Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
File: tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft (raw, json)
Hash identifier: zpfTEzqkl4W1pj4cic6Zrigy/Cepbky5CYHFUydXJk8=
Subject key identifier: D1:10:5D:65:40:0C:74:FF:7A:B5:A4:D0:03:58:D8:05:5F:0D:B3:5D
Authority key identifier: B5:3A:CA:36:84:6D:2D:30:23:64:8E:AC:58:1C:7D:9B:63:17:EE:DC
Certificate issuer: /CN=b53aca36846d2d3023648eac581c7d9b6317eedc
Certificate serial: 019A7293D5DCBD3E04595BB86E81D21521F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
Manifest number: 031E
Signing time: Tue 11 Nov 2025 11:01:22 +0000
Manifest this update: Tue 11 Nov 2025 11:01:22 +0000
Manifest next update: Wed 12 Nov 2025 11:01:22 +0000
Files and hashes: 1: tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl (hash: KvPFq86W2j9IP/DZtqC+DfRn4C40Bx6e1Q2H65NTGIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d5:dc:bd:3e:04:59:5b:b8:6e:81:d2:15:21:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53aca36846d2d3023648eac581c7d9b6317eedc
Validity
Not Before: Nov 11 11:01:22 2025 GMT
Not After : Nov 12 11:01:22 2025 GMT
Subject: CN=d1105d65400c74ff7ab5a4d00358d8055f0db35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:da:02:0e:66:91:9b:a2:f1:64:71:82:06:
82:20:23:d9:ad:32:bb:e7:b2:e4:a0:92:37:e3:07:
eb:c1:e1:cd:8e:02:bd:cd:91:c8:69:17:08:3f:f2:
ac:52:4b:3e:58:7f:e3:6f:08:33:8b:5b:fe:55:2a:
c3:10:b5:d6:c6:ec:b5:84:a7:22:0b:f6:ac:11:75:
36:e7:d6:ba:05:f0:73:87:92:14:a7:13:20:53:58:
fd:ae:fd:41:e9:d8:0a:95:88:95:09:7c:f1:2c:db:
27:33:9a:16:6e:b1:3e:d9:29:c2:c8:a7:cc:d5:e3:
2a:74:dc:65:b5:f5:29:18:31:fc:2d:23:72:ad:46:
88:d2:99:94:05:f0:b3:d1:cf:69:37:d4:73:98:40:
83:c3:a6:ad:41:72:11:fe:38:67:b8:82:96:ba:e3:
53:9e:e5:ea:a4:a9:82:ee:57:da:b2:9b:09:76:3a:
1b:bf:97:92:92:c3:d2:d8:1e:f2:b5:7e:cb:9c:57:
ab:2e:3e:77:9e:89:70:03:4d:5d:bf:70:4c:a9:b9:
8d:1b:6c:2f:78:44:ce:d6:d6:d4:99:87:ad:20:fc:
f4:d1:bd:a8:b4:b9:55:fe:75:cf:e0:a8:9d:1f:41:
f6:dc:9e:a0:95:c0:5b:9f:9b:eb:57:18:91:9f:34:
44:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:10:5D:65:40:0C:74:FF:7A:B5:A4:D0:03:58:D8:05:5F:0D:B3:5D
X509v3 Authority Key Identifier:
keyid:B5:3A:CA:36:84:6D:2D:30:23:64:8E:AC:58:1C:7D:9B:63:17:EE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3f:54:6d:10:c3:aa:40:a1:11:c8:74:da:a5:3d:f5:a9:bb:
bf:5a:32:82:71:5f:18:43:ed:38:10:fa:08:51:a8:14:e4:f0:
