Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
File: tGS0UjqJcrni9GpPShY06XAnrt8.mft (raw, json)
Hash identifier: lK8tFLIkzZL1js6agp/q7q+vLd+E5pGQIiXblx2TXUc=
Subject key identifier: 1B:33:22:03:D1:06:1C:0C:C5:B0:43:37:6D:77:B8:60:60:F8:DA:FC
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial: 0199C4205CCB0594E238B39B307E1BF1EAD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
Manifest number: 068F
Signing time: Wed 08 Oct 2025 14:01:19 +0000
Manifest this update: Wed 08 Oct 2025 14:01:19 +0000
Manifest next update: Thu 09 Oct 2025 14:01:19 +0000
Files and hashes: 1: LCm5HjjBIgE4kc53Y1x9V3jEK5E.roa (hash: gidlYB2yA995VC/sjZRH4fK+Z2xDnArATR8jcQsRBeo=)
2: Vo2AEZubMry-8LbxfP3bd7koV9U.roa (hash: Fh0uHUq/PCCkV86hQ4ARdMVMrk3QlRXqnTaAy7kodnk=)
3: g8C52r-HgjcOKaKK01GccaiLGqY.roa (hash: yFMdULn9+zrpJgeM+fVWlj0c0e8CtPQGd00H0hnJUEs=)
4: tGS0UjqJcrni9GpPShY06XAnrt8.crl (hash: tSe7Z6hTMGQzCJMPq7qD5HPHRrDxjeG5w+F56Cx2uxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:20:5c:cb:05:94:e2:38:b3:9b:30:7e:1b:f1:ea:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Validity
Not Before: Oct 8 14:01:19 2025 GMT
Not After : Oct 9 14:01:19 2025 GMT
Subject: CN=1b332203d1061c0cc5b043376d77b86060f8dafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:56:20:81:37:2e:54:36:97:e8:89:2f:63:
c5:44:87:12:d0:be:97:6a:ab:bf:ae:76:d3:3c:2d:
74:9c:64:68:58:bd:51:92:8f:ad:63:ab:56:97:75:
93:19:23:08:a0:29:ec:b6:b2:4a:82:ca:92:92:8f:
96:f8:92:48:c9:e9:87:a5:2f:3a:0f:1d:73:0a:30:
ea:a9:4f:9d:be:d1:1a:70:07:88:27:fe:a7:ef:bf:
2c:1f:43:1d:16:26:2b:bf:39:1e:73:d7:13:72:98:
b9:cf:d7:3d:23:87:d0:5b:77:70:de:4c:8b:ef:69:
18:d0:32:95:b2:27:49:25:29:2f:a6:c7:ba:bd:bb:
a6:4e:d8:b7:49:d9:e3:b0:19:8b:19:47:e4:6e:37:
17:40:4e:77:4f:b2:11:f1:74:fd:02:ed:ff:48:33:
ce:c7:eb:e8:c7:84:bc:c8:07:44:cf:39:c0:c6:df:
dc:48:ed:2b:37:c7:38:a3:c9:b6:0a:0f:d8:71:7d:
e8:ae:80:c5:dc:54:d8:40:c5:4d:73:67:05:a5:dc:
02:17:a1:16:ed:f6:64:72:51:aa:bf:88:1c:41:7b:
03:b8:93:c6:bc:b5:ea:84:cf:e7:fa:46:b6:7c:80:
ed:2c:82:8f:1b:91:c1:5e:a0:3c:de:a6:5c:3e:29:
12:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:33:22:03:D1:06:1C:0C:C5:B0:43:37:6D:77:B8:60:60:F8:DA:FC
X509v3 Authority Key Identifier:
keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:38:6d:10:68:c8:23:77:c2:1d:4b:27:b3:6f:49:92:3c:05:
f9:75:04:b3:01:f1:a9:ad:e0:8f:0d:4b:09:a3:f9:44:06:70:
46:8a:a9:af:39:20:24:fd:7a:44:1c:21:72:e9:ea:29:1d:5a:
17:c5:f7:5a:65:6b:2b:7a:28:a4:83:c9:41:4b:2c:80:72:8f:
04:43:7d:5e:64:df:82:be:e9:6f:0a:aa:96:52:ef:f0:91:2b:
a4:e2:84:6c:38:44:9c:ca:0a:5f:0a:05:5f:3a:47:1e:1a:3b:
cf:06:01:37:7e:a0:60:f8:e0:f3:e0:f7:49:5d:40:51:3d:11:
b2:8b:60:8e:86:00:11:46:dd:07:50:40:81:09:b9:92:f0:59:
e6:a7:b9:2a:d7:aa:96:15:ae:85:16:13:db:c6:7b:61:8f:45:
5e:c6:09:be:85:15:18:82:6e:f6:2a:be:8b:2d:0b:65:a0:e5:
40:73:65:53:04:2c:2d:4a:06:f3:10:6a:6d:4c:5f:e9:2c:95:
db:b9:56:56:45:c6:d7:fe:82:1b:52:24:be:44:05:ca:fb:c8:
a4:2e:f1:b7:3b:51:bc:b4:a1:41:26:c0:f6:d9:af:58:6b:ff:
75:2d:54:81:79:ea:c2:a1:71:39:c9:cd:54:cc:24:f4:28:f8:
a9:4f:08:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnEIFzLBZTiOLObMH4b8erTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjRiNDUyM2E4OTcyYjllMmY0NmE0ZjRhMTYzNGU5NzAy
N2FlZGYwHhcNMjUxMDA4MTQwMTE5WhcNMjUxMDA5MTQwMTE5WjAzMTEwLwYDVQQD
EygxYjMzMjIwM2QxMDYxYzBjYzViMDQzMzc2ZDc3Yjg2MDYwZjhkYWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEJWIIE3LlQ2l+iJL2PFRIcS0L6X
aqu/rnbTPC10nGRoWL1Rko+tY6tWl3WTGSMIoCnstrJKgsqSko+W+JJIyemHpS86
Dx1zCjDqqU+dvtEacAeIJ/6n778sH0MdFiYrvzkec9cTcpi5z9c9I4fQW3dw3kyL
72kY0DKVsidJJSkvpse6vbumTti3SdnjsBmLGUfkbjcXQE53T7IR8XT9Au3/SDPO
x+vox4S8yAdEzznAxt/cSO0rN8c4o8m2Cg/YcX3oroDF3FTYQMVNc2cFpdwCF6EW
7fZkclGqv4gcQXsDuJPGvLXqhM/n+ka2fIDtLIKPG5HBXqA83qZcPikSuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBszIgPRBhwMxbBDN213uGBg+Nr8MB8GA1UdIwQY
MBaAFLRktFI6iXK54vRqT0oWNOlwJ67fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1Yjct
ZmM2ZTc3ODg0MDU0LzEvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1YjctZmM2ZTc3ODg0MDU0
LzEvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjhtEGjI
I3fCHUsns29JkjwF+XUEswHxqa3gjw1LCaP5RAZwRoqprzkgJP16RBwhcunqKR1a
F8X3WmVrK3oopIPJQUssgHKPBEN9XmTfgr7pbwqqllLv8JErpOKEbDhEnMoKXwoF
XzpHHho7zwYBN36gYPjg8+D3SV1AUT0RsotgjoYAEUbdB1BAgQm5kvBZ5qe5Kteq
lhWuhRYT28Z7YY9FXsYJvoUVGIJu9iq+iy0LZaDlQHNlUwQsLUoG8xBqbUxf6SyV
27lWVkXG1/6CG1IkvkQFyvvIpC7xtztRvLShQSbA9tmvWGv/dS1UgXnqwqFxOcnN
VMwk9Cj4qU8Itw==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:35:54 2025 by rpki-client