Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: a2Zv60qCji03utAMP0AX780eQy/drL1P5+XOfIfV774=
Subject key identifier: 19:97:85:AE:A9:44:6D:F4:36:74:43:FB:BA:A8:46:23:8E:A5:E0:0B
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 019A7112A7331BCB708FC1FEBBE01B355C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 118F
Signing time: Tue 11 Nov 2025 04:00:39 +0000
Manifest this update: Tue 11 Nov 2025 04:00:39 +0000
Manifest next update: Wed 12 Nov 2025 04:00:39 +0000
Files and hashes: 1: 7oTB9A6lOtEjQEsvoA-hCkKE_kU.roa (hash: CgqHCnrNWT0vsnk0wl9rl++PdFLv2TYzmWCCrA7fBCY=)
2: MfO1xzaCGvzf-Tdk8sWipKC3t-8.roa (hash: TSPXY1leU0O4gZ6iWESlm1g1sCeRvbsOHxtBl16fH1g=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: d7GjGuWKho35sCCTXDoyXdBOUerHwYcD+2TOtqAV4fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a7:33:1b:cb:70:8f:c1:fe:bb:e0:1b:35:5c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Nov 11 04:00:39 2025 GMT
Not After : Nov 12 04:00:39 2025 GMT
Subject: CN=199785aea9446df4367443fbbaa846238ea5e00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:ef:f6:56:54:4c:63:f2:83:59:d8:bb:74:
0e:fb:d5:46:f8:fd:a0:24:7d:b1:47:d4:fa:89:a4:
cf:d5:fa:75:f5:55:55:62:80:f1:4d:a2:5f:8e:23:
a1:71:8f:85:c6:af:0d:ec:6f:16:06:6b:1e:95:e8:
6a:a4:5b:3a:9c:24:70:4b:c5:44:17:e0:41:5a:c3:
1e:ec:d0:d6:5b:82:39:f8:2c:7c:4a:dc:19:f4:62:
bd:cc:ef:c7:ae:aa:43:95:66:1d:b6:f6:1c:2b:bd:
d8:f6:65:96:6e:4e:ae:16:ac:2f:c0:e1:36:fb:b8:
89:23:35:ec:06:bc:6e:46:f6:fe:42:65:22:2a:ca:
28:33:4b:97:c0:bf:73:8a:da:17:1a:df:77:82:e3:
cc:7b:0f:3e:3d:fe:35:ec:05:41:d0:3d:3c:c0:e4:
ca:81:97:f7:70:a6:56:1f:3c:7c:c1:08:f6:2e:d3:
c3:9b:79:de:96:8b:22:49:34:1f:82:d6:80:bf:e3:
5a:eb:69:d1:0d:3c:25:34:92:59:a7:35:04:38:87:
bc:82:52:86:9c:71:9e:b3:bd:a9:01:86:58:59:19:
c8:76:8f:1b:90:35:e7:c5:cf:89:68:26:e2:9c:b7:
ca:70:12:30:c2:d8:63:91:2e:0c:4c:1f:d2:78:f8:
71:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:97:85:AE:A9:44:6D:F4:36:74:43:FB:BA:A8:46:23:8E:A5:E0:0B
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:87:08:68:78:60:50:d6:42:0e:10:aa:39:79:0f:2d:7d:df:
eb:99:ee:8d:ab:72:b0:74:8b:0c:e1:6e:92:69:e7:38:53:c5:
ca:92:4a:6f:3e:46:f0:1f:0c:21:91:08:c1:1a:fb:c9:53:c1:
73:08:92:aa:9e:61:33:0a:06:5c:eb:50:e7:b2:a6:60:4b:fe:
99:d3:3e:f1:8d:31:31:2f:b0:2e:a5:94:6b:b3:86:8f:4a:ce:
50:0f:af:84:98:79:8d:c1:7f:29:04:f1:31:02:c0:eb:95:3e:
e7:9d:0d:7b:1c:80:71:79:b5:b5:76:74:05:37:c1:c7:82:05:
de:f2:70:ac:d6:43:c0:7d:22:10:25:3a:91:1f:65:9f:f8:98:
2f:8e:80:6b:0d:48:76:b9:58:e9:02:80:80:19:56:57:e1:16:
58:e4:ba:8b:5f:2a:01:fe:74:6e:42:77:67:5c:11:24:e7:9b:
08:da:b1:d6:3d:03:1d:61:73:c2:43:1e:13:a8:b4:b5:9c:3f:
0a:d7:25:0f:ed:4f:48:81:a1:4e:3b:21:83:50:71:5d:9a:46:
15:8e:3e:df:f4:05:3e:dd:9d:60:9e:5c:b3:f1:8b:2e:34:94:
e5:75:67:a7:1d:82:1d:23:d2:da:38:61:ce:1e:61:5e:4c:b2:
ef:55:2d:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEqczG8twj8H+u+AbNVxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MjBhMjA0ZjRlMDljYzgzYTYyNThkN2FhNDRmN2QyZjBm
YTQ0YTAwHhcNMjUxMTExMDQwMDM5WhcNMjUxMTEyMDQwMDM5WjAzMTEwLwYDVQQD
EygxOTk3ODVhZWE5NDQ2ZGY0MzY3NDQzZmJiYWE4NDYyMzhlYTVlMDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptTv9lZUTGPyg1nYu3QO+9VG+P2g
JH2xR9T6iaTP1fp19VVVYoDxTaJfjiOhcY+Fxq8N7G8WBmselehqpFs6nCRwS8VE
F+BBWsMe7NDWW4I5+Cx8StwZ9GK9zO/HrqpDlWYdtvYcK73Y9mWWbk6uFqwvwOE2
+7iJIzXsBrxuRvb+QmUiKsooM0uXwL9zitoXGt93guPMew8+Pf417AVB0D08wOTK
gZf3cKZWHzx8wQj2LtPDm3nelosiSTQfgtaAv+Na62nRDTwlNJJZpzUEOIe8glKG
nHGes72pAYZYWRnIdo8bkDXnxc+JaCbinLfKcBIwwthjkS4MTB/SePhxUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmXha6pRG30NnRD+7qoRiOOpeALMB8GA1UdIwQY
MBaAFLUgogT04JzIOmJY16pE99Lw+kSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAt
YjhiMWU0YjRlY2I5LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAtYjhiMWU0YjRlY2I5
LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYcIaHhg
UNZCDhCqOXkPLX3f65nujatysHSLDOFukmnnOFPFypJKbz5G8B8MIZEIwRr7yVPB
cwiSqp5hMwoGXOtQ57KmYEv+mdM+8Y0xMS+wLqWUa7OGj0rOUA+vhJh5jcF/KQTx
MQLA65U+550NexyAcXm1tXZ0BTfBx4IF3vJwrNZDwH0iECU6kR9ln/iYL46Aaw1I
drlY6QKAgBlWV+EWWOS6i18qAf50bkJ3Z1wRJOebCNqx1j0DHWFzwkMeE6i0tZw/
CtclD+1PSIGhTjshg1BxXZpGFY4+3/QFPt2dYJ5cs/GLLjSU5XVnpx2CHSPS2jhh
zh5hXkyy71Ut6g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:23 2025 by rpki-client