Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
File: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft (raw, json)
Hash identifier: /r6Dnyzzy+poLu0Oal8IHChyL/eEmDoTxT1Lwzg91dU=
Subject key identifier: 3F:B9:6B:9A:A6:BC:F1:DB:C0:CC:9A:F9:97:83:EB:6D:3A:13:2F:A9
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 019A24E61DB5F87D927AD7F1EA636F9C13E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
Manifest number: 1703
Signing time: Mon 27 Oct 2025 09:00:51 +0000
Manifest this update: Mon 27 Oct 2025 09:00:51 +0000
Manifest next update: Tue 28 Oct 2025 09:00:51 +0000
Files and hashes: 1: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl (hash: DtWoxZ4KaM6Pu19x4khD//YleJVdreTtKXgQyexkOww=)
2: YDDERAGfQG_P54V0MZVSyMjIVyk.roa (hash: C7Lh2t1ISlqhYDOs1dQ1HUfrAnVeSgApqdOD+isddQ8=)
3: kjjmj3_M89wAaSRBkczk1njDNSI.roa (hash: dWOfnCb6lmXwSX8QD5pO5gwpjqkbkqa9qW8b5CDCAF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:1d:b5:f8:7d:92:7a:d7:f1:ea:63:6f:9c:13:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Oct 27 09:00:51 2025 GMT
Not After : Oct 28 09:00:51 2025 GMT
Subject: CN=3fb96b9aa6bcf1dbc0cc9af99783eb6d3a132fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:98:e6:f3:da:22:a4:34:49:ce:07:ac:56:f9:
ee:4e:6d:aa:56:15:33:63:77:54:fd:64:b0:9d:05:
b6:a5:66:3e:22:82:97:7b:9f:e2:b8:af:bb:c7:8e:
86:01:ab:51:52:58:2b:ec:1e:b6:09:76:4c:9d:c2:
5d:44:34:66:bc:9a:63:d3:c8:78:f5:bf:fc:bd:ce:
5c:fd:25:c2:17:fe:b9:40:82:77:5f:87:cd:51:06:
f7:5b:4f:50:1e:82:f0:4a:b7:7e:da:72:e5:c1:0a:
3a:74:28:d3:b1:c9:61:57:61:d9:8f:97:7d:31:f4:
64:d4:b4:ae:0c:8e:8e:c6:e8:13:12:a1:79:fd:5f:
a5:80:0f:bf:a5:b4:5d:c3:1b:30:98:fd:97:50:62:
ea:d7:1d:52:04:70:fb:74:56:d1:80:61:62:67:98:
3d:18:28:d0:a8:46:c8:c7:96:84:c5:4e:4d:8b:0f:
0a:d3:a4:59:74:4a:a2:1c:3a:87:00:25:49:2b:9a:
1c:01:36:2e:f3:6f:43:f6:ad:e2:e8:20:d6:f6:c5:
8f:7a:92:b7:26:97:eb:b8:37:8a:a1:15:36:28:87:
23:e8:39:86:da:1d:bb:bb:b9:c2:7f:df:7f:53:8c:
40:23:6d:63:17:c9:42:78:1d:a9:9e:f4:66:3b:17:
37:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B9:6B:9A:A6:BC:F1:DB:C0:CC:9A:F9:97:83:EB:6D:3A:13:2F:A9
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c2:55:c1:32:dd:3c:c4:52:aa:95:12:a2:ac:98:98:6c:08:
fa:66:e1:b5:47:18:56:69:0e:eb:4c:4a:da:a4:aa:f1:cb:1f:
bc:0d:7b:f4:b3:62:05:fc:5b:bc:b5:d0:94:70:f9:94:78:d3:
3f:0a:62:cd:9c:c4:4a:d3:e4:be:41:c7:7c:f9:49:d2:b6:dd:
27:10:77:92:8c:47:5f:62:31:6a:e2:54:92:e6:34:b5:27:45:
37:63:0c:5a:86:68:89:17:c2:b1:cb:b9:96:b7:40:cb:a1:a1:
f5:96:de:4b:c1:49:01:ee:47:78:a5:67:c0:ea:62:d5:37:f2:
aa:4a:61:40:98:19:65:4b:7e:c8:ef:81:19:89:01:55:ac:55:
e2:a1:f2:7b:58:92:2f:44:85:94:21:55:df:52:f3:53:47:73:
cb:d2:41:0c:84:e4:12:ec:51:fd:0e:5f:2e:f2:b6:38:e4:0b:
e2:ed:34:7a:18:df:9d:46:23:22:c6:a1:c3:ce:ab:93:b3:89:
9f:28:46:db:6e:7e:5e:9d:cf:eb:96:45:d9:d6:98:bd:ed:e1:
f2:75:c5:bd:0b:fc:18:68:13:7e:a8:87:2a:a0:e4:29:d2:d9:
ed:6a:db:d0:92:28:e8:9d:07:af:ae:cf:bd:cc:f3:61:6d:f6:
d1:c3:ff:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZok5h21+H2Setfx6mNvnBPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWYwY2IwNmE1YTQ3YjRkZGFjN2Y0ZDZkZmQ0NGFiYTRk
MzFmMmUwHhcNMjUxMDI3MDkwMDUxWhcNMjUxMDI4MDkwMDUxWjAzMTEwLwYDVQQD
EygzZmI5NmI5YWE2YmNmMWRiYzBjYzlhZjk5NzgzZWI2ZDNhMTMyZmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pjm89oipDRJzgesVvnuTm2qVhUz
Y3dU/WSwnQW2pWY+IoKXe5/iuK+7x46GAatRUlgr7B62CXZMncJdRDRmvJpj08h4
9b/8vc5c/SXCF/65QIJ3X4fNUQb3W09QHoLwSrd+2nLlwQo6dCjTsclhV2HZj5d9
MfRk1LSuDI6OxugTEqF5/V+lgA+/pbRdwxswmP2XUGLq1x1SBHD7dFbRgGFiZ5g9
GCjQqEbIx5aExU5Niw8K06RZdEqiHDqHACVJK5ocATYu829D9q3i6CDW9sWPepK3
JpfruDeKoRU2KIcj6DmG2h27u7nCf99/U4xAI21jF8lCeB2pnvRmOxc3dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+5a5qmvPHbwMya+ZeD6206Ey+pMB8GA1UdIwQY
MBaAFE1fDLBqWke03ax/TW39RKuk0x8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jYjgzMzktY2VlMy00MDM3LWJhY2Mt
ZGM4YjUyZTNlYTBhLzEvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9jYjgzMzktY2VlMy00MDM3LWJhY2MtZGM4YjUyZTNlYTBh
LzEvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMJVwTLd
PMRSqpUSoqyYmGwI+mbhtUcYVmkO60xK2qSq8csfvA179LNiBfxbvLXQlHD5lHjT
PwpizZzEStPkvkHHfPlJ0rbdJxB3koxHX2IxauJUkuY0tSdFN2MMWoZoiRfCscu5
lrdAy6Gh9ZbeS8FJAe5HeKVnwOpi1TfyqkphQJgZZUt+yO+BGYkBVaxV4qHye1iS
L0SFlCFV31LzU0dzy9JBDITkEuxR/Q5fLvK2OOQL4u00ehjfnUYjIsahw86rk7OJ
nyhG225+Xp3P65ZF2daYve3h8nXFvQv8GGgTfqiHKqDkKdLZ7Wrb0JIo6J0Hr67P
vczzYW320cP/dw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 14:31:06 2025 by rpki-client