Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier: g83U+ekxJb6AjeJ3wPyFUtkibWDcaTbZemrcFpaGDmk=
Subject key identifier: B0:36:1F:F0:91:0C:B2:99:29:BB:CE:22:34:33:8F:B7:98:C1:3C:28
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 019A6545BAFD6BC0471DAAFFFF30592F3A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number: 1717
Signing time: Sat 08 Nov 2025 21:00:59 +0000
Manifest this update: Sat 08 Nov 2025 21:00:59 +0000
Manifest next update: Sun 09 Nov 2025 21:00:59 +0000
Files and hashes: 1: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: EdTTBDB41x8Tu8JWBmbNsaMjCnhk1psKy2vbzlVZF4w=)
2: u16TB_X_VEL7--qGdSVXn8Zs3wY.roa (hash: m8sRTErDjjsLnDtgYn9w7y6plArnvxsTKmxxZwh54Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Nov 2025 18:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:65:45:ba:fd:6b:c0:47:1d:aa:ff:ff:30:59:2f:3a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Nov 8 21:00:59 2025 GMT
Not After : Nov 9 21:00:59 2025 GMT
Subject: CN=b0361ff0910cb29929bbce2234338fb798c13c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:84:7d:c1:11:d0:f2:ce:e3:72:33:d4:ed:
78:5e:78:81:7b:90:ba:42:e8:1c:69:da:38:c2:3c:
4f:55:0f:4e:34:53:48:8e:5e:c9:63:eb:df:63:39:
a8:10:53:d7:e6:33:f7:64:68:1e:93:1c:9f:c5:61:
2b:dc:41:87:f1:c7:34:f6:cf:5a:4e:75:62:de:04:
0f:6e:ab:df:7a:e7:64:50:a8:9c:51:49:b8:02:80:
6d:da:82:44:d6:5d:fc:c9:14:80:60:24:e6:a8:cd:
64:ae:7d:50:ea:05:34:a2:11:cf:e6:25:c5:ea:c9:
94:4d:e2:be:a1:55:48:56:c7:2f:48:50:ed:b0:e8:
0f:51:5b:d6:81:0e:2e:97:52:4a:34:a7:a8:be:bf:
24:1e:f1:fc:3c:0c:99:ea:84:d6:5e:77:31:fc:09:
8b:8b:c1:df:25:0f:2b:bf:d2:34:85:58:82:32:c5:
07:20:e5:be:2e:cd:14:25:23:29:be:c2:4f:f9:36:
8a:29:ba:5f:ff:d4:ce:72:37:7f:d6:5a:72:d1:70:
f2:34:19:d0:25:4b:90:3e:c3:b7:fd:80:61:83:20:
da:6f:9a:32:22:22:5b:60:78:9a:0a:bd:d3:33:cb:
0c:8f:e9:47:6e:21:c3:07:fc:a6:55:5f:e2:61:44:
e0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:36:1F:F0:91:0C:B2:99:29:BB:CE:22:34:33:8F:B7:98:C1:3C:28
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ae:e1:13:82:fa:f0:58:c2:80:e4:1c:a2:67:56:74:c8:71:
72:6b:45:44:f6:1e:d8:ed:4f:ae:b2:70:7d:94:c7:98:ae:dd:
8c:06:95:27:98:13:b9:da:35:bb:e6:1e:95:1b:26:cb:4b:72:
45:e5:ee:98:d7:57:ec:16:ae:2e:e3:8c:f0:ee:72:0f:a0:81:
91:b4:f7:61:6e:78:63:b7:49:b2:1f:55:40:04:11:99:43:1b:
7a:26:a4:6a:ff:57:94:78:7d:ab:1f:21:f8:95:1e:54:09:5d:
49:6a:55:dc:c4:5c:cc:1f:69:93:f9:12:ba:84:9d:7d:bc:34:
59:45:58:03:9a:d5:f3:ac:67:52:77:08:81:e6:0b:d1:91:f0:
e5:94:52:c6:b6:e2:45:dc:a3:c3:95:51:c7:f1:98:0c:97:9d:
46:1d:ab:37:c9:a9:99:90:e8:d4:32:f1:12:22:e3:7c:1c:66:
6c:0a:1b:47:e6:34:39:dd:a5:a2:30:43:a8:dc:28:6b:45:c3:
7a:f9:70:98:d8:8a:a6:90:03:a8:29:74:23:ac:e4:51:5d:2e:
a3:0c:e5:52:8d:08:91:82:70:38:d9:0c:14:4d:8d:36:48:57:
8f:e6:01:b6:bc:0b:bd:f6:79:9a:4b:3c:7e:0c:26:4d:82:a3:
16:9e:09:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZplRbr9a8BHHar//zBZLzqLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YWUyODhhOWRkYjBlZjUwYTI5NGIzY2FlOTYzZTE0N2M5
YzdkYzkwHhcNMjUxMTA4MjEwMDU5WhcNMjUxMTA5MjEwMDU5WjAzMTEwLwYDVQQD
EyhiMDM2MWZmMDkxMGNiMjk5MjliYmNlMjIzNDMzOGZiNzk4YzEzYzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocCEfcER0PLO43Iz1O14XniBe5C6
Qugcado4wjxPVQ9ONFNIjl7JY+vfYzmoEFPX5jP3ZGgekxyfxWEr3EGH8cc09s9a
TnVi3gQPbqvfeudkUKicUUm4AoBt2oJE1l38yRSAYCTmqM1krn1Q6gU0ohHP5iXF
6smUTeK+oVVIVscvSFDtsOgPUVvWgQ4ul1JKNKeovr8kHvH8PAyZ6oTWXncx/AmL
i8HfJQ8rv9I0hViCMsUHIOW+Ls0UJSMpvsJP+TaKKbpf/9TOcjd/1lpy0XDyNBnQ
JUuQPsO3/YBhgyDab5oyIiJbYHiaCr3TM8sMj+lHbiHDB/ymVV/iYUTgywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLA2H/CRDLKZKbvOIjQzj7eYwTwoMB8GA1UdIwQY
MBaAFLSuKIqd2w71CilLPK6WPhR8nH3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEs0b2lwM2JEdlVLS1VzOHJwWS1GSHljZmNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NTdmMmQtMDEzNy00ZDYxLTg1MDAt
MzAwNDI2Y2UzMmUyLzEvdEs0b2lwM2JEdlVLS1VzOHJwWS1GSHljZmNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80NTdmMmQtMDEzNy00ZDYxLTg1MDAtMzAwNDI2Y2UzMmUy
LzEvdEs0b2lwM2JEdlVLS1VzOHJwWS1GSHljZmNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoq7hE4L6
8FjCgOQcomdWdMhxcmtFRPYe2O1PrrJwfZTHmK7djAaVJ5gTudo1u+YelRsmy0ty
ReXumNdX7BauLuOM8O5yD6CBkbT3YW54Y7dJsh9VQAQRmUMbeiakav9XlHh9qx8h
+JUeVAldSWpV3MRczB9pk/kSuoSdfbw0WUVYA5rV86xnUncIgeYL0ZHw5ZRSxrbi
Rdyjw5VRx/GYDJedRh2rN8mpmZDo1DLxEiLjfBxmbAobR+Y0Od2lojBDqNwoa0XD
evlwmNiKppADqCl0I6zkUV0uowzlUo0IkYJwONkMFE2NNkhXj+YBtrwLvfZ5mks8
fgwmTYKjFp4JfA==
-----END CERTIFICATE-----
Generated at Sun Nov 9 00:52:18 2025 by rpki-client