Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
File: TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft (raw, json)
Hash identifier: UeUnxlbn/sZ6SJoVWiOSLrXBpd+PnRc0kMHGfRvWD/k=
Subject key identifier: CC:18:4A:36:D1:CB:39:63:1A:4C:A2:43:32:D2:02:D9:50:18:02:0B
Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
Certificate issuer: /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Certificate serial: 019A7293D834BF4D2F33FEC98908D125E62A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
Manifest number: 12D4
Signing time: Tue 11 Nov 2025 11:01:23 +0000
Manifest this update: Tue 11 Nov 2025 11:01:23 +0000
Manifest next update: Wed 12 Nov 2025 11:01:23 +0000
Files and hashes: 1: TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl (hash: s/1cUnyMBSVsacHTCMFpDVeB9/+M2qiqar3/EAHwqS4=)
2: j-betU5F3fuYYNREFl5I-_t74ng.roa (hash: ThVTYZ7pBXxFoxAK1y8K2Bay/CDdSEmxPkT01D83Maw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d8:34:bf:4d:2f:33:fe:c9:89:08:d1:25:e6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Validity
Not Before: Nov 11 11:01:23 2025 GMT
Not After : Nov 12 11:01:23 2025 GMT
Subject: CN=cc184a36d1cb39631a4ca24332d202d95018020b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:ee:9b:9c:85:aa:71:d8:9e:ff:0a:06:6c:
bb:5b:6d:cd:34:68:2d:2a:a5:4a:73:52:33:95:4d:
6b:e7:24:c6:98:c1:54:ca:92:6b:7c:70:da:ae:4c:
6c:bb:49:f2:05:3e:a8:d0:02:a9:c8:63:86:34:5e:
a0:94:13:d0:ae:01:4d:65:af:b9:3d:d7:b6:c2:55:
c4:fb:9a:66:3c:38:2b:05:1f:78:04:a5:50:e2:42:
e3:95:65:21:7c:cc:32:4e:36:58:4e:96:f2:e1:df:
29:6b:fb:bf:82:9d:94:31:c5:e1:07:13:0d:c2:74:
f1:ec:29:92:82:fd:16:47:da:33:af:0b:05:cb:df:
b7:e4:62:50:9d:3b:fe:d4:82:e8:71:92:4d:49:82:
1d:8b:1d:2a:1c:62:c1:83:22:74:5a:8b:f7:12:86:
cc:2a:e7:0f:d7:2d:36:c2:93:57:07:97:c7:52:97:
ed:ae:58:d1:fd:3e:fc:64:e8:2a:d2:ed:c6:47:a0:
46:8c:51:ce:cf:5d:aa:10:a3:45:43:a0:ce:54:32:
a1:53:1d:5d:e5:0b:ec:f8:59:d2:77:8f:2a:e8:f9:
97:59:2d:bc:f4:d7:2e:f3:25:4c:2e:34:db:22:75:
c5:d7:b3:ff:2a:14:9a:ba:51:80:d0:e1:8f:20:98:
2a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:18:4A:36:D1:CB:39:63:1A:4C:A2:43:32:D2:02:D9:50:18:02:0B
X509v3 Authority Key Identifier:
keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5c:3c:04:80:e4:bf:ef:f9:53:7c:7b:d3:23:25:4a:0b:19:
db:5d:80:57:88:89:18:32:73:bf:49:dc:24:2c:fd:d7:84:07:
