Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
File: TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json)
Hash identifier: oi+DoDEXQr8j1ve6lmP3HeEoJ1xEGz61Vd65e21vC8s=
Subject key identifier: 7C:F7:5F:91:13:52:AA:7C:89:42:C0:A6:71:A1:94:3A:31:0A:A7:A6
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial: 019A38A34F66BA6E5D696E21AE65CBC4D1BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
Manifest number: 1704
Signing time: Fri 31 Oct 2025 05:00:17 +0000
Manifest this update: Fri 31 Oct 2025 05:00:17 +0000
Manifest next update: Sat 01 Nov 2025 05:00:17 +0000
Files and hashes: 1: 6L1wb6rk6JRmH0kdueo5VHSR6sA.roa (hash: v/vwNDFKpqZbOrt+k+dslXb31bPIeE6v/BAFBhGcR04=)
2: Q1ID3jqh-PT7k00It8t9krcFrp0.roa (hash: 53/LWfxj68LBwdUpxNq1PQF6QDcY5qwZBSFj5Skh+H4=)
3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: T/ESIQcofLvPlf0Q3sm19zDcWW9EfiwHy0VT0rhUHEs=)
4: uAwoVI3dpDeVF6OQWKoCJ5jN8xY.roa (hash: tIErXtWim6v8+5J+f3v+yr7n8hWCWnrcd2Ahi85yzJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:38:a3:4f:66:ba:6e:5d:69:6e:21:ae:65:cb:c4:d1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Validity
Not Before: Oct 31 05:00:17 2025 GMT
Not After : Nov 1 05:00:17 2025 GMT
Subject: CN=7cf75f911352aa7c8942c0a671a1943a310aa7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:64:07:a6:89:df:ca:b2:71:da:15:34:5b:cc:
39:c3:60:f2:82:5a:7f:b3:cd:b6:1a:b8:ea:eb:60:
d3:53:5a:c0:e6:6e:6c:9a:91:b3:f9:26:25:a3:54:
81:14:50:2a:c8:3a:4f:ac:11:7e:dd:d9:01:91:27:
03:0e:29:6d:92:04:73:fd:cb:7e:5f:ae:87:da:88:
73:94:cc:0e:b3:a7:6c:cc:19:9e:6a:b7:70:ce:35:
8e:bd:60:75:dc:ae:9f:46:1f:12:01:e4:57:a3:68:
a5:2c:4b:cb:84:8f:db:57:fe:6c:ee:fc:63:6b:10:
f4:f6:0d:5a:d1:b0:b4:7c:b6:69:8d:cd:a4:ce:7f:
15:bf:69:e7:15:5d:68:d6:24:dc:62:43:37:19:f5:
8c:39:ae:ca:b1:c4:7b:ef:26:af:21:4c:29:0c:17:
97:8b:c1:ff:6e:cc:e4:f4:1e:09:29:d9:0f:56:4a:
b9:3d:b6:d2:c3:d7:3b:b0:d4:e8:5d:71:16:4d:31:
8b:b0:4c:22:68:b8:40:4b:a9:24:f0:75:ab:f6:25:
ee:64:47:98:b3:38:1c:a3:92:56:14:cc:54:37:40:
5c:50:04:6a:42:9b:2b:ca:23:9f:a7:fc:af:ae:df:
3f:90:ea:b9:d6:f4:e4:12:2e:84:70:b1:39:93:6b:
69:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F7:5F:91:13:52:AA:7C:89:42:C0:A6:71:A1:94:3A:31:0A:A7:A6
X509v3 Authority Key Identifier:
keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ca:34:8b:37:a5:88:87:03:c5:2f:86:fd:0c:c6:7b:fb:a8:
