Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
File: tEORSkjl2uWnVrHjuPvkN-4Niww.mft (raw, json)
Hash identifier: +2JNSqV0PbI+ajLptT5V5+Kz8l8WL4jo8kGtE0PPt4U=
Subject key identifier: E7:5B:4D:CB:CF:81:CD:FA:BB:9B:C1:C2:83:3C:5B:44:59:F3:89:22
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Certificate issuer: /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial: 0199C4572C6D529D842832439800CC76DD53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
Manifest number: 16C5
Signing time: Wed 08 Oct 2025 15:01:11 +0000
Manifest this update: Wed 08 Oct 2025 15:01:11 +0000
Manifest next update: Thu 09 Oct 2025 15:01:11 +0000
Files and hashes: 1: 4lhTaQhjom1qkpeBd0ZsbdWiEJ4.roa (hash: XdHlLCQ2Kh6iuUQP6DmaSkVFP47PPhEh+iIit9uDq/c=)
2: Loamkgq2liGt_WerD0xhgg9VD4c.roa (hash: HJiMbQmWc3n1Lwl3vm8HBtMiaI2Ev5JS4MMKRu/Y4gU=)
3: kTZKdp3t576jj7V1laKryCYz0Og.roa (hash: HbtSMYd2T/15rtkOhZspTZMKwAPA+sik9h0BqyVd10U=)
4: rZB_JVvkOIqma6Wh66SCnHCJS8Q.roa (hash: UNrRcAyslLxjeDmqjrPzHbwMyZ4AtgV3GxOrJgdzxQg=)
5: tEORSkjl2uWnVrHjuPvkN-4Niww.crl (hash: oHuToQAC3MX1Br4CnYFKnDkC97k1oQTF4PpTRGRTb+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:57:2c:6d:52:9d:84:28:32:43:98:00:cc:76:dd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Validity
Not Before: Oct 8 15:01:11 2025 GMT
Not After : Oct 9 15:01:11 2025 GMT
Subject: CN=e75b4dcbcf81cdfabb9bc1c2833c5b4459f38922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:08:e7:2a:f3:f7:1d:a3:67:34:9a:e2:96:
76:d1:c9:9f:36:a4:c9:fe:3f:ee:fd:c5:f1:37:05:
e5:ec:d0:6b:68:9b:b4:03:e8:db:a2:f8:c4:fa:04:
6f:df:a4:2c:92:8b:b6:80:93:07:39:b3:18:83:a1:
5b:a3:a8:13:62:69:e4:b7:0a:b1:cb:9b:c4:43:21:
a1:2f:7f:9c:2d:ba:b0:8c:22:44:90:84:7b:d2:d9:
16:c1:d1:c2:df:1f:ea:3b:27:62:2b:02:38:e1:ad:
08:9f:d9:ad:c1:8f:da:f5:87:e5:32:fb:3e:55:17:
6f:f3:82:20:ee:2b:6e:e3:36:a7:64:51:e0:01:4b:
5c:2b:a2:15:fb:b0:3e:7e:3e:84:af:91:e3:8e:fc:
be:1c:01:24:60:1e:b7:11:f1:20:72:7b:0e:9b:d4:
c3:11:5a:8d:7f:4f:a8:01:4e:d1:2d:3e:4e:fc:3a:
2e:2b:9d:ad:7f:ee:8e:6b:ec:08:c5:56:44:fa:67:
90:ff:c6:a5:f7:a4:b8:c7:b5:4c:84:98:31:16:0f:
12:dd:b2:6e:c6:48:60:a0:3b:4c:ef:22:61:ae:b2:
57:14:53:36:92:19:21:d6:03:3b:6a:dd:bb:db:3d:
20:3d:98:5d:75:8c:b3:2f:01:a8:73:7b:ec:b6:21:
58:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5B:4D:CB:CF:81:CD:FA:BB:9B:C1:C2:83:3C:5B:44:59:F3:89:22
