Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
File: Tb6Htwra566IC0Zwv6B46QmE1mA.mft (raw, json)
Hash identifier: VZX2CHMXjtDjvlwZf/o502gcrRjKJP91rZ81eM2Td0o=
Subject key identifier: AC:1B:24:04:B5:B1:5B:8F:A6:F9:4B:34:E6:14:1B:46:9C:D8:40:F4
Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
Certificate issuer: /CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Certificate serial: 019A725C51E6FE990DEC33DA6026A1A07F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
Manifest number: 1146
Signing time: Tue 11 Nov 2025 10:00:44 +0000
Manifest this update: Tue 11 Nov 2025 10:00:44 +0000
Manifest next update: Wed 12 Nov 2025 10:00:44 +0000
Files and hashes: 1: Tb6Htwra566IC0Zwv6B46QmE1mA.crl (hash: KxglZpVTt+n8XyzWLP8dkhchvg5ni1X0INv2YrZc8ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:51:e6:fe:99:0d:ec:33:da:60:26:a1:a0:7f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Validity
Not Before: Nov 11 10:00:44 2025 GMT
Not After : Nov 12 10:00:44 2025 GMT
Subject: CN=ac1b2404b5b15b8fa6f94b34e6141b469cd840f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:cb:14:62:bb:58:9e:68:26:a9:92:21:f3:
da:b9:51:97:d0:94:ff:06:dc:47:78:b3:ec:b7:82:
9b:57:c3:6b:c1:73:07:04:5a:ed:74:82:72:90:ba:
00:83:49:6b:02:d2:a2:8a:0a:d9:8c:e8:59:e7:80:
f7:67:28:95:db:9a:cd:b8:a8:7c:0e:63:61:d5:9f:
27:f0:92:01:c2:88:c4:65:f5:78:68:30:95:f7:02:
7a:dc:b0:c3:53:5b:05:36:c9:ec:ca:6c:32:92:df:
fc:25:91:e4:5c:03:88:84:b8:5a:b3:d6:98:b8:2d:
85:6b:0c:94:53:40:d1:f6:51:79:c4:18:11:dd:c7:
74:32:f8:67:03:4b:97:72:4f:f9:5d:08:fd:d5:7f:
65:11:79:6f:c1:97:98:64:4b:8d:24:91:df:ef:0b:
29:3d:4a:f5:97:52:df:ad:98:75:e1:e9:fc:e6:99:
f2:87:1c:23:b6:a4:9d:04:1a:0c:53:af:d7:27:6d:
d2:5b:48:38:c0:39:b3:68:5d:2f:76:47:7e:70:ab:
a8:6d:da:5a:f3:48:bb:5c:91:2a:dd:f9:10:a2:c5:
d6:5e:74:e5:d3:66:4b:da:9a:f7:01:e2:46:0b:cc:
3b:99:02:10:04:06:32:2f:1c:02:80:0f:1b:8d:20:
32:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1B:24:04:B5:B1:5B:8F:A6:F9:4B:34:E6:14:1B:46:9C:D8:40:F4
X509v3 Authority Key Identifier:
keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4a:c2:f1:cc:e2:a4:14:60:d4:75:fa:04:bf:1f:c2:fc:46:
25:eb:62:5e:91:2f:96:83:f5:29:c2:b3:62:a7:44:44:5e:d4:
b7:2b:48:ab:e0:41:78:14:2a:0c:39:3a:25:b8:25:1e:fc:a8:
9c:24:c0:33:2d:d7:65:ff:90:c8:9c:0c:06:7a:0e:5a:bd:9d:
0f:c1:b6:bf:38:80:c0:20:f4:f9:25:9a:a6:77:5f:e8:f6:6e:
a7:82:fa:55:95:91:ad:8a:3e:7c:51:df:e2:cc:ec:7e:cf:ec:
f9:2b:a0:cc:06:e7:28:4f:f4:fa:b0:3b:bb:6c:68:6f:88:af:
ba:4c:89:3c:52:23:5f:42:65:97:95:65:7a:32:13:9a:fe:7a:
d9:e5:0e:da:09:c1:bc:de:2b:ce:65:d9:47:c6:b4:2f:ad:1e:
76:1f:b1:98:ec:ab:db:5d:cd:67:e1:67:25:a2:2a:d5:51:15:
02:47:60:62:66:08:4b:63:43:a0:f4:f1:9d:8b:3e:0d:ec:b0:
d9:7e:dc:1d:42:0f:e0:8c:3e:11:c1:bc:53:0e:a7:77:f0:ea:
6c:11:3e:05:71:24:2a:23:d2:c8:39:ac:da:3e:40:b8:10:e7:
19:a9:23:06:b8:2f:e2:f8:a5:f0:bd:46:dd:be:c4:df:6f:a5:
8f:3e:e3:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXFHm/pkN7DPaYCahoH8jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYmU4N2I3MGFkYWU3YWU4ODBiNDY3MGJmYTA3OGU5MDk4
NGQ2NjAwHhcNMjUxMTExMTAwMDQ0WhcNMjUxMTEyMTAwMDQ0WjAzMTEwLwYDVQQD
EyhhYzFiMjQwNGI1YjE1YjhmYTZmOTRiMzRlNjE0MWI0NjljZDg0MGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOfLFGK7WJ5oJqmSIfPauVGX0JT/
BtxHeLPst4KbV8NrwXMHBFrtdIJykLoAg0lrAtKiigrZjOhZ54D3ZyiV25rNuKh8
DmNh1Z8n8JIBwojEZfV4aDCV9wJ63LDDU1sFNsnsymwykt/8JZHkXAOIhLhas9aY
uC2FawyUU0DR9lF5xBgR3cd0MvhnA0uXck/5XQj91X9lEXlvwZeYZEuNJJHf7wsp
PUr1l1LfrZh14en85pnyhxwjtqSdBBoMU6/XJ23SW0g4wDmzaF0vdkd+cKuobdpa
80i7XJEq3fkQosXWXnTl02ZL2pr3AeJGC8w7mQIQBAYyLxwCgA8bjSAyoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwbJAS1sVuPpvlLNOYUG0ac2ED0MB8GA1UdIwQY
MBaAFE2+h7cK2ueuiAtGcL+geOkJhNZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5Yjct
YWM1YTI5N2Y5YmE0LzEvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5YjctYWM1YTI5N2Y5YmE0
LzEvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkrC8czi
pBRg1HX6BL8fwvxGJetiXpEvloP1KcKzYqdERF7UtytIq+BBeBQqDDk6JbglHvyo
nCTAMy3XZf+QyJwMBnoOWr2dD8G2vziAwCD0+SWapndf6PZup4L6VZWRrYo+fFHf
4szsfs/s+SugzAbnKE/0+rA7u2xob4ivukyJPFIjX0Jll5VlejITmv562eUO2gnB
vN4rzmXZR8a0L60edh+xmOyr213NZ+FnJaIq1VEVAkdgYmYIS2NDoPTxnYs+Deyw
2X7cHUIP4Iw+EcG8Uw6nd/DqbBE+BXEkKiPSyDms2j5AuBDnGakjBrgv4vil8L1G
3b7E32+ljz7jyw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:52 2025 by rpki-client