Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: +iPY7fVV7obiS6inv6hWOBIsas6Jn8I6j723r8//K/4=
Subject key identifier: F4:1A:59:1B:31:EE:E5:98:20:37:83:18:18:AB:0E:F9:A9:31:E8:22
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 019A71B79F66D0FA3DB0AEC48F3B051B96DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 172E
Signing time: Tue 11 Nov 2025 07:00:50 +0000
Manifest this update: Tue 11 Nov 2025 07:00:50 +0000
Manifest next update: Wed 12 Nov 2025 07:00:50 +0000
Files and hashes: 1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: IkK2Xb4F9d96AIGsb2mt7yaEKvNvOE4UUwD0B/XYff0=)
2: fpKUqxxKUPc_O5n9wxHsQg8T_FY.roa (hash: OrgW5t1N1aQKAHTjeWlGlcEAJmvI2Q1WBkLpeJc3hPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9f:66:d0:fa:3d:b0:ae:c4:8f:3b:05:1b:96:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Nov 11 07:00:50 2025 GMT
Not After : Nov 12 07:00:50 2025 GMT
Subject: CN=f41a591b31eee5982037831818ab0ef9a931e822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:a4:90:6d:82:33:01:2c:4f:17:5e:ae:19:
45:c2:c0:95:80:4d:13:f7:5e:51:21:1b:57:ec:09:
30:ea:7b:15:d5:dc:dc:f0:24:1b:4a:d3:10:5a:c3:
22:26:2b:76:44:11:c0:8e:f5:4e:2d:9a:7b:6c:91:
92:63:80:62:02:80:b2:ff:ea:e4:5b:e4:72:7c:d3:
c5:4e:71:6f:5b:d4:83:8c:3a:49:a1:c1:b8:02:23:
01:5a:6e:18:c9:bf:db:a5:24:5f:6a:2b:65:a3:28:
eb:ae:d6:8f:69:8a:70:e9:5a:a3:4b:de:0d:79:ac:
0f:1b:cb:79:b9:e0:bc:33:e1:b7:3a:f5:66:09:1c:
c0:d4:e6:35:3d:db:20:d2:54:dd:5a:72:b8:d9:5c:
9c:cc:61:a2:ff:48:e3:7e:e3:0b:10:a4:c2:95:89:
31:e6:37:a8:30:02:08:ac:7c:26:81:d6:ff:ca:dd:
c2:24:a1:36:09:81:70:90:fa:46:57:61:22:90:1d:
96:ea:e1:4e:b9:08:36:87:83:95:0a:10:7a:01:18:
25:e2:bf:7c:bb:86:60:5c:85:b9:91:cf:79:a0:7a:
2d:2b:87:f0:a0:70:f2:1b:89:52:b9:37:a0:b7:41:
cd:23:6a:9b:19:5a:63:48:f1:28:ac:24:54:d0:4d:
53:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1A:59:1B:31:EE:E5:98:20:37:83:18:18:AB:0E:F9:A9:31:E8:22
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:54:f5:26:00:3b:a6:1c:c8:f0:3b:db:a1:02:8e:ec:44:dc:
17:03:c3:99:8b:6a:b4:c5:84:cc:53:1e:13:8b:06:a8:a9:fe:
bd:c9:0a:1c:85:22:76:b0:46:d2:eb:75:ed:6f:b5:c3:c5:26:
81:b0:ad:3f:24:ee:fb:72:58:a9:ae:e2:45:2a:d2:e4:7a:ec:
fb:be:18:a1:f6:dc:c6:43:8a:63:8b:94:fc:d3:cb:60:1b:a5:
80:13:85:de:f8:a0:c7:f1:27:86:de:8b:ff:42:05:f1:27:ce:
19:0c:92:f8:2f:10:ee:33:10:f2:6b:5d:86:78:62:5f:6d:4a:
10:58:83:45:8c:f7:23:d9:06:03:05:35:f3:48:6d:cb:ce:9b:
44:ab:53:a4:a2:3a:26:d1:0b:0f:50:c3:77:86:e6:b5:3d:59:
ad:ff:b7:9c:c4:8f:17:15:5e:f5:12:95:86:28:0d:dd:f7:e7:
55:08:1d:e1:32:ad:71:c2:b3:05:cc:10:3f:07:f8:55:f2:a4:
82:37:ee:d4:cc:4b:66:ba:c4:1a:05:f8:0c:70:9a:29:24:5e:
8f:5c:5d:f8:7f:23:44:5a:0b:a6:ec:a5:f3:10:26:e3:a5:20:
22:5f:2e:90:9f:63:83:a8:f3:28:9d:93:82:81:4c:61:17:92:
7a:c2:3f:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt59m0Po9sK7EjzsFG5bfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNTE0NmJiNGUyMTk3NDRmNThjMjY4ZTllYzYyMWMxOGRk
MjI5YzMwHhcNMjUxMTExMDcwMDUwWhcNMjUxMTEyMDcwMDUwWjAzMTEwLwYDVQQD
EyhmNDFhNTkxYjMxZWVlNTk4MjAzNzgzMTgxOGFiMGVmOWE5MzFlODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNqkkG2CMwEsTxderhlFwsCVgE0T
915RIRtX7Akw6nsV1dzc8CQbStMQWsMiJit2RBHAjvVOLZp7bJGSY4BiAoCy/+rk
W+RyfNPFTnFvW9SDjDpJocG4AiMBWm4Yyb/bpSRfaitloyjrrtaPaYpw6VqjS94N
eawPG8t5ueC8M+G3OvVmCRzA1OY1Pdsg0lTdWnK42VyczGGi/0jjfuMLEKTClYkx
5jeoMAIIrHwmgdb/yt3CJKE2CYFwkPpGV2EikB2W6uFOuQg2h4OVChB6ARgl4r98
u4ZgXIW5kc95oHotK4fwoHDyG4lSuTegt0HNI2qbGVpjSPEorCRU0E1TfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQaWRsx7uWYIDeDGBirDvmpMegiMB8GA1UdIwQY
MBaAFE5RRrtOIZdE9Ywmjp7GIcGN0inDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yNWI1NGEtZTc3MC00NGFiLWEwMDQt
YzkyMGM1MTdkNjAwLzEvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yNWI1NGEtZTc3MC00NGFiLWEwMDQtYzkyMGM1MTdkNjAw
LzEvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlT1JgA7
phzI8DvboQKO7ETcFwPDmYtqtMWEzFMeE4sGqKn+vckKHIUidrBG0ut17W+1w8Um
gbCtPyTu+3JYqa7iRSrS5Hrs+74YofbcxkOKY4uU/NPLYBulgBOF3vigx/Enht6L
/0IF8SfOGQyS+C8Q7jMQ8mtdhnhiX21KEFiDRYz3I9kGAwU180hty86bRKtTpKI6
JtELD1DDd4bmtT1Zrf+3nMSPFxVe9RKVhigN3ffnVQgd4TKtccKzBcwQPwf4VfKk
gjfu1MxLZrrEGgX4DHCaKSRej1xd+H8jRFoLpuyl8xAm46UgIl8ukJ9jg6jzKJ2T
goFMYReSesI/JA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:15 2025 by rpki-client