Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
File: nR_TKOt-elrN5RmPDX6b4mhHbXE.mft (raw, json)
Hash identifier: AsL5wbTv0m4Mim1wvl7OsepimWFCUDv4dcJe1IrDUjM=
Subject key identifier: 45:83:18:AC:C4:9E:45:01:B2:72:4A:66:0F:B7:A1:F2:91:5F:C5:D1
Authority key identifier: 9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
Certificate issuer: /CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Certificate serial: 019A706DDE0172FDFD822045F3A14D843E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
Manifest number: 11C6
Signing time: Tue 11 Nov 2025 01:00:39 +0000
Manifest this update: Tue 11 Nov 2025 01:00:39 +0000
Manifest next update: Wed 12 Nov 2025 01:00:39 +0000
Files and hashes: 1: nR_TKOt-elrN5RmPDX6b4mhHbXE.crl (hash: ilpqIGl47dHU3CBbBVGdUZreV2KRBYpmmjoVJK/S5Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:de:01:72:fd:fd:82:20:45:f3:a1:4d:84:3e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Validity
Not Before: Nov 11 01:00:39 2025 GMT
Not After : Nov 12 01:00:39 2025 GMT
Subject: CN=458318acc49e4501b2724a660fb7a1f2915fc5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:f0:3e:d3:58:2b:c3:13:bc:33:2b:e6:b0:
5c:c9:e4:a3:ce:e9:92:28:92:82:cf:12:fe:77:59:
b5:b6:8c:f0:4a:30:97:08:bc:d0:35:e8:df:08:a4:
99:36:b6:0b:8c:ed:a9:4f:62:9e:47:78:a7:ed:fe:
0d:45:53:d6:5d:0d:ff:c2:74:e3:05:a8:cf:61:fd:
3c:29:36:36:f4:64:fd:31:37:b1:30:f7:d1:e4:c9:
1f:a0:49:cb:7c:43:32:fa:5a:0e:68:a1:13:1e:2b:
2a:0d:1a:a2:aa:13:47:e7:95:98:f5:6e:1c:dd:0d:
56:9e:bf:ef:23:b4:22:48:70:28:8a:3a:53:52:84:
99:d4:d4:0b:d9:fa:4a:df:d2:8b:15:35:51:c4:6b:
31:b7:f7:27:c8:92:b9:e6:ff:63:4d:45:28:40:a7:
b5:88:97:3c:b0:76:36:bd:69:59:e9:47:7c:e4:ba:
de:73:9a:46:13:a0:d6:7b:52:04:a2:0a:0f:72:8c:
45:46:e3:7b:ab:11:ea:88:45:7e:34:6a:19:91:4c:
fd:5f:ca:5b:16:f1:f7:b7:4b:a0:38:fe:f2:ea:ab:
21:4b:8c:f7:c9:74:3a:6d:10:28:6c:21:17:46:27:
0b:1e:71:51:d2:34:34:53:ba:8a:55:61:5b:2c:50:
fc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:83:18:AC:C4:9E:45:01:B2:72:4A:66:0F:B7:A1:F2:91:5F:C5:D1
X509v3 Authority Key Identifier:
keyid:9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:80:89:fb:7f:eb:f4:ff:ac:f8:20:a4:0f:5d:09:10:28:ea:
9f:5a:f9:0c:65:b6:2d:50:49:f5:fc:9a:35:e5:32:8e:d7:29:
80:0a:b4:92:6a:72:bb:6e:c0:a6:61:27:25:39:01:ea:9d:80:
3a:fc:bb:cb:c6:1f:34:ef:ab:ba:1f:d6:8f:46:4f:62:eb:59:
7d:98:bb:58:27:03:fa:c1:cb:52:9a:c6:da:7d:c4:25:d4:0a:
3a:ad:97:27:2e:3f:11:87:d2:66:b0:03:f1:3b:1e:e9:bd:7c:
4a:f1:3f:1b:e7:80:51:96:98:ab:98:32:f0:cf:c1:0d:79:81:
80:7b:df:4a:0e:f3:28:a6:23:fc:9a:f6:1c:49:b2:4f:4a:7d:
5b:26:f1:a6:50:ac:e6:42:26:71:cb:98:78:d0:80:2d:20:c3:
36:21:9c:8a:ce:d2:aa:6d:bc:0c:6c:9a:1a:2b:39:30:f1:d1:
e7:4b:f1:39:22:e1:9b:cd:19:ea:4d:10:39:f5:26:32:e9:ba:
57:c1:80:ae:a8:0d:65:0c:50:8e:f7:44:8d:02:43:ac:4d:42:
a8:eb:90:c8:a1:d3:52:e1:6b:74:a6:33:d3:28:9e:a5:cb:29:
2a:d4:10:bd:b7:c0:74:de:12:7f:6c:e5:7f:7d:66:d4:72:9f:
69:6f:4f:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbd4Bcv39giBF86FNhD4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMWZkMzI4ZWI3ZTdhNWFjZGU1MTk4ZjBkN2U5YmUyNjg0
NzZkNzEwHhcNMjUxMTExMDEwMDM5WhcNMjUxMTEyMDEwMDM5WjAzMTEwLwYDVQQD
Eyg0NTgzMThhY2M0OWU0NTAxYjI3MjRhNjYwZmI3YTFmMjkxNWZjNWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntXwPtNYK8MTvDMr5rBcyeSjzumS
KJKCzxL+d1m1tozwSjCXCLzQNejfCKSZNrYLjO2pT2KeR3in7f4NRVPWXQ3/wnTj
BajPYf08KTY29GT9MTexMPfR5MkfoEnLfEMy+loOaKETHisqDRqiqhNH55WY9W4c
3Q1Wnr/vI7QiSHAoijpTUoSZ1NQL2fpK39KLFTVRxGsxt/cnyJK55v9jTUUoQKe1
iJc8sHY2vWlZ6Ud85Lrec5pGE6DWe1IEogoPcoxFRuN7qxHqiEV+NGoZkUz9X8pb
FvH3t0ugOP7y6qshS4z3yXQ6bRAobCEXRicLHnFR0jQ0U7qKVWFbLFD8pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWDGKzEnkUBsnJKZg+3ofKRX8XRMB8GA1UdIwQY
MBaAFJ0f0yjrfnpazeUZjw1+m+JoR21xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblJfVEtPdC1lbHJONVJtUERYNmI0bWhIYlhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wYzNkMWItZmMyMy00MWZiLWFmOWMt
YTE2M2Y1NzNiNmQ5LzEvblJfVEtPdC1lbHJONVJtUERYNmI0bWhIYlhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wYzNkMWItZmMyMy00MWZiLWFmOWMtYTE2M2Y1NzNiNmQ5
LzEvblJfVEtPdC1lbHJONVJtUERYNmI0bWhIYlhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYCJ+3/r
9P+s+CCkD10JECjqn1r5DGW2LVBJ9fyaNeUyjtcpgAq0kmpyu27ApmEnJTkB6p2A
Ovy7y8YfNO+ruh/Wj0ZPYutZfZi7WCcD+sHLUprG2n3EJdQKOq2XJy4/EYfSZrAD
8Tse6b18SvE/G+eAUZaYq5gy8M/BDXmBgHvfSg7zKKYj/Jr2HEmyT0p9WybxplCs
5kImccuYeNCALSDDNiGcis7Sqm28DGyaGis5MPHR50vxOSLhm80Z6k0QOfUmMum6
V8GArqgNZQxQjvdEjQJDrE1CqOuQyKHTUuFrdKYz0yiepcspKtQQvbfAdN4Sf2zl
f31m1HKfaW9PTQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:00 2025 by rpki-client