Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
File: t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json)
Hash identifier: ugDbjuBLZeNhlW03zkRCAwiPMXo8XoH1HXu/PgvqBzw=
Subject key identifier: 83:66:F3:2F:B9:4C:FE:2F:25:A2:77:5B:5E:EE:B5:09:A6:11:05:50
Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
Certificate issuer: /CN=b754b22c5540508d9629a311ef1e83543657c4ee
Certificate serial: 019A21ADA60FD4D64E48AC145C4ADCF95D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
Manifest number: 0206
Signing time: Sun 26 Oct 2025 18:00:19 +0000
Manifest this update: Sun 26 Oct 2025 18:00:19 +0000
Manifest next update: Mon 27 Oct 2025 18:00:19 +0000
Files and hashes: 1: MhKg3zFeMWwt4nczszDXPl3rkdw.roa (hash: xWL0qt2yK+b8YqGsFpZ+gVcRydDsCjYBfNBZRZ/XtUk=)
2: gOfoa2pPlaad7aZSKOqxTDZnDnw.roa (hash: zWq54+d7Qdr/RiwPHS0cYGrr+8mtcUBj3tD3UQ2c23s=)
3: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: +xDPIzJxAO0DZ9QsTVGoUJey7Ff5WywpTH2nhZ2dwqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:a6:0f:d4:d6:4e:48:ac:14:5c:4a:dc:f9:5d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee
Validity
Not Before: Oct 26 18:00:19 2025 GMT
Not After : Oct 27 18:00:19 2025 GMT
Subject: CN=8366f32fb94cfe2f25a2775b5eeeb509a6110550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:c3:86:2b:3a:e5:6c:95:bf:8e:aa:40:72:
8b:1a:1e:54:87:1e:c8:a0:ab:18:a9:be:9d:db:6b:
69:b7:55:37:5d:46:56:0e:f9:ed:ae:cf:05:8b:79:
bf:48:1a:2d:61:1a:9e:d8:9d:8d:6d:64:33:72:2b:
8f:72:90:25:81:6d:e2:ac:43:91:db:05:95:79:c9:
a8:05:08:6b:07:6a:b6:15:1c:d9:21:ca:82:70:50:
2b:c3:db:f0:3f:03:03:5a:0a:a4:12:a3:2c:de:2f:
f8:ad:fb:9e:89:3a:ab:93:0b:72:5d:24:ce:9c:ab:
4b:14:24:8a:0b:46:f2:72:55:d8:18:42:32:82:7a:
2e:aa:a7:4b:cb:4b:b9:b3:07:94:e5:3e:fd:6a:8b:
43:c1:da:20:77:d4:22:f7:5b:1a:52:88:f4:3a:38:
92:10:73:73:78:1d:b0:fc:41:b5:82:d1:20:3b:52:
c7:09:ef:d9:ef:ca:6c:73:49:55:0d:2e:e2:94:22:
0b:71:d9:62:35:65:f4:fa:0d:b5:47:73:d0:6d:54:
a9:d6:23:06:29:35:00:c5:a0:27:dc:1c:13:64:9b:
c6:be:73:75:fd:9a:79:15:3c:e6:11:49:76:09:24:
50:f5:9e:2e:72:bd:9b:92:8a:5b:ba:3f:4f:0f:9a:
17:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:66:F3:2F:B9:4C:FE:2F:25:A2:77:5B:5E:EE:B5:09:A6:11:05:50
X509v3 Authority Key Identifier:
keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:62:fb:b6:65:9c:fa:94:b2:c8:62:ef:1f:95:85:5d:f1:a9:
7f:88:12:a6:03:63:6d:15:05:53:0c:92:f9:cc:b1:c7:bf:2a:
ea:25:dd:e9:13:fc:dc:28:f3:ae:fc:64:d2:9d:61:7f:96:a0:
45:3d:80:e2:cc:31:30:10:78:df:4f:10:87:81:e6:14:e7:34:
51:d7:ec:83:7e:75:69:64:85:56:cd:8b:f8:0a:6b:39:ef:1d:
18:e0:90:f2:60:83:85:1f:8b:60:e0:30:97:82:56:a3:70:07:
6a:48:f4:bc:79:87:d8:d9:84:63:9e:db:4b:9f:06:a9:28:4d:
e5:0f:da:b9:3b:63:a0:19:b6:fc:f2:ac:72:46:cc:e1:04:63:
c6:1e:9c:57:15:24:de:db:64:71:48:df:28:90:03:85:17:0b:
fb:03:4c:7f:a5:0c:aa:03:0c:3a:01:8e:7b:1c:fb:8e:57:8e:
ca:62:7d:cd:81:d5:89:c8:59:70:45:2c:af:bf:b3:ec:0b:20:
ca:b0:24:43:30:73:1b:b4:df:a2:45:66:0f:2a:35:96:6f:96:
8a:d1:c8:8c:0f:04:e4:b4:c7:43:76:96:16:5e:c0:ed:a8:6d:
9b:3b:df:ab:e6:52:4c:90:f5:20:07:df:ac:a4:62:d0:88:23:
a5:5a:d2:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohraYP1NZOSKwUXErc+V1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NTRiMjJjNTU0MDUwOGQ5NjI5YTMxMWVmMWU4MzU0MzY1
N2M0ZWUwHhcNMjUxMDI2MTgwMDE5WhcNMjUxMDI3MTgwMDE5WjAzMTEwLwYDVQQD
Eyg4MzY2ZjMyZmI5NGNmZTJmMjVhMjc3NWI1ZWVlYjUwOWE2MTEwNTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgnDhis65WyVv46qQHKLGh5Uhx7I
oKsYqb6d22tpt1U3XUZWDvntrs8Fi3m/SBotYRqe2J2NbWQzciuPcpAlgW3irEOR
2wWVecmoBQhrB2q2FRzZIcqCcFArw9vwPwMDWgqkEqMs3i/4rfueiTqrkwtyXSTO
nKtLFCSKC0byclXYGEIygnouqqdLy0u5sweU5T79aotDwdogd9Qi91saUoj0OjiS
EHNzeB2w/EG1gtEgO1LHCe/Z78psc0lVDS7ilCILcdliNWX0+g21R3PQbVSp1iMG
KTUAxaAn3BwTZJvGvnN1/Zp5FTzmEUl2CSRQ9Z4ucr2bkopbuj9PD5oXdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINm8y+5TP4vJaJ3W17utQmmEQVQMB8GA1UdIwQY
MBaAFLdUsixVQFCNlimjEe8eg1Q2V8TuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iNTUxM2EtYmE2OS00OGM0LTk1ZWUt
NTZlYzEzMjY5YTFjLzEvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9iNTUxM2EtYmE2OS00OGM0LTk1ZWUtNTZlYzEzMjY5YTFj
LzEvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2L7tmWc
+pSyyGLvH5WFXfGpf4gSpgNjbRUFUwyS+cyxx78q6iXd6RP83Cjzrvxk0p1hf5ag
RT2A4swxMBB4308Qh4HmFOc0Udfsg351aWSFVs2L+AprOe8dGOCQ8mCDhR+LYOAw
l4JWo3AHakj0vHmH2NmEY57bS58GqShN5Q/auTtjoBm2/PKsckbM4QRjxh6cVxUk
3ttkcUjfKJADhRcL+wNMf6UMqgMMOgGOexz7jleOymJ9zYHVichZcEUsr7+z7Asg
yrAkQzBzG7TfokVmDyo1lm+WitHIjA8E5LTHQ3aWFl7A7ahtmzvfq+ZSTJD1IAff
rKRi0IgjpVrS0Q==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:53 2025 by rpki-client