de:e4:92:7a:6f:87:78:80:d6:61:9b:95:71:ce:1f:c3:7c:8d:
d1:8d:63:ad:b1:60:19:aa:c8:25:0e:35:d7:52:4a:df:e0:dd:
4e:29:57:be:d9:bb:9d:27:cd:57:92:d6:63:19:03:2a:bf:df:
1d:be:06:5e:7e:72:88:db:49:df:4d:d4:39:62:6e:82:09:f3:
d9:7e:e1:75:bf:57:e1:90:55:71:32:ea:15:b8:08:28:63:1d:
a5:b1:0e:7e:79:8e:4c:7b:64:61:cb:ae:d7:73:bf:de:bf:99:
7a:ca:66:a4:d1:cd:cd:9e:22:48:48:cf:98:5e:13:2a:7b:0e:
4b:a7:a3:44:ab:35:3f:3d:15:5c:e0:23:7e:65:d9:0d:0f:ed:
10:ff:d6:ea:37:f7:9c:80:d4:61:92:65:bd:5a:e5:7f:d4:09:
c0:b9:1f:eb:92:4b:dc:1a:e0:cf:e6:69:0e:e2:c2:d7:c4:af:
75:d5:24:00:4c:7d:2f:bf:5b:2c:6f:bb:0d:4e:fa:a4:f2:d9:
cc:0b:b0:6f:08:2a:11:ad:ad:a9:e0:0c:bb:38:f1:cf:16:ba:
d1:bb:4f:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk9g0v00vM/7JiQjRJeYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYjkzMmJjNjBlOWZkMTE4NmY4ZmE2YmQ3MTNjMjA3Mjlh
ZTczZWUwHhcNMjUxMTExMTEwMTIzWhcNMjUxMTEyMTEwMTIzWjAzMTEwLwYDVQQD
EyhjYzE4NGEzNmQxY2IzOTYzMWE0Y2EyNDMzMmQyMDJkOTUwMTgwMjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujnum5yFqnHYnv8KBmy7W23NNGgt
KqVKc1IzlU1r5yTGmMFUypJrfHDarkxsu0nyBT6o0AKpyGOGNF6glBPQrgFNZa+5
Pde2wlXE+5pmPDgrBR94BKVQ4kLjlWUhfMwyTjZYTpby4d8pa/u/gp2UMcXhBxMN
wnTx7CmSgv0WR9ozrwsFy9+35GJQnTv+1ILocZJNSYIdix0qHGLBgyJ0Wov3EobM
KucP1y02wpNXB5fHUpftrljR/T78ZOgq0u3GR6BGjFHOz12qEKNFQ6DOVDKhUx1d
5Qvs+FnSd48q6PmXWS289Ncu8yVMLjTbInXF17P/KhSaulGA0OGPIJgqgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwYSjbRyzljGkyiQzLSAtlQGAILMB8GA1UdIwQY
MBaAFEy5Mrxg6f0Rhvj6a9cTwgcprnPuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVExreXZHRHBfUkdHLVBwcjF4UENCeW11Yy00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNDM4OTItNzgwYy00MzJhLTg4MmYt
MWUwZDdjNDJkYTc2LzEvVExreXZHRHBfUkdHLVBwcjF4UENCeW11Yy00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8zNDM4OTItNzgwYy00MzJhLTg4MmYtMWUwZDdjNDJkYTc2
LzEvVExreXZHRHBfUkdHLVBwcjF4UENCeW11Yy00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1w8BIDk
v+/5U3x70yMlSgsZ212AV4iJGDJzv0ncJCz914QH3uSSem+HeIDWYZuVcc4fw3yN
0Y1jrbFgGarIJQ4111JK3+DdTilXvtm7nSfNV5LWYxkDKr/fHb4GXn5yiNtJ303U
OWJuggnz2X7hdb9X4ZBVcTLqFbgIKGMdpbEOfnmOTHtkYcuu13O/3r+ZespmpNHN
zZ4iSEjPmF4TKnsOS6ejRKs1Pz0VXOAjfmXZDQ/tEP/W6jf3nIDUYZJlvVrlf9QJ
wLkf65JL3Brgz+ZpDuLC18SvddUkAEx9L79bLG+7DU76pPLZzAuwbwgqEa2tqeAM
uzjxzxa60btPOg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:10 2025 by rpki-client