Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
File: tRhBzcn2NZTd3CulmkATMYK1efo.mft (raw, json)
Hash identifier: AM6wKwEDYUNmR22loW6L/TAneqeoKrHVVhvrelT7/TQ=
Subject key identifier: C9:D9:77:7D:7C:32:A7:F6:2F:1D:9B:76:06:D1:BE:0A:EA:52:31:27
Authority key identifier: B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
Certificate issuer: /CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Certificate serial: 019A24E58B6E5DA9A21F33E3CE2F9BAF3880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 09:00:14 +0000
Manifest this update: Mon 27 Oct 2025 09:00:14 +0000
Manifest next update: Tue 28 Oct 2025 09:00:14 +0000
Files and hashes: 1: iQxCTqJc23IztH0qMtXGhii78xc.roa (hash: b/32KuHdgss/tEEpqliyL9nGxIGy3IsYTip4QREYlPc=)
2: tRhBzcn2NZTd3CulmkATMYK1efo.crl (hash: 3L3KWHf4zRMaJCpGdBn6ZHkVOMZ/pvtvCKfCXjfy6jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:8b:6e:5d:a9:a2:1f:33:e3:ce:2f:9b:af:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Validity
Not Before: Oct 27 09:00:14 2025 GMT
Not After : Oct 28 09:00:14 2025 GMT
Subject: CN=c9d9777d7c32a7f62f1d9b7606d1be0aea523127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:83:19:08:2c:8f:b9:53:35:e6:d6:74:b6:
bc:b0:7f:7f:19:a5:12:56:12:d6:d5:e3:12:44:75:
4c:77:c8:ad:22:61:79:26:5d:af:ff:1e:9e:16:72:
7b:90:02:a3:5c:e2:cc:a8:36:c8:4f:86:f5:e2:0a:
43:4d:f0:df:b8:4e:06:5f:6a:be:4d:c2:52:82:c8:
ff:fb:fd:13:e4:c2:99:86:ea:eb:65:7b:7c:03:5b:
fd:e0:da:d3:37:9b:b3:45:8c:4f:54:3b:4f:56:7a:
a0:71:ce:48:ce:89:a9:81:32:a5:07:5e:93:d2:a9:
a4:8a:71:43:6f:29:7c:04:52:40:98:4f:25:50:6e:
26:6d:ef:c4:b4:61:57:4e:5e:d3:88:6f:d2:b6:62:
20:d6:fe:58:25:fe:36:13:48:10:c8:bb:cd:8d:4c:
33:c8:3b:d1:aa:6c:3c:a5:13:5c:ad:34:83:2e:91:
17:b5:00:3b:c0:7d:49:f1:61:b0:d3:b0:4e:49:86:
0f:c6:7d:96:d9:cc:d7:f2:ae:7a:59:f1:c2:7a:6c:
77:7c:92:02:84:0c:16:5d:02:b6:c1:a4:11:b7:86:
19:17:58:30:42:74:cf:ad:cd:57:e8:94:87:ed:21:
03:78:48:d9:70:71:42:5d:ae:2c:43:51:7b:67:2b:
b3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D9:77:7D:7C:32:A7:F6:2F:1D:9B:76:06:D1:BE:0A:EA:52:31:27
X509v3 Authority Key Identifier:
keyid:B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:46:2b:c1:4d:bd:66:0e:fd:60:9b:38:d0:eb:73:4e:e4:95:
ad:7f:15:53:85:70:9e:50:0a:89:08:98:8d:64:98:90:1e:be:
1a:6d:a6:7d:34:ca:0d:a1:67:b8:ad:2a:e5:0b:5f:ae:c0:1e:
0b:9b:f1:7c:60:86:0b:ee:13:72:16:41:c6:20:f3:03:19:6e:
e5:70:b0:57:ef:64:24:59:a2:78:8f:a0:d0:7f:ae:61:a8:d1:
d9:c7:6a:18:08:47:88:3c:ba:71:53:89:e8:70:a6:32:61:84:
af:e0:ae:23:99:2c:7d:f3:46:14:e9:df:97:00:10:de:67:3b:
6f:60:96:99:7b:b3:28:3b:91:85:d4:56:ab:a3:5f:22:ce:e3:
46:08:1d:af:63:20:2b:cc:9b:85:10:76:5c:5e:05:a2:60:71:
f0:3a:f0:cd:34:69:57:08:55:db:c5:fe:2e:b1:01:8c:42:3f:
ae:bd:54:51:6b:f0:6f:10:98:52:f8:31:c4:3e:97:f7:61:ac:
69:1b:68:60:bf:0b:9b:55:18:de:ef:ca:e0:55:83:eb:51:06:
d5:9b:71:bf:0d:e4:d8:1e:4a:d1:bb:95:04:38:e6:e5:86:09:
77:c3:2b:4f:9d:2c:d2:aa:be:df:d9:cb:6e:bd:d5:d8:7f:73:
01:8a:51:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZok5YtuXamiHzPjzi+brziAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MTg0MWNkYzlmNjM1OTRkZGRjMmJhNTlhNDAxMzMxODJi
NTc5ZmEwHhcNMjUxMDI3MDkwMDE0WhcNMjUxMDI4MDkwMDE0WjAzMTEwLwYDVQQD
EyhjOWQ5Nzc3ZDdjMzJhN2Y2MmYxZDliNzYwNmQxYmUwYWVhNTIzMTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprGDGQgsj7lTNebWdLa8sH9/GaUS
VhLW1eMSRHVMd8itImF5Jl2v/x6eFnJ7kAKjXOLMqDbIT4b14gpDTfDfuE4GX2q+
TcJSgsj/+/0T5MKZhurrZXt8A1v94NrTN5uzRYxPVDtPVnqgcc5IzompgTKlB16T
0qmkinFDbyl8BFJAmE8lUG4mbe/EtGFXTl7TiG/StmIg1v5YJf42E0gQyLvNjUwz
yDvRqmw8pRNcrTSDLpEXtQA7wH1J8WGw07BOSYYPxn2W2czX8q56WfHCemx3fJIC
hAwWXQK2waQRt4YZF1gwQnTPrc1X6JSH7SEDeEjZcHFCXa4sQ1F7ZyuzJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnZd318Mqf2Lx2bdgbRvgrqUjEnMB8GA1UdIwQY
MBaAFLUYQc3J9jWU3dwrpZpAEzGCtXn6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJoQnpjbjJOWlRkM0N1bG1rQVRNWUsxZWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9mMGFmNjEtOGNjYy00YTNiLTkwMTAt
NjkxMGYzOTlkMzhmLzEvdFJoQnpjbjJOWlRkM0N1bG1rQVRNWUsxZWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9mMGFmNjEtOGNjYy00YTNiLTkwMTAtNjkxMGYzOTlkMzhm
LzEvdFJoQnpjbjJOWlRkM0N1bG1rQVRNWUsxZWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0YrwU29
Zg79YJs40OtzTuSVrX8VU4VwnlAKiQiYjWSYkB6+Gm2mfTTKDaFnuK0q5QtfrsAe
C5vxfGCGC+4TchZBxiDzAxlu5XCwV+9kJFmieI+g0H+uYajR2cdqGAhHiDy6cVOJ
6HCmMmGEr+CuI5ksffNGFOnflwAQ3mc7b2CWmXuzKDuRhdRWq6NfIs7jRggdr2Mg
K8ybhRB2XF4FomBx8DrwzTRpVwhV28X+LrEBjEI/rr1UUWvwbxCYUvgxxD6X92Gs
aRtoYL8Lm1UY3u/K4FWD61EG1Ztxvw3k2B5K0buVBDjm5YYJd8MrT50s0qq+39nL
br3V2H9zAYpRyQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 18:13:51 2025 by rpki-client