:e7:d1:f0:4a:98:
78:0d:99:96:b6:c9:84:04:db:5f:00:82:c0:65:65:d6:f1:87:
cb:3b:25:27:b4:d3:10:10:5d:fe:1d:d8:fc:65:95:b1:a5:80:
32:ff:43:17:f2:0c:1b:54:f7:e9:0d:44:9b:40:9c:e8:02:dd:
ce:7b:0c:c9:ad:6a:ae:74:0a:88:de:77:24:6f:29:b0:be:b0:
61:5b:86:19:9b:ff:9b:17:2a:e4:9f:e3:7b:cd:00:bd:9b:ad:
7a:26:68:67:53:b2:95:65:e2:78:96:e9:1a:6b:39:54:b1:52:
9e:f9:51:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJYUQ6yL6ckoInkhCx4SCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MDVkMTkwMWM1NzExMDBiODlhNWM0OGMzYTcwNjU3ODQx
NTcxOTYwHhcNMjUxMTExMDkwMDUyWhcNMjUxMTEyMDkwMDUyWjAzMTEwLwYDVQQD
EygwMWM5ZDkxMGU1YzI0ZmJhY2VmMTg3N2Y0MGI3MDQwODcyYTU5ZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U5ekuMUihJOSAc/DPpJUjGYWObD
nEqAcZoqLSwqYU+wd2kkJljdu1n5jmtRi2wc0b+K+ERC6xS8aQh2Bwlr2xLNk1ek
X3y+C19bzrIC2KBjhGd88RjYa9gctq3N3/56A/BXtif0XKMOv/ScvJvOOwj3g8Gb
xOA1T+RR/1kpB66lqel59/ChyJLdP5rLjIX4b2xCKLxsvAG1GUlNL4YxkU7MeCAg
1d83EP9VBHmrzPB6xWliUvcrYwzl2cSVZwGQ9XXOphbLmvdre7YhA3Sh9jBDQnzI
gR26YOxdbOmph5iXlVkRI/HO7sEYJZd0EeDqS9cO/Fx0G272E9kS5IazGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHJ2RDlwk+6zvGHf0C3BAhypZ+kMB8GA1UdIwQY
MBaAFLYF0ZAcVxEAuJpcSMOnBleEFXGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGdYUmtCeFhFUUM0bWx4SXc2Y0dWNFFWY1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85MDA4MGEtMzEyZS00N2QzLWI2Y2Et
ZThlYzA1YzkzMjdkLzEvdGdYUmtCeFhFUUM0bWx4SXc2Y0dWNFFWY1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85MDA4MGEtMzEyZS00N2QzLWI2Y2EtZThlYzA1YzkzMjdk
LzEvdGdYUmtCeFhFUUM0bWx4SXc2Y0dWNFFWY1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOmie5Q7
+36jkZsGuXtCSYzpF/GKYkUh9jJJcLIMCBQSyyX+inVMUB+Hl6xOj/qyLvQxLSMS
3Nk2bWDt16dJgpDOLrkKA/HLEc6gPRXvqMp6HNGNGzNa+AcRNmsd7+9XmqJLroNs
/R2q7UBwa9t7VjLXunjZypBoljscA3Sf3yYdGaSWx3UqCG2gv+fR8EqYeA2ZlrbJ
hATbXwCCwGVl1vGHyzslJ7TTEBBd/h3Y/GWVsaWAMv9DF/IMG1T36Q1Em0Cc6ALd
znsMya1qrnQKiN53JG8psL6wYVuGGZv/mxcq5J/je80AvZuteiZoZ1OylWXieJbp
Gms5VLFSnvlROA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:39:12 2025 by rpki-client