Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
File: TOdM9jcjwCadUoOxBlghrzhKmiY.mft (raw, json)
Hash identifier: lGVNM4TA2DOc5jcXS7KUawM9oh9MmWHsSNQqoQicr2s=
Subject key identifier: F1:C7:39:34:82:4F:1B:BE:94:9B:0B:7A:6D:D4:AE:35:DD:09:14:25
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial: 019A72264CA921345E9BDE27C2F5DAF221B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
Manifest number: 07B6
Signing time: Tue 11 Nov 2025 09:01:43 +0000
Manifest this update: Tue 11 Nov 2025 09:01:43 +0000
Manifest next update: Wed 12 Nov 2025 09:01:43 +0000
Files and hashes: 1: CEobCVyOq89vMXgU83DpMwfT0Wo.roa (hash: DcQa6f54mwH80zIkbXchOx9QQQsb0gD6KDYchnHbpMk=)
2: HmvWFjOJ5QNe_0VBD7eTmwN-1XQ.roa (hash: StcAstNQR/UIdmTZ6Q1iuGPLcyfmxWT20PZ/h6s9A5g=)
3: TOdM9jcjwCadUoOxBlghrzhKmiY.crl (hash: H3LrxOW9FO6C/XEE/KkpSbsiJI361CA+swSGd4wVYUc=)
4: ysuILm8GTM9rr0tx4VWy1ub_M3Y.roa (hash: wnzsKo97TxUOdXYRLd6GXvYrsFQQtPcVycGoHAT6hoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4c:a9:21:34:5e:9b:de:27:c2:f5:da:f2:21:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
Validity
Not Before: Nov 11 09:01:43 2025 GMT
Not After : Nov 12 09:01:43 2025 GMT
Subject: CN=f1c73934824f1bbe949b0b7a6dd4ae35dd091425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:88:0e:b1:b9:f5:df:62:a9:37:bd:72:84:8b:
09:c8:1b:8c:1e:04:c6:3d:10:83:90:d1:84:af:04:
3e:49:a0:fa:c1:8a:64:30:a4:0d:bd:0e:bf:bc:0b:
fb:6a:f7:bd:38:b5:e3:a4:8e:db:69:8c:60:f3:96:
ec:3e:5a:8e:16:aa:ec:17:0e:dc:9d:5c:05:0e:5c:
62:96:b5:dd:69:4b:d5:37:99:d9:4a:fd:62:39:6b:
07:f6:d7:44:0d:f6:75:02:fe:02:89:5f:ac:fb:29:
1a:45:00:89:1a:4a:a4:24:ff:03:7c:8d:7f:a8:0f:
ac:c0:20:fd:7b:02:ad:46:c2:28:58:c1:9e:21:c3:
33:cc:96:5f:83:84:e4:38:54:4d:f3:07:e9:b3:c0:
0d:65:f4:7a:a1:4b:4c:56:18:4b:d5:dd:7c:ee:76:
12:e5:49:5a:f3:f0:0a:53:d8:dc:0b:5a:d5:24:a9:
2a:e1:48:9a:0a:73:7f:fd:55:49:a1:e1:61:4e:cc:
8c:d6:31:11:86:e8:c1:55:48:0d:5a:df:1c:1a:16:
4c:10:09:c9:8a:76:11:83:43:72:52:90:50:c2:f2:
e4:98:e7:ad:b2:cd:35:5c:c7:7d:e0:a8:a1:18:20:
84:80:49:67:e3:6f:6a:bc:89:75:b6:02:6a:01:11:
f6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C7:39:34:82:4F:1B:BE:94:9B:0B:7A:6D:D4:AE:35:DD:09:14:25
X509v3 Authority Key Identifier:
keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c7:9c:f1:18:00:33:9d:62:6e:01:b4:31:fb:59:68:db:cb:
c8:f3:dd:22:5c:37:86:11:32:64:78:7d:d8:44:40:46:9c:9a:
5d:73:37:48:2d:76:67:53:cb:19:31:d8:41:ab:c4:0b:08:f9:
d4:a3:4c:d3:4f:b7:65:db:f0:c1:f3:59:b1:fa:74:16:03:78:
01:a1:30:eb:eb:4e:69:3f:11:c4:ba:00:d8:80:9f:56:88:d4:
43:19:af:b2:36:66:d2:6b:0f:4c:9b:31:45:54:a9:82:58:5b:
b6:99:2b:a3:d1:5d:20:39:f4:ab:9d:47:ab:4c:36:a8:18:99:
d9:95:09:ae:5c:16:4d:d8:11:31:51:d4:cb:63:37:a3:31:d5:
d1:02:5a:e6:c9:45:4b:b9:90:01:c2:12:a3:61:02:c7:00:12:
d9:75:46:4f:de:cd:a8:ea:63:40:d3:03:46:2d:22:70:51:49:
f5:f6:6e:4b:b7:ad:39:50:1e:01:76:e5:60:9f:e9:f7:d9:59:
45:55:a9:34:d1:64:ec:df:1f:0c:8d:11:1c:38:77:33:d0:81:
4f:ad:0a:67:42:35:30:15:c6:52:6c:20:19:ec:3f:71:05:ac:
34:15:64:a1:7f:33:48:fa:d5:49:0b:b4:42:7c:c1:e8:2e:00:
7b:fc:ec:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJkypITRem94nwvXa8iGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTc0Y2Y2MzcyM2MwMjY5ZDUyODNiMTA2NTgyMWFmMzg0
YTlhMjYwHhcNMjUxMTExMDkwMTQzWhcNMjUxMTEyMDkwMTQzWjAzMTEwLwYDVQQD
EyhmMWM3MzkzNDgyNGYxYmJlOTQ5YjBiN2E2ZGQ0YWUzNWRkMDkxNDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74gOsbn132KpN71yhIsJyBuMHgTG
PRCDkNGErwQ+SaD6wYpkMKQNvQ6/vAv7ave9OLXjpI7baYxg85bsPlqOFqrsFw7c
nVwFDlxilrXdaUvVN5nZSv1iOWsH9tdEDfZ1Av4CiV+s+ykaRQCJGkqkJP8DfI1/
qA+swCD9ewKtRsIoWMGeIcMzzJZfg4TkOFRN8wfps8ANZfR6oUtMVhhL1d187nYS
5Ula8/AKU9jcC1rVJKkq4UiaCnN//VVJoeFhTsyM1jERhujBVUgNWt8cGhZMEAnJ
inYRg0NyUpBQwvLkmOetss01XMd94KihGCCEgEln429qvIl1tgJqARH2VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHHOTSCTxu+lJsLem3UrjXdCRQlMB8GA1UdIwQY
MBaAFEznTPY3I8AmnVKDsQZYIa84SpomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzkt
OTI0MWZmNmVjM2JmLzEvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzktOTI0MWZmNmVjM2Jm
LzEvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMec8RgA
M51ibgG0MftZaNvLyPPdIlw3hhEyZHh92ERARpyaXXM3SC12Z1PLGTHYQavECwj5
1KNM00+3ZdvwwfNZsfp0FgN4AaEw6+tOaT8RxLoA2ICfVojUQxmvsjZm0msPTJsx
RVSpglhbtpkro9FdIDn0q51Hq0w2qBiZ2ZUJrlwWTdgRMVHUy2M3ozHV0QJa5slF
S7mQAcISo2ECxwAS2XVGT97NqOpjQNMDRi0icFFJ9fZuS7etOVAeAXblYJ/p99lZ
RVWpNNFk7N8fDI0RHDh3M9CBT60KZ0I1MBXGUmwgGew/cQWsNBVkoX8zSPrVSQu0
QnzB6C4Ae/zs7Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:49 2025 by rpki-client