Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File: T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier: uQiSrkaXZdANCdG6tIQ01AwElZUm8qZ6XHZuizHNSNg=
Subject key identifier: 42:C7:10:9B:78:9C:68:A7:19:FD:A5:2B:FE:2A:B9:1F:2E:F9:9D:83
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer: /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial: 019A21E4F0EC15DFEDEBA0F43E6BA0DE3C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 19:00:43 +0000
Manifest this update: Sun 26 Oct 2025 19:00:43 +0000
Manifest next update: Mon 27 Oct 2025 19:00:43 +0000
Files and hashes: 1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: xO4UgAexiGcVNB9PV3EBrQdqFVwJWAmdat7GdqjvyFE=)
2: kfsN1HfyfK-NQ9iZIGxx8I0iebc.roa (hash: 471clsXqk9Nk68jCHR5a7ma3NzbA1DO/nClDnuoSJLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:f0:ec:15:df:ed:eb:a0:f4:3e:6b:a0:de:3c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Validity
Not Before: Oct 26 19:00:43 2025 GMT
Not After : Oct 27 19:00:43 2025 GMT
Subject: CN=42c7109b789c68a719fda52bfe2ab91f2ef99d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:54:ab:54:03:52:b3:db:6e:7e:96:26:65:53:
6c:4b:59:bc:6d:99:fe:29:c9:74:e6:18:c0:96:e2:
14:25:03:59:41:3f:9e:4f:d3:c4:28:57:11:34:52:
2c:1a:17:34:34:70:80:69:cf:ae:25:ae:10:5a:db:
7d:c5:51:21:7b:a5:78:a8:fb:47:82:b1:8b:ad:eb:
44:6e:64:83:6d:84:64:bc:2a:85:fa:05:14:3f:b0:
7e:59:1f:c2:03:43:b3:fe:99:7b:2e:2e:67:ad:e1:
54:64:12:a3:6f:8e:c8:15:20:14:c7:0f:a1:6b:55:
49:2c:1c:06:85:43:5b:93:ed:05:6f:da:19:ad:00:
63:0e:6f:d9:77:21:b4:b5:67:77:81:57:ce:a2:a3:
91:9d:e2:ca:1b:0d:cc:37:64:0b:97:a0:a8:38:db:
73:36:47:f0:4b:80:1e:de:a5:5d:d6:f6:aa:be:d2:
39:6d:9c:e3:c2:ba:89:ff:70:eb:87:8d:2b:4f:b5:
18:dc:06:00:f4:0b:e0:03:90:b4:5c:61:28:19:6d:
31:1e:88:e7:0b:12:fa:d2:0e:41:19:bf:69:41:b4:
e1:c0:f7:1f:3d:4f:7c:f5:bc:26:de:e1:59:91:32:
62:d2:55:ac:0d:fb:7c:e1:b1:8b:53:c0:b6:5a:c6:
78:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C7:10:9B:78:9C:68:A7:19:FD:A5:2B:FE:2A:B9:1F:2E:F9:9D:83
X509v3 Authority Key Identifier:
keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:08:f3:d1:fd:e2:64:15:21:53:44:81:fc:15:99:27:72:fc:
28:45:c1:62:74:68:94:18:7c:66:fe:49:e5:2e:9b:e1:6d:51:
a9:fd:a8:d7:29:06:65:32:9a:0c:7a:8b:19:f6:8f:ca:90:1d:
01:6c:80:03:11:27:2a:7c:48:44:52:20:b2:98:a0:66:75:84:
bb:05:00:08:14:8f:ad:58:68:6b:4c:7a:a5:71:a5:85:4b:db:
1d:b6:5d:dd:9b:fa:4f:49:53:60:6a:60:75:6a:20:f6:84:a3:
11:87:89:05:2d:32:6a:d7:99:53:66:3e:fc:4b:34:80:e5:d2:
cd:ba:3b:8e:6d:ef:fd:c2:42:a5:83:63:52:b8:8e:f1:e8:6c:
85:fc:d5:cf:ac:29:6e:95:e6:39:a9:c6:f9:b2:2b:0b:73:8c:
25:ed:36:a6:4a:0c:1b:29:9a:57:01:b6:fe:6f:b5:25:6a:41:
51:7c:ba:f2:97:7f:96:2f:10:fd:64:30:e1:8d:73:9a:1a:10:
13:d3:89:67:9e:a2:53:1f:b4:74:ef:94:8e:3c:44:2f:28:b1:
f0:3a:c3:9d:19:e9:c6:db:23:33:20:4c:a3:90:f5:78:85:13:
47:b2:0d:25:90:ff:6d:79:17:76:6c:4b:b4:bf:d8:b1:65:8a:
77:c3:3e:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoh5PDsFd/t66D0Pmug3jxHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNmE5NDQ0YWRhYTUyM2M1NzY4ZTlmNmJlMTQwNjUxODNh
YzIwYTgwHhcNMjUxMDI2MTkwMDQzWhcNMjUxMDI3MTkwMDQzWjAzMTEwLwYDVQQD
Eyg0MmM3MTA5Yjc4OWM2OGE3MTlmZGE1MmJmZTJhYjkxZjJlZjk5ZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FSrVANSs9tufpYmZVNsS1m8bZn+
Kcl05hjAluIUJQNZQT+eT9PEKFcRNFIsGhc0NHCAac+uJa4QWtt9xVEhe6V4qPtH
grGLretEbmSDbYRkvCqF+gUUP7B+WR/CA0Oz/pl7Li5nreFUZBKjb47IFSAUxw+h
a1VJLBwGhUNbk+0Fb9oZrQBjDm/ZdyG0tWd3gVfOoqORneLKGw3MN2QLl6CoONtz
NkfwS4Ae3qVd1vaqvtI5bZzjwrqJ/3Drh40rT7UY3AYA9AvgA5C0XGEoGW0xHojn
CxL60g5BGb9pQbThwPcfPU989bwm3uFZkTJi0lWsDft84bGLU8C2WsZ4zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELHEJt4nGinGf2lK/4quR8u+Z2DMB8GA1UdIwQY
MBaAFE9qlEStqlI8V2jp9r4UBlGDrCCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85YzRmYjAtYzQ3NS00MjA0LTk5ODct
MGE5MWNhZGJlZTY2LzEvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85YzRmYjAtYzQ3NS00MjA0LTk5ODctMGE5MWNhZGJlZTY2
LzEvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngjz0f3i
ZBUhU0SB/BWZJ3L8KEXBYnRolBh8Zv5J5S6b4W1Rqf2o1ykGZTKaDHqLGfaPypAd
AWyAAxEnKnxIRFIgspigZnWEuwUACBSPrVhoa0x6pXGlhUvbHbZd3Zv6T0lTYGpg
dWog9oSjEYeJBS0yateZU2Y+/Es0gOXSzbo7jm3v/cJCpYNjUriO8ehshfzVz6wp
bpXmOanG+bIrC3OMJe02pkoMGymaVwG2/m+1JWpBUXy68pd/li8Q/WQw4Y1zmhoQ
E9OJZ56iUx+0dO+UjjxELyix8DrDnRnpxtsjMyBMo5D1eIUTR7INJZD/bXkXdmxL
tL/YsWWKd8M+5Q==
-----END CERTIFICATE-----
Generated at Mon Oct 27 00:31:13 2025 by rpki-client