fe:28:fd:6e:d6:55:b9:f5:fe:b8:12:af:5a:d5:c7:71:c3:ed:
45:70:3a:83:43:b4:d7:a2:c9:a6:94:62:a9:2a:1f:6f:f8:50:
42:65:57:87:cb:45:0c:59:eb:3c:4b:66:11:4f:eb:a6:e4:a2:
e9:1f:8a:df:70:3c:25:f6:76:c8:40:9e:39:8b:e5:a1:b9:fd:
d3:07:4a:91:2f:9f:01:2c:b4:fe:20:91:29:e5:07:80:e5:29:
87:eb:7b:f5:86:22:55:42:bc:71:78:bd:f2:5e:24:25:5d:23:
f7:fc:45:a0:9a:5f:f1:54:0e:30:27:54:10:75:3b:27:fe:d5:
4b:c1:56:6f:a1:a3:20:77:55:7c:89:4d:79:2c:45:5b:a4:fc:
d2:6c:33:16:d1:da:c8:d0:c7:1d:d6:cd:46:55:83:10:99:dc:
bd:dc:51:a9:e4:bc:8e:22:a2:d3:a0:29:7e:48:4c:fe:04:32:
d4:df:76:62:cd:88:6c:cc:3a:43:b4:ba:9b:52:ac:ab:a9:f9:
da:a8:70:70:e0:99:a4:0c:d7:e0:5d:e2:06:1e:29:3e:df:17:
1f:54:d1:1b:bf:d9:4c:08:98:50:34:d5:fb:60:36:10:57:03:
1b:67:de:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZo4o09mum5daW4hrmXLxNG/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMmEyOTlmMTgyYTFmZDUxZDRiMDM2Mjk5N2FmN2FhYWUw
ZDZiZTkwHhcNMjUxMDMxMDUwMDE3WhcNMjUxMTAxMDUwMDE3WjAzMTEwLwYDVQQD
Eyg3Y2Y3NWY5MTEzNTJhYTdjODk0MmMwYTY3MWExOTQzYTMxMGFhN2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WQHponfyrJx2hU0W8w5w2Dyglp/
s822Grjq62DTU1rA5m5smpGz+SYlo1SBFFAqyDpPrBF+3dkBkScDDiltkgRz/ct+
X66H2ohzlMwOs6dszBmeardwzjWOvWB13K6fRh8SAeRXo2ilLEvLhI/bV/5s7vxj
axD09g1a0bC0fLZpjc2kzn8Vv2nnFV1o1iTcYkM3GfWMOa7KscR77yavIUwpDBeX
i8H/bszk9B4JKdkPVkq5PbbSw9c7sNToXXEWTTGLsEwiaLhAS6kk8HWr9iXuZEeY
szgco5JWFMxUN0BcUARqQpsryiOfp/yvrt8/kOq51vTkEi6EcLE5k2tp4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHz3X5ETUqp8iULApnGhlDoxCqemMB8GA1UdIwQY
MBaAFE4qKZ8YKh/VHUsDYpl696quDWvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kM2RmMjYtM2RiNS00NTM5LTgwMzAt
ZjJjZTc3ZTMxOTFlLzEvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kM2RmMjYtM2RiNS00NTM5LTgwMzAtZjJjZTc3ZTMxOTFl
LzEvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnso0izel
iIcDxS+G/QzGe/uo/ij9btZVufX+uBKvWtXHccPtRXA6g0O016LJppRiqSofb/hQ
QmVXh8tFDFnrPEtmEU/rpuSi6R+K33A8JfZ2yECeOYvlobn90wdKkS+fASy0/iCR
KeUHgOUph+t79YYiVUK8cXi98l4kJV0j9/xFoJpf8VQOMCdUEHU7J/7VS8FWb6Gj
IHdVfIlNeSxFW6T80mwzFtHayNDHHdbNRlWDEJncvdxRqeS8jiKi06ApfkhM/gQy
1N92Ys2IbMw6Q7S6m1Ksq6n52qhwcOCZpAzX4F3iBh4pPt8XH1TRG7/ZTAiYUDTV
+2A2EFcDG2fehA==
-----END CERTIFICATE-----
Generated at Fri Oct 31 07:56:25 2025 by rpki-client