Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File: TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier: X3t/+zKRovEkW0BrVb0KiSTBDtuP7o7Q+I/ViCULMpQ=
Subject key identifier: FB:64:C6:EB:7C:B3:1F:30:5A:CB:84:E9:2D:A4:B9:13:33:AD:00:F4
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer: /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial: 0199FD3482474321DA3B8B354D16B9AD330E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 16:01:40 +0000
Manifest this update: Sun 19 Oct 2025 16:01:40 +0000
Manifest next update: Mon 20 Oct 2025 16:01:40 +0000
Files and hashes: 1: 06AfR8ZbdQ5_MZMYhDQjdfTo_kA.roa (hash: EEGnzX0afqpfc3Kn5NnezY7IPw+uVu1JdUrzEk+iDpk=)
2: 1-g-A4hn_DsUBjrSOtmwbaV2sjfc.roa (hash: H/p8gImyoUDaEoDvhM9gHqspIznQXZjV/layX0BmypQ=)
3: 43zHI9RV_-UV0H8FudTqslXERT8.roa (hash: jjlOWoTue0eCIb3Fk8Ot7n6TxzmNBAQWzlFe/V95Bl4=)
4: NBksY7qoZYso21Vw3xYrZFLq5eE.roa (hash: uWalzSU+haa+ieD4qUwSSt1pReJEBtMSVsUZjZILj3c=)
5: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: TzyzNOmOmbqz4lBqtalWOqkiAYYbWvEoCLxWFW88vsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:82:47:43:21:da:3b:8b:35:4d:16:b9:ad:33:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Validity
Not Before: Oct 19 16:01:40 2025 GMT
Not After : Oct 20 16:01:40 2025 GMT
Subject: CN=fb64c6eb7cb31f305acb84e92da4b91333ad00f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:83:5e:b4:f0:5d:17:6e:62:1e:73:c4:36:91:
c5:13:e5:47:bb:28:b7:d6:28:4e:87:3a:04:a5:58:
17:f7:56:09:b4:a8:c1:76:26:74:62:2f:3c:da:ff:
fe:2f:c0:a4:5e:ac:f3:c8:a7:b4:b7:b9:66:46:2d:
f2:e7:00:2a:71:e4:5c:45:3a:0c:49:f7:3e:c6:22:
60:08:b2:79:af:85:c3:bd:c3:5f:84:3c:98:5e:15:
1f:be:06:b9:cf:48:b8:a2:14:fd:09:44:6b:ac:92:
e5:57:76:e4:cf:57:8f:a3:4d:77:cd:35:83:07:2a:
4c:23:68:1f:4a:f4:d9:9e:f4:8c:25:f5:db:48:95:
f4:c7:ad:e3:b6:14:61:62:59:89:fc:1b:70:8c:4e:
1f:d2:6d:f0:41:64:85:28:49:bd:b1:24:38:ce:6b:
2a:3c:ab:f8:a2:b2:9b:fc:57:68:4c:83:78:cd:cb:
ec:29:61:17:7c:0d:47:29:83:93:77:ed:49:f6:90:
4b:1f:0f:d8:aa:9d:0e:a9:b2:9c:a3:21:30:e9:86:
51:1c:04:46:4a:cb:16:24:9f:02:78:d6:88:b0:c1:
82:1d:30:cd:2f:e5:a7:dc:24:54:43:24:6c:6a:4a:
ca:3d:5b:3c:8f:94:53:41:d7:a0:14:57:f4:da:1d:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:64:C6:EB:7C:B3:1F:30:5A:CB:84:E9:2D:A4:B9:13:33:AD:00:F4
X509v3 Authority Key Identifier:
keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:66:ac:33:22:c2:cc:5b:bd:f0:a2:18:25:ec:69:43:2c:1c:
e1:2b:79:0e:96:62:2f:ba:ea:2c:63:28:9d:68:54:0a:01:80:
ab:a1:7c:89:34:18:29:13:ab:c2:74:7e:8a:6f:5e:68:eb:91:
29:ee:f0:0a:2d:02:34:83:a5:c2:07:6b:41:c4:41:d6:88:fd:
1b:2e:3b:27:a2:93:3f:b6:d0:76:e7:9b:f4:f1:fe:ce:c5:69:
45:22:f0:38:ef:f2:0b:0c:a4:f1:4a:10:dd:bb:6c:48:e1:f4:
0f:70:55:02:ad:1c:50:95:f7:dc:b0:d3:c3:fe:45:b0:3c:c3:
0f:66:ce:f9:30:ba:30:73:8b:ce:09:ce:41:4c:90:18:55:87:
39:1d:8a:b1:be:eb:3e:97:12:b0:35:54:f5:c1:3f:88:5d:88:
7a:f3:74:59:0f:17:15:2f:dc:3a:c2:53:35:31:06:c1:74:c5:
e6:dc:74:71:f8:6c:ed:0a:af:c7:26:1f:f5:71:85:a9:c9:2b:
08:fb:32:da:2f:bb:a2:69:8a:5a:a3:15:5e:90:de:c2:f2:49:
30:60:8e:fc:67:5d:20:a7:95:f3:5c:52:7f:39:3e:00:2d:4c:
58:83:6f:f1:55:cf:68:50:cb:d1:ab:9b:51:15:c5:e0:ae:eb:
02:76:00:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NIJHQyHaO4s1TRa5rTMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTExMzI0ZTg2OWJjNGNhNWVjOGJhZDBkM2RkZmY2ODU0
NDE5NzkwHhcNMjUxMDE5MTYwMTQwWhcNMjUxMDIwMTYwMTQwWjAzMTEwLwYDVQQD
EyhmYjY0YzZlYjdjYjMxZjMwNWFjYjg0ZTkyZGE0YjkxMzMzYWQwMGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oNetPBdF25iHnPENpHFE+VHuyi3
1ihOhzoEpVgX91YJtKjBdiZ0Yi882v/+L8CkXqzzyKe0t7lmRi3y5wAqceRcRToM
Sfc+xiJgCLJ5r4XDvcNfhDyYXhUfvga5z0i4ohT9CURrrJLlV3bkz1ePo013zTWD
BypMI2gfSvTZnvSMJfXbSJX0x63jthRhYlmJ/BtwjE4f0m3wQWSFKEm9sSQ4zmsq
PKv4orKb/FdoTIN4zcvsKWEXfA1HKYOTd+1J9pBLHw/Yqp0OqbKcoyEw6YZRHARG
SssWJJ8CeNaIsMGCHTDNL+Wn3CRUQyRsakrKPVs8j5RTQdegFFf02h0EswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtkxut8sx8wWsuE6S2kuRMzrQD0MB8GA1UdIwQY
MBaAFEyREyToabxMpeyLrQ093/aFRBl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yYjM4YjMtMTJmMS00MjQyLWFkYWUt
YjdkMWNhYzUxZTBjLzEvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8yYjM4YjMtMTJmMS00MjQyLWFkYWUtYjdkMWNhYzUxZTBj
LzEvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuWasMyLC
zFu98KIYJexpQywc4St5DpZiL7rqLGMonWhUCgGAq6F8iTQYKROrwnR+im9eaOuR
Ke7wCi0CNIOlwgdrQcRB1oj9Gy47J6KTP7bQdueb9PH+zsVpRSLwOO/yCwyk8UoQ
3btsSOH0D3BVAq0cUJX33LDTw/5FsDzDD2bO+TC6MHOLzgnOQUyQGFWHOR2Ksb7r
PpcSsDVU9cE/iF2IevN0WQ8XFS/cOsJTNTEGwXTF5tx0cfhs7QqvxyYf9XGFqckr
CPsy2i+7ommKWqMVXpDewvJJMGCO/GddIKeV81xSfzk+AC1MWINv8VXPaFDL0aub
URXF4K7rAnYAlA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:10:34 2025 by rpki-client