Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft
File: T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft (raw, json)
Hash identifier: xQ2q/YbrarmTIs1ip1i/V8dgz06LUcKEC3akN1Gyeyg=
Subject key identifier: 22:FB:64:E9:16:CF:D8:A7:57:08:9D:91:39:5E:54:EB:6A:92:86:2C
Authority key identifier: 4F:49:FE:07:46:35:1C:87:C3:41:8A:CD:39:86:E7:62:8C:45:87:67
Certificate issuer: /CN=4f49fe0746351c87c3418acd3986e7628c458767
Certificate serial: 019A725C4B74347A69A7B9D66DEF76210118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft
Manifest number: 019C
Signing time: Tue 11 Nov 2025 10:00:42 +0000
Manifest this update: Tue 11 Nov 2025 10:00:42 +0000
Manifest next update: Wed 12 Nov 2025 10:00:42 +0000
Files and hashes: 1: T0n-B0Y1HIfDQYrNOYbnYoxFh2c.crl (hash: 9jMa/MWWdKzzFpVxdyFXBaAXKiQZ9fzdw7/1yB6DybE=)
2: d4w4xxcWDAqyLqbgWT3EJnLoy6o.roa (hash: brOB9FNZkSJh8TLBEcKXXcmOw1w3mH+eTmmqITITff0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:4b:74:34:7a:69:a7:b9:d6:6d:ef:76:21:01:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f49fe0746351c87c3418acd3986e7628c458767
Validity
Not Before: Nov 11 10:00:42 2025 GMT
Not After : Nov 12 10:00:42 2025 GMT
Subject: CN=22fb64e916cfd8a757089d91395e54eb6a92862c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:23:6f:94:c7:86:bb:64:77:11:fc:8d:fc:0f:
27:14:28:5c:6e:62:28:8f:2c:46:60:bb:4e:f8:3e:
37:b7:b8:32:c7:e4:de:b5:74:89:f9:f9:64:ab:cf:
f2:c9:d0:8b:01:93:3d:29:9c:5a:2c:0a:20:95:84:
b7:11:ea:c2:ed:54:89:cb:a6:16:c4:19:96:5a:44:
25:84:43:00:91:00:46:e2:dd:2b:fb:02:c0:cd:d8:
07:90:66:94:fe:98:1f:b8:b3:b3:aa:2d:1a:85:91:
0f:0b:ce:e5:4d:41:21:28:df:41:9c:08:c1:d8:f3:
aa:f8:b5:f3:62:b4:57:b5:73:0e:26:96:b7:f1:f6:
63:67:c7:be:37:14:41:cf:44:c8:43:6c:92:8c:da:
96:a0:14:56:52:78:08:50:e7:d6:a4:23:1f:03:b6:
d7:87:dc:59:67:54:3c:a1:2f:c6:14:35:18:f7:7c:
de:00:30:39:0f:10:a5:7e:22:8c:73:38:df:3c:04:
6c:01:fb:c8:10:bc:2c:3f:cd:da:ce:a9:f3:65:6c:
47:9f:54:81:9e:3c:d3:be:d2:84:2a:a7:3f:36:1f:
7c:f8:39:89:5b:9a:27:77:e1:00:f0:4a:c6:7a:02:
f1:f9:cd:a4:34:54:0a:7a:6c:1f:8a:04:cb:35:77:
7d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FB:64:E9:16:CF:D8:A7:57:08:9D:91:39:5E:54:EB:6A:92:86:2C
X509v3 Authority Key Identifier:
keyid:4F:49:FE:07:46:35:1C:87:C3:41:8A:CD:39:86:E7:62:8C:45:87:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:00:98:59:eb:8e:eb:32:47:da:7b:ff:cb:58:05:38:a8:cf:
be:09:e6:ea:c2:0c:a0:07:c9:35:a6:ad:04:ea:4d:2e:96:57:
03:04:26:e1:ff:3c:2b:fe:4a:0b:08:91:71:c1:a6:93:85:ba:
1f:5e:d7:c9:3c:bd:f5:12:87:58:c1:a1:28:df:2a:6e:c1:15:
6e:d8:10:db:23:29:7a:f5:b6:64:67:06:4c:13:90:cf:07:16:
96:7a:5e:bc:d7:89:ec:c0:b7:c7:69:9e:44:55:84:ea:85:8f:
ac:db:94:3b:ec:0e:28:82:54:6b:39:1f:45:d4:54:0e:22:24:
2f:38:fa:cf:67:31:02:10:06:06:1a:ce:f6:cd:53:e5:f3:b9:
0e:47:eb:f7:ee:2b:57:30:41:f7:7d:43:0a:7c:0f:df:37:4c:
75:68:e5:fc:1b:e9:99:68:7c:f7:6a:3d:63:c3:c0:58:f7:43:
32:62:90:ab:3f:74:38:a8:1d:71:63:c0:d4:41:fd:b1:74:74:
86:b6:d8:54:d1:f7:99:ec:91:f2:33:75:9d:f0:b2:9b:c1:da:
41:56:49:0a:b2:41:28:9e:2c:ae:06:59:fa:e1:8b:42:5b:ce:
80:02:98:78:3f:e8:be:72:61:94:b0:17:fc:1f:c2:65:76:ca:
2f:9a:95:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXEt0NHppp7nWbe92IQEYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNDlmZTA3NDYzNTFjODdjMzQxOGFjZDM5ODZlNzYyOGM0
NTg3NjcwHhcNMjUxMTExMTAwMDQyWhcNMjUxMTEyMTAwMDQyWjAzMTEwLwYDVQQD
EygyMmZiNjRlOTE2Y2ZkOGE3NTcwODlkOTEzOTVlNTRlYjZhOTI4NjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyNvlMeGu2R3EfyN/A8nFChcbmIo
jyxGYLtO+D43t7gyx+TetXSJ+flkq8/yydCLAZM9KZxaLAoglYS3EerC7VSJy6YW
xBmWWkQlhEMAkQBG4t0r+wLAzdgHkGaU/pgfuLOzqi0ahZEPC87lTUEhKN9BnAjB
2POq+LXzYrRXtXMOJpa38fZjZ8e+NxRBz0TIQ2ySjNqWoBRWUngIUOfWpCMfA7bX
h9xZZ1Q8oS/GFDUY93zeADA5DxClfiKMczjfPARsAfvIELwsP83azqnzZWxHn1SB
njzTvtKEKqc/Nh98+DmJW5ond+EA8ErGegLx+c2kNFQKemwfigTLNXd9wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCL7ZOkWz9inVwidkTleVOtqkoYsMB8GA1UdIwQY
MBaAFE9J/gdGNRyHw0GKzTmG52KMRYdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDBuLUIwWTFISWZEUVlyTk9ZYm5Zb3hGaDJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMGU5NWItYWYwYy00Nzk2LWFiZTIt
ZTdjYzg3MDIzOTYxLzEvVDBuLUIwWTFISWZEUVlyTk9ZYm5Zb3hGaDJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yMGU5NWItYWYwYy00Nzk2LWFiZTItZTdjYzg3MDIzOTYx
LzEvVDBuLUIwWTFISWZEUVlyTk9ZYm5Zb3hGaDJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwCYWeuO
6zJH2nv/y1gFOKjPvgnm6sIMoAfJNaatBOpNLpZXAwQm4f88K/5KCwiRccGmk4W6
H17XyTy99RKHWMGhKN8qbsEVbtgQ2yMpevW2ZGcGTBOQzwcWlnpevNeJ7MC3x2me
RFWE6oWPrNuUO+wOKIJUazkfRdRUDiIkLzj6z2cxAhAGBhrO9s1T5fO5Dkfr9+4r
VzBB931DCnwP3zdMdWjl/BvpmWh892o9Y8PAWPdDMmKQqz90OKgdcWPA1EH9sXR0
hrbYVNH3meyR8jN1nfCym8HaQVZJCrJBKJ4srgZZ+uGLQlvOgAKYeD/ovnJhlLAX
/B/CZXbKL5qV5g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:08 2025 by rpki-client