Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
File: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft (raw, json)
Hash identifier: Gw8PxiMO6IgFnBZt1qGonmzMhjPLdpKlWOHxczxTKag=
Subject key identifier: C3:12:81:98:41:DC:20:AA:A1:78:13:41:41:D1:C0:72:EB:6E:4D:E8
Authority key identifier: 4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
Certificate issuer: /CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Certificate serial: 019A71EED201DC2CDD05EC6AD12F35378BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
Manifest number: 16FA
Signing time: Tue 11 Nov 2025 08:01:07 +0000
Manifest this update: Tue 11 Nov 2025 08:01:07 +0000
Manifest next update: Wed 12 Nov 2025 08:01:07 +0000
Files and hashes: 1: PHU8bveJ4V86SqIQTMnWW43DqBE.roa (hash: 3OhBnf8f8HGM5ArwPPNt9UU72cQZdAdKTbSA4Z11k2Y=)
2: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl (hash: mijAGm4mN4TNWBpHSyw2WtP82CBLZp4kQMQrJdpp0vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d2:01:dc:2c:dd:05:ec:6a:d1:2f:35:37:8b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Validity
Not Before: Nov 11 08:01:07 2025 GMT
Not After : Nov 12 08:01:07 2025 GMT
Subject: CN=c312819841dc20aaa178134141d1c072eb6e4de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:e4:f4:c8:98:b7:9b:0a:2d:41:bf:a6:27:
f8:6b:16:0d:54:10:a5:93:fa:91:32:d7:62:24:b3:
33:1d:4c:b5:b2:ed:94:82:c2:ae:d0:cc:1e:ec:66:
c4:09:79:47:40:34:26:b4:41:60:58:eb:80:5c:3f:
dd:fe:d2:b5:f9:db:7d:e4:ad:98:f7:34:1b:a7:d2:
91:de:2b:6a:e2:05:19:5a:69:91:8d:80:67:83:ae:
bb:2e:7b:6e:78:8b:6d:b6:77:62:f9:82:bd:10:b6:
bd:ad:41:80:e9:5f:fd:6d:08:af:6a:52:8c:78:61:
c0:82:f4:b9:d9:44:e0:44:35:a4:17:0e:0f:05:1b:
a8:d7:d0:50:76:33:e8:9c:6f:81:0a:40:f6:a5:49:
10:b3:de:af:cf:86:68:6e:51:a0:6d:fa:bb:14:fd:
35:2d:5a:93:73:37:e1:22:f7:7a:16:64:b6:6f:ae:
65:0c:57:5c:a3:50:5b:7f:95:62:3d:10:44:39:ea:
78:25:4b:bd:79:fb:49:4b:bd:29:30:e1:e8:e5:d3:
de:50:6d:94:6d:ba:a8:60:95:75:b5:93:d2:e9:ca:
92:fb:bc:4d:8c:ed:07:2b:53:a6:2a:c6:03:03:5d:
67:34:af:5c:47:ac:80:a3:52:81:94:d5:22:1c:86:
b6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:12:81:98:41:DC:20:AA:A1:78:13:41:41:D1:C0:72:EB:6E:4D:E8
X509v3 Authority Key Identifier:
keyid:4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0b:e2:11:89:68:a1:ef:10:57:2b:a3:9a:a8:a7:3e:6b:bd:
31:56:61:73:e4:1e:b9:86:10:01:55:0e:56:e9:39:ed:6b:36:
91:4a:ae:85:74:3a:93:e2:3d:4b:59:a6:83:92:d3:52:73:d1:
a0:4e:a5:6b:e4:ca:23:ac:fb:5f:8a:aa:2e:8d:3e:02:99:dd:
60:01:7b:e4:c7:79:fa:98:27:42:cf:d2:b7:47:7f:d9:ff:e2:
aa:4f:40:9a:54:58:e5:6e:16:1a:a5:6e:f5:11:e1:b4:32:25:
41:cc:1c:2c:9f:19:b4:d1:b8:86:3f:b9:5e:57:ee:a2:e0:09:
7c:c2:82:57:3e:11:2e:83:5f:d4:12:ea:58:8e:8d:04:0d:b4:
7e:2c:df:8e:79:8b:88:fc:06:73:82:52:0b:91:b3:11:a2:68:
56:27:71:9c:d5:26:6e:9a:12:dc:02:bc:84:38:5b:89:34:2c:
41:26:cd:44:63:4a:17:08:73:b5:7f:a4:59:9b:fe:69:43:63:
97:46:68:f5:90:84:e6:56:01:25:46:e8:06:a5:21:78:66:78:
f8:d5:e4:5a:90:35:a3:ec:e0:46:d2:95:1d:70:70:6f:e6:cd:
56:ed:96:99:2a:e7:fb:9e:83:e5:de:2e:5e:15:1a:5d:0f:ee:
08:cb:33:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7tIB3CzdBexq0S81N4uuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOWQ2YzU1YmUxYmU4YTg0YWQyZGZkNWE3ZmZhNTg0OGY1
NGQ0MDkwHhcNMjUxMTExMDgwMTA3WhcNMjUxMTEyMDgwMTA3WjAzMTEwLwYDVQQD
EyhjMzEyODE5ODQxZGMyMGFhYTE3ODEzNDE0MWQxYzA3MmViNmU0ZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWjk9MiYt5sKLUG/pif4axYNVBCl
k/qRMtdiJLMzHUy1su2UgsKu0Mwe7GbECXlHQDQmtEFgWOuAXD/d/tK1+dt95K2Y
9zQbp9KR3itq4gUZWmmRjYBng667LntueItttndi+YK9ELa9rUGA6V/9bQivalKM
eGHAgvS52UTgRDWkFw4PBRuo19BQdjPonG+BCkD2pUkQs96vz4ZoblGgbfq7FP01
LVqTczfhIvd6FmS2b65lDFdco1Bbf5ViPRBEOep4JUu9eftJS70pMOHo5dPeUG2U
bbqoYJV1tZPS6cqS+7xNjO0HK1OmKsYDA11nNK9cR6yAo1KBlNUiHIa2IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMSgZhB3CCqoXgTQUHRwHLrbk3oMB8GA1UdIwQY
MBaAFEydbFW+G+ioStLf1af/pYSPVNQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEoxc1ZiNGI2S2hLMHRfVnBfLWxoSTlVMUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zZTc3NWQtYjExNy00MGRkLWFlNmEt
MmQ1MDJlOTU2YzA0LzEvVEoxc1ZiNGI2S2hLMHRfVnBfLWxoSTlVMUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zZTc3NWQtYjExNy00MGRkLWFlNmEtMmQ1MDJlOTU2YzA0
LzEvVEoxc1ZiNGI2S2hLMHRfVnBfLWxoSTlVMUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQviEYlo
oe8QVyujmqinPmu9MVZhc+QeuYYQAVUOVuk57Ws2kUquhXQ6k+I9S1mmg5LTUnPR
oE6la+TKI6z7X4qqLo0+ApndYAF75Md5+pgnQs/St0d/2f/iqk9AmlRY5W4WGqVu
9RHhtDIlQcwcLJ8ZtNG4hj+5XlfuouAJfMKCVz4RLoNf1BLqWI6NBA20fizfjnmL
iPwGc4JSC5GzEaJoVidxnNUmbpoS3AK8hDhbiTQsQSbNRGNKFwhztX+kWZv+aUNj
l0Zo9ZCE5lYBJUboBqUheGZ4+NXkWpA1o+zgRtKVHXBwb+bNVu2WmSrn+56D5d4u
XhUaXQ/uCMszYw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:05 2025 by rpki-client