87:e2:aa:da:79:f3:7b:4a:f8:a4:e8:c5:17:23:e5:ee:be:9a:
66:a9:86:2a:98:f2:cb:d8:4b:7a:9c:1f:65:87:bb:b1:79:a9:
94:66:cf:93:85:1a:c5:ee:ef:4a:a3:88:a3:48:aa:90:a3:52:
27:4a:d0:f2:bf:7c:90:66:35:f2:d4:55:c7:b3:f4:56:95:19:
31:33:63:02:d8:54:57:8d:1e:0a:15:c3:9a:23:87:53:2c:3b:
ce:42:c3:d3:9c:30:93:6a:a3:b3:6f:8e:b4:8c:9d:11:bd:ee:
72:ab:c3:74:c6:c8:19:36:e4:6c:09:3b:87:3b:b1:e3:aa:ea:
ed:59:20:2d:1c:73:a6:a5:dc:ae:b0:77:02:fc:76:45:d9:d2:
2e:0f:8f:ec:bf:98:06:11:5c:10:21:cd:44:1f:dc:40:ec:a2:
cf:81:e9:f3:f9:a4:ae:ac:aa:91:d6:e0:63:49:74:74:ea:3b:
6f:11:d9:5b:eb:80:65:51:e6:33:5b:a5:4d:17:ca:3a:cd:ee:
e5:8f:59:bf:76:7c:1a:f4:87:96:d1:fd:be:88:b3:f6:45:20:
df:a3:62:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk9XcvT4EWVu4boHSFSHwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2FjYTM2ODQ2ZDJkMzAyMzY0OGVhYzU4MWM3ZDliNjMx
N2VlZGMwHhcNMjUxMTExMTEwMTIyWhcNMjUxMTEyMTEwMTIyWjAzMTEwLwYDVQQD
EyhkMTEwNWQ2NTQwMGM3NGZmN2FiNWE0ZDAwMzU4ZDgwNTVmMGRiMzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3naAg5mkZui8WRxggaCICPZrTK7
57LkoJI34wfrweHNjgK9zZHIaRcIP/KsUks+WH/jbwgzi1v+VSrDELXWxuy1hKci
C/asEXU259a6BfBzh5IUpxMgU1j9rv1B6dgKlYiVCXzxLNsnM5oWbrE+2SnCyKfM
1eMqdNxltfUpGDH8LSNyrUaI0pmUBfCz0c9pN9RzmECDw6atQXIR/jhnuIKWuuNT
nuXqpKmC7lfaspsJdjobv5eSksPS2B7ytX7LnFerLj53nolwA01dv3BMqbmNG2wv
eETO1tbUmYetIPz00b2otLlV/nXP4KidH0H23J6glcBbn5vrVxiRnzRE7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEQXWVADHT/erWk0ANY2AVfDbNdMB8GA1UdIwQY
MBaAFLU6yjaEbS0wI2SOrFgcfZtjF+7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFRyS05vUnRMVEFqWkk2c1dCeDltMk1YN3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYWYzNmMtNjY2ZC00YWM0LWIwZjMt
NGJiMzdiMThiOWZlLzEvdFRyS05vUnRMVEFqWkk2c1dCeDltMk1YN3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hYWYzNmMtNjY2ZC00YWM0LWIwZjMtNGJiMzdiMThiOWZl
LzEvdFRyS05vUnRMVEFqWkk2c1dCeDltMk1YN3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIj9UbRDD
qkChEch02qU99am7v1oygnFfGEPtOBD6CFGoFOTwh+Kq2nnze0r4pOjFFyPl7r6a
ZqmGKpjyy9hLepwfZYe7sXmplGbPk4Uaxe7vSqOIo0iqkKNSJ0rQ8r98kGY18tRV
x7P0VpUZMTNjAthUV40eChXDmiOHUyw7zkLD05wwk2qjs2+OtIydEb3ucqvDdMbI
GTbkbAk7hzux46rq7VkgLRxzpqXcrrB3Avx2RdnSLg+P7L+YBhFcECHNRB/cQOyi
z4Hp8/mkrqyqkdbgY0l0dOo7bxHZW+uAZVHmM1ulTRfKOs3u5Y9Zv3Z8GvSHltH9
voiz9kUg36NiGw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:45:57 2025 by rpki-client