Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
File: T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json)
Hash identifier: kF0VTKHV0L5scoGl+PIvVFd4IVxoYNaE1Oi201oo1WE=
Subject key identifier: 74:B0:DF:CF:65:6E:E3:43:A9:AC:09:08:19:8D:32:63:F7:C8:AE:6A
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial: 0199C5D92E78B4FC65437911792832B6AB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
Manifest number: 1494
Signing time: Wed 08 Oct 2025 22:02:48 +0000
Manifest this update: Wed 08 Oct 2025 22:02:48 +0000
Manifest next update: Thu 09 Oct 2025 22:02:48 +0000
Files and hashes: 1: K_MyGvHR4IdSBZBjdPl8MukbNFk.roa (hash: HrMHQD3uVG8sdR811mtsQpZxidNNmctDC5Taskmcc7A=)
2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: Hx9aC+i4+753Z1mwtxFg5TYLZmuJo7PwQztJSbwkSYI=)
3: qt5f6XAHUjkOK9CEjEv3rd6845Q.roa (hash: JhK1mHuSEOx5aV2MrmFZp4Cs5i5KltcCemHPpXmD5pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:d9:2e:78:b4:fc:65:43:79:11:79:28:32:b6:ab:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Validity
Not Before: Oct 8 22:02:48 2025 GMT
Not After : Oct 9 22:02:48 2025 GMT
Subject: CN=74b0dfcf656ee343a9ac0908198d3263f7c8ae6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5c:f3:1e:59:9b:24:7c:64:56:f5:17:ff:22:
44:a4:30:98:05:1d:3a:63:36:8f:49:ee:92:dc:5e:
b5:61:9f:97:ce:a4:9d:a7:56:1a:aa:6d:de:cc:07:
58:9e:1f:af:94:6e:17:37:92:d0:0d:dc:72:e0:22:
c7:f1:7a:aa:59:12:23:fb:0b:0c:f6:19:78:80:ad:
e9:ac:4e:86:5f:06:63:84:3a:8a:2b:32:b6:a6:77:
3c:1a:cc:e7:18:2e:8c:c2:52:25:56:35:ae:48:c5:
91:ef:5f:c2:64:64:b2:c9:bb:05:9a:3a:fb:b9:2c:
0e:93:d9:16:a1:e6:db:ef:5f:49:b9:82:72:22:0d:
7e:a9:47:c9:ba:44:d1:a4:af:c9:07:ff:40:91:27:
ed:7b:a0:e2:3f:7f:8b:ae:c6:b4:ab:9e:b5:ae:53:
57:52:49:e3:54:73:c7:aa:ef:6b:09:24:b3:fc:a0:
a4:db:1d:25:b3:75:6c:60:21:0c:19:80:3c:6f:ff:
73:86:38:68:48:aa:dc:8a:80:30:07:ce:21:66:b3:
58:f8:40:5d:b1:04:26:b2:62:65:f2:4c:cd:0b:de:
49:d1:ce:a8:73:5b:4f:9a:2c:e0:67:cd:03:57:97:
a0:08:c6:29:66:92:5e:15:2f:f8:83:0c:e8:d0:bd:
aa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B0:DF:CF:65:6E:E3:43:A9:AC:09:08:19:8D:32:63:F7:C8:AE:6A
X509v3 Authority Key Identifier:
keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a7:ed:84:93:b7:b1:f3:f0:4a:92:8c:01:e3:0a:91:c8:1d:
80:87:19:d2:86:75:cc:df:02:7a:ad:4a:14:74:2e:83:65:7e:
02:64:ae:48:b7:78:5a:11:ab:dd:f1:14:76:f2:c3:5c:70:c4:
16:d0:dc:a4:17:fd:e7:de:53:a0:91:78:af:3f:8a:c4:6e:6f:
ed:0d:5e:fe:89:02:dc:27:e0:e0:c5:f7:2b:e8:89:48:c4:91:
1f:bd:dc:a6:22:e6:48:92:95:60:87:77:d1:2e:ea:fb:90:aa:
9c:44:f6:16:47:fa:ff:e4:5f:ab:d5:d9:23:f5:79:5b:53:ae:
b4:9e:dc:b8:f7:d1:8c:7c:5d:e5:0a:03:67:40:00:29:55:e2:
e2:8b:5b:4c:af:5d:6b:de:4a:8b:15:9b:c7:4a:aa:06:32:02:
89:e7:dd:26:87:3d:03:9c:06:27:a6:cf:40:27:b0:48:d9:3a:
db:a4:d3:ca:78:4a:6c:20:59:81:9b:3f:4b:d1:45:6d:23:b6:
2a:3f:24:b3:61:64:43:55:df:bc:e8:85:22:bd:b0:bb:8f:a6:
d6:de:f1:2d:6b:86:e9:06:89:78:78:a5:9c:8e:89:17:be:35:
ce:cc:77:fd:30:03:07:b9:a1:b1:03:e0:b9:29:67:4d:97:22:
39:f1:fc:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnF2S54tPxlQ3kReSgytqtwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmN2Q4ODUzOTNiMzJiNWVlZTNhMGJmNDMzOGUwZmFhZWYz
Yzc1M2MwHhcNMjUxMDA4MjIwMjQ4WhcNMjUxMDA5MjIwMjQ4WjAzMTEwLwYDVQQD
Eyg3NGIwZGZjZjY1NmVlMzQzYTlhYzA5MDgxOThkMzI2M2Y3YzhhZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71zzHlmbJHxkVvUX/yJEpDCYBR06
YzaPSe6S3F61YZ+XzqSdp1Yaqm3ezAdYnh+vlG4XN5LQDdxy4CLH8XqqWRIj+wsM
9hl4gK3prE6GXwZjhDqKKzK2pnc8GsznGC6MwlIlVjWuSMWR71/CZGSyybsFmjr7
uSwOk9kWoebb719JuYJyIg1+qUfJukTRpK/JB/9AkSfte6DiP3+Lrsa0q561rlNX
UknjVHPHqu9rCSSz/KCk2x0ls3VsYCEMGYA8b/9zhjhoSKrcioAwB84hZrNY+EBd
sQQmsmJl8kzNC95J0c6oc1tPmizgZ80DV5egCMYpZpJeFS/4gwzo0L2qyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSw389lbuNDqawJCBmNMmP3yK5qMB8GA1UdIwQY
MBaAFE99iFOTsyte7joL9DOOD6rvPHU8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEt
YjE4ZGFjMmQyNTliLzEvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEtYjE4ZGFjMmQyNTli
LzEvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKfthJO3
sfPwSpKMAeMKkcgdgIcZ0oZ1zN8Ceq1KFHQug2V+AmSuSLd4WhGr3fEUdvLDXHDE
FtDcpBf9595ToJF4rz+KxG5v7Q1e/okC3Cfg4MX3K+iJSMSRH73cpiLmSJKVYId3
0S7q+5CqnET2Fkf6/+Rfq9XZI/V5W1OutJ7cuPfRjHxd5QoDZ0AAKVXi4otbTK9d
a95KixWbx0qqBjICiefdJoc9A5wGJ6bPQCewSNk626TTynhKbCBZgZs/S9FFbSO2
Kj8ks2FkQ1XfvOiFIr2wu4+m1t7xLWuG6QaJeHilnI6JF741zsx3/TADB7mhsQPg
uSlnTZciOfH8Ww==
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:31:50 2025 by rpki-client