X509v3 Authority Key Identifier:
keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:bf:12:79:66:fb:8f:84:7b:63:91:5e:9f:81:71:72:97:1b:
21:dd:6a:1e:71:e6:da:3d:ca:10:4f:ab:2d:80:06:6d:4e:1a:
e5:2a:d3:2a:6d:c5:a6:07:bf:3d:a3:83:58:e3:d6:73:65:b7:
3c:77:7f:67:21:91:24:ce:74:0e:49:6a:07:e5:cd:a2:fd:27:
09:6c:e1:6e:47:28:4d:42:f2:25:0f:b6:f3:a6:71:bd:5d:f4:
c6:2d:36:11:69:4f:c6:26:32:30:5b:fa:77:54:58:08:01:1a:
89:9b:f5:b3:2b:a2:d4:d7:dd:a7:20:0b:53:47:18:08:80:e9:
ef:bb:44:8f:72:97:3d:74:aa:e3:1a:4f:26:9a:d7:39:d4:c2:
40:85:69:26:6a:c4:99:a5:50:9b:f0:37:5a:66:14:b6:85:19:
f3:be:f0:92:f8:8d:66:4a:6a:d0:02:e3:d2:cc:fa:56:01:31:
4a:ae:9b:9c:8b:f0:75:58:76:b6:7f:e1:b2:b6:3c:c7:f1:ee:
61:20:84:0d:ef:13:cb:15:e4:63:ed:14:3c:80:6a:e8:13:9d:
49:17:6b:d9:f0:6f:8d:a8:2b:07:39:ef:5a:2b:3c:39:b3:4b:
db:1e:b7:4e:28:13:6d:57:50:82:1d:d9:1e:aa:25:34:15:e7:
89:d1:03:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnEVyxtUp2EKDJDmADMdt1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDM5MTRhNDhlNWRhZTVhNzU2YjFlM2I4ZmJlNDM3ZWUw
ZDhiMGMwHhcNMjUxMDA4MTUwMTExWhcNMjUxMDA5MTUwMTExWjAzMTEwLwYDVQQD
EyhlNzViNGRjYmNmODFjZGZhYmI5YmMxYzI4MzNjNWI0NDU5ZjM4OTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/kI5yrz9x2jZzSa4pZ20cmfNqTJ
/j/u/cXxNwXl7NBraJu0A+jbovjE+gRv36Qskou2gJMHObMYg6Fbo6gTYmnktwqx
y5vEQyGhL3+cLbqwjCJEkIR70tkWwdHC3x/qOydiKwI44a0In9mtwY/a9YflMvs+
VRdv84Ig7itu4zanZFHgAUtcK6IV+7A+fj6Er5Hjjvy+HAEkYB63EfEgcnsOm9TD
EVqNf0+oAU7RLT5O/DouK52tf+6Oa+wIxVZE+meQ/8al96S4x7VMhJgxFg8S3bJu
xkhgoDtM7yJhrrJXFFM2khkh1gM7at272z0gPZhddYyzLwGoc3vstiFYNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdbTcvPgc36u5vBwoM8W0RZ84kiMB8GA1UdIwQY
MBaAFLRDkUpI5drlp1ax47j75DfuDYsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAt
MzE0ZWY3NDZkOGE2LzEvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAtMzE0ZWY3NDZkOGE2
LzEvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACb8SeWb7
j4R7Y5Fen4FxcpcbId1qHnHm2j3KEE+rLYAGbU4a5SrTKm3Fpge/PaODWOPWc2W3
PHd/ZyGRJM50DklqB+XNov0nCWzhbkcoTULyJQ+286ZxvV30xi02EWlPxiYyMFv6
d1RYCAEaiZv1syui1NfdpyALU0cYCIDp77tEj3KXPXSq4xpPJprXOdTCQIVpJmrE
maVQm/A3WmYUtoUZ877wkviNZkpq0ALj0sz6VgExSq6bnIvwdVh2tn/hsrY8x/Hu
YSCEDe8TyxXkY+0UPIBq6BOdSRdr2fBvjagrBznvWis8ObNL2x63TigTbVdQgh3Z
HqolNBXnidEDWA==
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:18:46 2025 by rpki-client