Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
File: tRu6i9P6566CScnEYWi6kAI9sZQ.mft (raw, json)
Hash identifier: 2zBLVuIQZieL6mNKEf/dEOkaU1qoslnNZ4uTRRJfP20=
Subject key identifier: CB:09:36:6D:CE:55:09:2B:CE:F1:28:66:89:D1:2F:FD:8E:44:89:46
Authority key identifier: B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
Certificate issuer: /CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Certificate serial: 019A72260D77BFF203E8160E97159D01D48A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 09:01:27 +0000
Manifest this update: Tue 11 Nov 2025 09:01:27 +0000
Manifest next update: Wed 12 Nov 2025 09:01:27 +0000
Files and hashes: 1: tRu6i9P6566CScnEYWi6kAI9sZQ.crl (hash: AGh/1ZD1snBKnx4BuCiWqwB5E6F2gmFpVjcR6MkkgWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:0d:77:bf:f2:03:e8:16:0e:97:15:9d:01:d4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Validity
Not Before: Nov 11 09:01:27 2025 GMT
Not After : Nov 12 09:01:27 2025 GMT
Subject: CN=cb09366dce55092bcef1286689d12ffd8e448946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:c3:40:6e:11:e4:7b:f4:4a:da:7e:95:75:
ad:9d:6e:52:6a:e9:eb:6d:50:78:7e:08:95:df:23:
d9:39:f2:0c:19:d6:eb:01:50:1c:e9:76:32:9f:5f:
dd:f5:cf:52:f6:dc:21:b0:c4:e8:e2:89:86:9a:fe:
d6:62:da:ea:94:ed:7d:58:7a:cd:29:c9:92:88:a1:
c3:99:b6:62:99:e0:8c:da:bb:34:35:2f:e0:6c:bc:
fa:b0:2a:bf:6e:31:e7:a4:9f:09:51:0b:62:7d:54:
98:6c:ef:e0:a5:b5:d4:8e:7e:a3:d3:27:f3:4f:0e:
cd:ff:9d:b1:fe:48:5d:8a:3b:0b:b5:8c:d8:16:48:
91:40:57:61:26:d1:fd:e3:4b:69:e0:6c:11:30:a6:
31:39:83:5b:f3:2f:69:31:77:32:d8:e5:a2:bf:72:
b6:79:9f:13:e1:81:9d:e3:30:f9:37:5c:cf:2b:1a:
2a:2d:0c:90:ca:26:19:ae:d7:22:ef:ac:a5:c7:49:
5c:b5:f4:c4:62:d3:bb:c2:67:8f:77:09:c7:89:8c:
1b:61:73:56:27:65:df:af:62:ec:43:25:68:ec:64:
36:df:87:36:cc:61:c5:45:23:57:9d:90:db:5f:74:
22:ea:0d:2c:d9:3a:b8:7e:1c:40:fd:3c:a9:4a:0c:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:09:36:6D:CE:55:09:2B:CE:F1:28:66:89:D1:2F:FD:8E:44:89:46
X509v3 Authority Key Identifier:
keyid:B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b4:b2:b5:07:5c:34:8a:2f:7c:e7:93:77:ca:06:d4:0a:8e:
e4:0a:3e:6e:02:e5:20:6d:cc:84:da:b0:d3:f9:3b:ae:bd:6b:
d5:0d:d9:5a:95:95:a1:b3:96:d2:80:5e:12:72:6e:e2:79:bc:
fd:13:c9:d2:3a:b2:20:26:ab:99:27:bc:1e:6c:8b:00:0b:3e:
c3:54:3c:83:39:62:4a:72:9e:c0:38:a7:57:43:84:1b:41:dc:
03:44:aa:21:5e:6d:bf:ae:cd:59:9b:ce:53:fd:d2:88:7c:d2:
15:07:27:86:b7:da:bd:03:21:ca:ea:db:0a:fa:77:a1:aa:00:
c8:d1:be:af:5e:3c:ac:f4:c6:4d:37:56:fb:ab:a6:38:12:05:
86:bd:7a:96:d5:fc:16:45:9c:fe:16:b7:9b:9a:7c:d0:a2:47:
10:af:15:08:92:7e:7f:08:4b:86:ed:3d:a7:ea:d9:37:9f:ac:
8d:54:ba:e4:28:50:c1:3f:c9:21:91:8a:ab:f8:65:4b:7f:a9:
6b:0b:c4:ff:5b:2d:93:93:cb:19:9d:ad:a0:15:fd:d7:1b:f7:
11:29:43:91:8a:1a:1e:ac:43:44:04:f0:ac:aa:24:32:a1:d1:
d4:c2:c8:b3:d2:a2:16:5d:96:a2:d5:ce:6e:90:59:b3:66:02:
df:c8:e9:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJg13v/ID6BYOlxWdAdSKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MWJiYThiZDNmYWU3YWU4MjQ5YzljNDYxNjhiYTkwMDIz
ZGIxOTQwHhcNMjUxMTExMDkwMTI3WhcNMjUxMTEyMDkwMTI3WjAzMTEwLwYDVQQD
EyhjYjA5MzY2ZGNlNTUwOTJiY2VmMTI4NjY4OWQxMmZmZDhlNDQ4OTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtADDQG4R5Hv0Stp+lXWtnW5Saunr
bVB4fgiV3yPZOfIMGdbrAVAc6XYyn1/d9c9S9twhsMTo4omGmv7WYtrqlO19WHrN
KcmSiKHDmbZimeCM2rs0NS/gbLz6sCq/bjHnpJ8JUQtifVSYbO/gpbXUjn6j0yfz
Tw7N/52x/khdijsLtYzYFkiRQFdhJtH940tp4GwRMKYxOYNb8y9pMXcy2OWiv3K2
eZ8T4YGd4zD5N1zPKxoqLQyQyiYZrtci76ylx0lctfTEYtO7wmePdwnHiYwbYXNW
J2Xfr2LsQyVo7GQ234c2zGHFRSNXnZDbX3Qi6g0s2Tq4fhxA/TypSgzkoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsJNm3OVQkrzvEoZonRL/2ORIlGMB8GA1UdIwQY
MBaAFLUbuovT+ueugknJxGFoupACPbGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJ1Nmk5UDY1NjZDU2NuRVlXaTZrQUk5c1pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hNWE3NDAtMmJjZS00MzM4LTk5ZDct
NzgyMzEwZTY2NjJkLzEvdFJ1Nmk5UDY1NjZDU2NuRVlXaTZrQUk5c1pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9hNWE3NDAtMmJjZS00MzM4LTk5ZDctNzgyMzEwZTY2NjJk
LzEvdFJ1Nmk5UDY1NjZDU2NuRVlXaTZrQUk5c1pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbSytQdc
NIovfOeTd8oG1AqO5Ao+bgLlIG3MhNqw0/k7rr1r1Q3ZWpWVobOW0oBeEnJu4nm8
/RPJ0jqyICarmSe8HmyLAAs+w1Q8gzliSnKewDinV0OEG0HcA0SqIV5tv67NWZvO
U/3SiHzSFQcnhrfavQMhyurbCvp3oaoAyNG+r148rPTGTTdW+6umOBIFhr16ltX8
FkWc/ha3m5p80KJHEK8VCJJ+fwhLhu09p+rZN5+sjVS65ChQwT/JIZGKq/hlS3+p
awvE/1stk5PLGZ2toBX91xv3ESlDkYoaHqxDRATwrKokMqHR1MLIs9KiFl2WotXO
bpBZs2YC38jp2g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:36 2025 by rpki-client