Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: mq3RJzURHWkbnxcVkhYhO2OlefNID2WBROJ7Ocf56cM=
Subject key identifier: 48:ED:36:6F:1E:25:5D:A2:7D:18:B7:FD:E4:C6:D6:27:80:F6:2F:6F
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 01994D08C08C82E357B253AD673C3C5A74D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 05D1
Signing time: Mon 15 Sep 2025 11:00:43 +0000
Manifest this update: Mon 15 Sep 2025 11:00:43 +0000
Manifest next update: Tue 16 Sep 2025 11:00:43 +0000
Files and hashes: 1: JboF5duYkSjIw0cFCDow2D7hhYA.roa (hash: 5ee85IvEdLLZLBu0IK/0DK9QgLyt71g8oPTMmxnM7ss=)
2: bPHOfPhRt9UxNoPYUZyx6NkEcPE.roa (hash: l5CD77LRDYrviJN2I+kUm6dy7C8YOi2kiqH568j84ZE=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: SCQSo+INmo/LQaUNz/s0J2bcSf0+YyUeVlEfLSCcuj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:08:c0:8c:82:e3:57:b2:53:ad:67:3c:3c:5a:74:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Sep 15 11:00:43 2025 GMT
Not After : Sep 16 11:00:43 2025 GMT
Subject: CN=48ed366f1e255da27d18b7fde4c6d62780f62f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:18:39:a6:87:06:66:ef:bf:e2:b2:d3:13:
cc:c0:63:95:1b:3f:a2:8f:3a:32:3d:9f:2a:88:3a:
6d:d5:6c:c9:86:7c:cb:5a:f8:89:13:e8:21:01:07:
51:77:cb:51:f9:4b:27:8b:49:15:eb:ef:72:c0:b5:
62:63:81:40:5b:ee:4b:dc:e2:59:77:81:f7:5c:ae:
38:e1:4b:52:66:31:ad:03:66:70:c4:f1:dd:ea:81:
79:bc:e8:5a:03:d1:a5:3d:2d:71:9e:bd:83:ec:ec:
ef:11:24:81:c2:5a:9e:81:11:2e:89:80:3b:8a:6d:
fa:80:9e:78:4b:cb:ab:91:2f:91:ea:3a:40:75:a4:
36:35:22:a3:e0:16:90:57:09:d1:cc:a1:4e:ed:85:
56:d9:e8:68:17:ce:8a:b0:2d:16:33:44:62:07:46:
71:4c:21:31:0b:82:0d:84:bf:49:23:f0:76:6d:69:
24:13:fe:e6:0d:fe:b2:73:3a:b3:12:06:8c:b5:a8:
fc:99:60:84:dc:da:05:21:05:25:c8:15:c6:0c:69:
2d:c6:f3:c9:f1:cc:c7:12:33:5c:a7:9c:78:30:b0:
b8:80:d5:cb:ad:eb:6e:7b:69:f4:19:2f:c3:e8:ae:
8b:d6:35:de:2b:10:e6:0e:d8:82:7c:c6:a7:3e:57:
bf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:ED:36:6F:1E:25:5D:A2:7D:18:B7:FD:E4:C6:D6:27:80:F6:2F:6F
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:05:15:c8:9f:3b:01:b0:37:e8:d9:dc:3a:d5:7d:68:05:e4:
ff:3b:df:07:3e:97:f7:fe:06:d5:3d:7e:d8:3d:21:cb:ae:c8:
83:3a:6f:81:9d:4b:e8:87:61:e4:42:1e:53:a5:29:12:76:65:
0e:c9:3c:f4:c7:eb:e7:6b:4a:40:d5:df:d9:30:da:70:16:d3:
87:59:11:10:74:8d:b8:2e:dc:5c:98:21:9d:cc:f4:89:00:d7:
4d:ee:93:57:37:c5:77:b9:6c:ff:4e:bb:39:ba:84:b0:09:bc:
92:9a:dc:2e:70:39:54:fd:6a:0d:93:03:15:ca:79:c4:69:7b:
2f:e2:02:ce:a3:99:c2:f4:09:cb:29:3c:f7:cc:b6:87:a2:8f:
23:5c:ac:3a:42:85:e0:c3:96:60:45:11:7d:96:7a:eb:25:13:
8f:85:d4:23:ee:97:54:8a:8d:78:47:69:36:d5:cf:b4:27:51:
e3:b4:0e:cf:3e:5f:e2:8a:19:21:be:b2:62:b2:43:b9:40:47:
52:d2:f1:2b:de:c2:55:0c:5a:76:db:4c:22:b7:36:16:66:b2:
1f:51:21:ee:50:be:26:9e:30:b8:2b:50:d8:dc:2d:48:cd:49:
e2:2f:83:3f:f7:3d:94:3d:3f:25:dc:4d:44:5e:80:18:08:7e:
35:d6:eb:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlNCMCMguNXslOtZzw8WnTWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YzgxNGZmY2E1MzEwODYyYTIyMjRmMGFmZDkwY2FhOTZh
YzBiNTQwHhcNMjUwOTE1MTEwMDQzWhcNMjUwOTE2MTEwMDQzWjAzMTEwLwYDVQQD
Eyg0OGVkMzY2ZjFlMjU1ZGEyN2QxOGI3ZmRlNGM2ZDYyNzgwZjYyZjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/kYOaaHBmbvv+Ky0xPMwGOVGz+i
jzoyPZ8qiDpt1WzJhnzLWviJE+ghAQdRd8tR+Usni0kV6+9ywLViY4FAW+5L3OJZ
d4H3XK444UtSZjGtA2ZwxPHd6oF5vOhaA9GlPS1xnr2D7OzvESSBwlqegREuiYA7
im36gJ54S8urkS+R6jpAdaQ2NSKj4BaQVwnRzKFO7YVW2ehoF86KsC0WM0RiB0Zx
TCExC4INhL9JI/B2bWkkE/7mDf6yczqzEgaMtaj8mWCE3NoFIQUlyBXGDGktxvPJ
8czHEjNcp5x4MLC4gNXLretue2n0GS/D6K6L1jXeKxDmDtiCfManPle/pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjtNm8eJV2ifRi3/eTG1ieA9i9vMB8GA1UdIwQY
MBaAFLTIFP/KUxCGKiIk8K/ZDKqWrAtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAt
ZjQ2N2IyZjQyYWY2LzEvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAtZjQ2N2IyZjQyYWY2
LzEvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgUVyJ87
AbA36NncOtV9aAXk/zvfBz6X9/4G1T1+2D0hy67IgzpvgZ1L6Idh5EIeU6UpEnZl
Dsk89Mfr52tKQNXf2TDacBbTh1kREHSNuC7cXJghncz0iQDXTe6TVzfFd7ls/067
ObqEsAm8kprcLnA5VP1qDZMDFcp5xGl7L+ICzqOZwvQJyyk898y2h6KPI1ysOkKF
4MOWYEURfZZ66yUTj4XUI+6XVIqNeEdpNtXPtCdR47QOzz5f4ooZIb6yYrJDuUBH
UtLxK97CVQxadttMIrc2FmayH1Eh7lC+Jp4wuCtQ2NwtSM1J4i+DP/c9lD0/JdxN
RF6AGAh+NdbrKw==
-----END CERTIFICATE-----
Generated at Mon Sep 15 19:04:24 2025 by rpki-client