Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
File: tme4cki-Ko4zew55BX2JQHmMd5o.mft (raw, json)
Hash identifier: SfErd1ZlD8oLtNDvUn7uPjTeGbtLVkxQaCqi+rgn38A=
Subject key identifier: 70:72:A1:72:4B:50:35:37:2C:89:8C:32:2A:25:8A:9E:B9:0A:98:65
Authority key identifier: B6:67:B8:72:48:BE:2A:8E:33:7B:0E:79:05:7D:89:40:79:8C:77:9A
Certificate issuer: /CN=b667b87248be2a8e337b0e79057d8940798c779a
Certificate serial: 019A725CB24A968704260E733C2E27A9E3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
Manifest number: 044E
Signing time: Tue 11 Nov 2025 10:01:08 +0000
Manifest this update: Tue 11 Nov 2025 10:01:08 +0000
Manifest next update: Wed 12 Nov 2025 10:01:08 +0000
Files and hashes: 1: tme4cki-Ko4zew55BX2JQHmMd5o.crl (hash: aZWT0a4W/F1C6mtes2+0q+DWH2EX5xJJ73eWEvHdpkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b2:4a:96:87:04:26:0e:73:3c:2e:27:a9:e3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b667b87248be2a8e337b0e79057d8940798c779a
Validity
Not Before: Nov 11 10:01:08 2025 GMT
Not After : Nov 12 10:01:08 2025 GMT
Subject: CN=7072a1724b5035372c898c322a258a9eb90a9865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:f4:6d:d6:4f:b2:c6:2c:c7:ad:c5:b0:16:
b0:38:0e:4c:c1:86:93:c2:a3:54:f9:59:04:9e:45:
39:6c:68:4b:5f:f9:97:2e:b2:74:a2:f9:42:45:c8:
8e:0e:ef:be:d6:09:13:fd:74:ca:4e:00:7c:81:50:
83:d8:6a:06:f6:9b:6b:4a:dd:4b:6a:0d:f5:f8:08:
c1:54:bb:30:cd:42:94:e0:b2:54:bd:68:08:9e:e8:
a8:e8:cb:35:bd:e9:51:cc:8b:0b:79:21:b7:3f:92:
b7:2e:f0:2a:ad:10:4c:92:37:c7:1e:c3:b5:d3:8f:
fc:8b:b9:fc:53:d3:5c:f4:a7:fa:14:e9:6f:74:5e:
e9:ca:99:f4:e2:4e:8a:f6:01:87:b9:5c:ba:f0:2d:
a8:2a:3e:f6:22:29:48:dd:b6:18:2b:33:ff:7b:0b:
61:05:08:61:30:92:f5:46:c6:bb:a3:f1:76:ea:ab:
2b:c2:91:4d:82:1b:d1:59:d6:f5:c0:c3:4f:75:9f:
60:f7:bd:13:cd:04:9d:17:97:6a:c1:05:ab:48:7b:
45:31:7e:09:e0:74:89:a7:0f:6e:bd:82:07:f4:eb:
ca:d8:c9:ef:3f:56:d9:5b:c1:e5:88:b8:5d:df:03:
4a:bc:a0:75:b5:cd:fb:c1:8d:b7:aa:5e:04:b9:51:
64:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:72:A1:72:4B:50:35:37:2C:89:8C:32:2A:25:8A:9E:B9:0A:98:65
X509v3 Authority Key Identifier:
keyid:B6:67:B8:72:48:BE:2A:8E:33:7B:0E:79:05:7D:89:40:79:8C:77:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:90:cb:c9:11:a3:eb:0a:cb:29:ce:e2:91:7c:1f:2d:37:32:
aa:1f:9b:38:63:e1:72:ce:f7:9d:ba:64:bf:23:28:a1:46:d8:
59:4c:28:14:57:fc:34:cb:aa:d0:4f:e7:71:2d:ee:f6:89:c0:
22:f4:e4:f8:33:40:5b:7b:05:a9:dd:ad:4f:af:08:dc:66:b6:
29:35:fc:84:87:e1:e9:3c:4c:00:78:52:d5:77:d8:d2:93:61:
fe:bd:a3:e8:a8:2e:b4:eb:1b:a9:8a:6d:7b:01:04:df:43:28:
96:0a:72:9d:f6:ff:e9:fe:e8:a4:50:80:58:51:e0:0e:18:97:
84:49:c7:50:a8:d8:bc:d5:2b:af:cd:20:02:7b:d4:95:7d:4f:
f4:df:d7:86:9a:5c:8e:36:3f:89:5a:36:77:a1:39:dc:54:1f:
c2:50:ef:2c:93:fb:88:e4:92:63:d2:c0:12:5a:75:07:b3:b0:
8d:2d:47:11:6d:9b:a7:1a:4a:19:a0:a1:ad:33:46:60:f0:67:
12:e2:52:03:a5:db:ab:2e:4a:28:08:57:15:05:1f:c5:5e:9b:
9f:ba:05:16:09:ed:c5:34:46:99:8a:88:90:a5:36:40:ea:a5:
96:77:0f:fc:ac:f3:73:2e:1b:e2:10:79:43:39:61:65:ed:a6:
45:ba:6e:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXLJKlocEJg5zPC4nqePgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NjdiODcyNDhiZTJhOGUzMzdiMGU3OTA1N2Q4OTQwNzk4
Yzc3OWEwHhcNMjUxMTExMTAwMTA4WhcNMjUxMTEyMTAwMTA4WjAzMTEwLwYDVQQD
Eyg3MDcyYTE3MjRiNTAzNTM3MmM4OThjMzIyYTI1OGE5ZWI5MGE5ODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9r0bdZPssYsx63FsBawOA5MwYaT
wqNU+VkEnkU5bGhLX/mXLrJ0ovlCRciODu++1gkT/XTKTgB8gVCD2GoG9ptrSt1L
ag31+AjBVLswzUKU4LJUvWgInuio6Ms1velRzIsLeSG3P5K3LvAqrRBMkjfHHsO1
04/8i7n8U9Nc9Kf6FOlvdF7pypn04k6K9gGHuVy68C2oKj72IilI3bYYKzP/ewth
BQhhMJL1Rsa7o/F26qsrwpFNghvRWdb1wMNPdZ9g970TzQSdF5dqwQWrSHtFMX4J
4HSJpw9uvYIH9OvK2MnvP1bZW8HliLhd3wNKvKB1tc37wY23ql4EuVFkXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHByoXJLUDU3LImMMiolip65CphlMB8GA1UdIwQY
MBaAFLZnuHJIviqOM3sOeQV9iUB5jHeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG1lNGNraS1LbzR6ZXc1NUJYMkpRSG1NZDVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hZDIyNzMtZmE1Yy00N2Q5LThjM2Ut
OGM5MmIzODBhZTU4LzEvdG1lNGNraS1LbzR6ZXc1NUJYMkpRSG1NZDVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9hZDIyNzMtZmE1Yy00N2Q5LThjM2UtOGM5MmIzODBhZTU4
LzEvdG1lNGNraS1LbzR6ZXc1NUJYMkpRSG1NZDVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5DLyRGj
6wrLKc7ikXwfLTcyqh+bOGPhcs73nbpkvyMooUbYWUwoFFf8NMuq0E/ncS3u9onA
IvTk+DNAW3sFqd2tT68I3Ga2KTX8hIfh6TxMAHhS1XfY0pNh/r2j6KgutOsbqYpt
ewEE30Molgpynfb/6f7opFCAWFHgDhiXhEnHUKjYvNUrr80gAnvUlX1P9N/Xhppc
jjY/iVo2d6E53FQfwlDvLJP7iOSSY9LAElp1B7OwjS1HEW2bpxpKGaChrTNGYPBn
EuJSA6Xbqy5KKAhXFQUfxV6bn7oFFgntxTRGmYqIkKU2QOqllncP/Kzzcy4b4hB5
QzlhZe2mRbpurw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:01 2025 by rpki-client