Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
File: Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft (raw, json)
Hash identifier: 4j3S9RHsMEK6QldQaMVAx/2W+m3Cwu7LWnzXd/87nHM=
Subject key identifier: 13:C7:70:5D:C2:A4:97:C9:54:39:07:F4:9C:36:34:DE:3E:E2:80:2A
Authority key identifier: 4E:BF:6B:37:B9:4F:95:B4:90:5C:F8:C6:A2:1D:88:03:EA:BF:A7:7E
Certificate issuer: /CN=4ebf6b37b94f95b4905cf8c6a21d8803eabfa77e
Certificate serial: 019A2967033585C2A3B3B02D50E8A39E9583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
Manifest number: 02E4
Signing time: Tue 28 Oct 2025 06:00:08 +0000
Manifest this update: Tue 28 Oct 2025 06:00:08 +0000
Manifest next update: Wed 29 Oct 2025 06:00:08 +0000
Files and hashes: 1: 2YHBxyZ_z4Fcrt68TQqMf0wkwmM.roa (hash: KMD/ALL2N2LqU8y7+1f9YpFqy5OsmhRXi+hfcZ2aIxY=)
2: Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl (hash: IJqe7rredbcSAU5MlKWJ0+VZqXLavgWVmYIvg/EGmvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:03:35:85:c2:a3:b3:b0:2d:50:e8:a3:9e:95:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ebf6b37b94f95b4905cf8c6a21d8803eabfa77e
Validity
Not Before: Oct 28 06:00:08 2025 GMT
Not After : Oct 29 06:00:08 2025 GMT
Subject: CN=13c7705dc2a497c9543907f49c3634de3ee2802a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:a3:20:1a:5c:3c:7a:d6:f6:aa:7b:be:3c:
31:e2:22:5b:53:fd:cd:d7:89:16:94:b9:95:4b:19:
35:99:37:92:ae:09:08:f0:39:8b:63:19:06:de:61:
1c:f2:36:30:cf:aa:cb:8f:77:f4:eb:a3:76:2d:e9:
6c:0b:fd:6d:ce:86:fb:f6:5e:44:8d:5d:a4:4c:b3:
00:fb:f5:33:e9:fa:7f:3e:78:7e:21:2c:d9:97:1f:
c5:6a:ae:d3:f2:17:84:2b:10:74:0f:9b:b5:ed:32:
3d:85:48:b5:a3:02:a1:db:2a:0a:5e:c2:3a:9d:7e:
f7:39:ad:15:de:20:15:ac:ab:b8:74:dd:2c:ce:dc:
dd:fc:b2:e5:82:d3:0c:3d:18:c6:e5:d5:f0:40:cc:
4e:0c:a8:b9:70:42:27:04:8f:96:c8:c0:c6:04:bd:
8f:b6:86:55:c0:ed:a2:2a:99:3b:7e:30:fa:1f:8f:
62:33:2a:da:3b:6c:e4:55:93:9c:61:2e:76:e5:13:
c4:de:7c:81:0b:25:80:50:f6:60:c7:9f:1d:8e:a3:
32:f4:84:7e:82:c4:9a:fb:33:d2:52:7c:a9:59:c0:
bf:15:6b:0d:54:cf:0b:b6:d2:ed:b7:db:c5:db:9f:
c9:e5:1c:9d:34:fe:ad:a0:00:f9:b1:7a:d4:72:e2:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C7:70:5D:C2:A4:97:C9:54:39:07:F4:9C:36:34:DE:3E:E2:80:2A
X509v3 Authority Key Identifier:
keyid:4E:BF:6B:37:B9:4F:95:B4:90:5C:F8:C6:A2:1D:88:03:EA:BF:A7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:02:1d:b3:e3:73:fb:67:be:06:12:37:c2:8d:d2:b3:32:81:
12:b1:59:e4:4b:c6:49:f1:d5:bb:b6:6e:b5:f0:de:e8:15:16:
7e:75:08:8d:34:f7:0d:3b:ad:95:d0:21:d0:94:21:00:52:db:
93:f1:82:03:6a:dc:0a:2c:10:82:47:e7:0d:76:94:d3:3a:45:
6a:1c:db:c8:34:f3:bf:b1:2b:76:26:57:a6:6b:46:2b:ec:70:
f0:e9:e8:aa:cc:55:3c:6d:41:46:00:15:89:dd:05:c1:2d:1f:
b8:7b:4e:9c:4c:cc:6d:f7:ac:5e:ea:e1:ef:65:98:b7:11:8a:
de:43:36:63:f1:38:38:dd:0c:06:75:cc:de:2c:1c:ec:32:15:
26:2a:47:76:d6:5b:b8:cc:92:b6:33:3f:27:8f:42:7c:ea:e7:
67:c0:4e:56:92:5d:e0:53:f1:00:2d:81:33:58:3b:27:75:d7:
38:3e:1c:02:24:1a:34:0d:57:a3:a7:a8:48:ae:17:9e:6c:5d:
7d:14:1a:e2:08:a4:90:44:95:ec:c5:9f:47:7f:94:8e:76:d4:
a0:1d:46:af:e7:39:14:de:03:6f:10:7c:df:89:7b:96:64:fe:
5f:f3:6e:9e:2f:37:a9:03:c7:4e:d6:95:a3:8e:e4:b7:a6:af:
db:d3:45:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopZwM1hcKjs7AtUOijnpWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYmY2YjM3Yjk0Zjk1YjQ5MDVjZjhjNmEyMWQ4ODAzZWFi
ZmE3N2UwHhcNMjUxMDI4MDYwMDA4WhcNMjUxMDI5MDYwMDA4WjAzMTEwLwYDVQQD
EygxM2M3NzA1ZGMyYTQ5N2M5NTQzOTA3ZjQ5YzM2MzRkZTNlZTI4MDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMSjIBpcPHrW9qp7vjwx4iJbU/3N
14kWlLmVSxk1mTeSrgkI8DmLYxkG3mEc8jYwz6rLj3f066N2LelsC/1tzob79l5E
jV2kTLMA+/Uz6fp/Pnh+ISzZlx/Faq7T8heEKxB0D5u17TI9hUi1owKh2yoKXsI6
nX73Oa0V3iAVrKu4dN0sztzd/LLlgtMMPRjG5dXwQMxODKi5cEInBI+WyMDGBL2P
toZVwO2iKpk7fjD6H49iMyraO2zkVZOcYS525RPE3nyBCyWAUPZgx58djqMy9IR+
gsSa+zPSUnypWcC/FWsNVM8LttLtt9vF25/J5RydNP6toAD5sXrUcuKfFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPHcF3CpJfJVDkH9Jw2NN4+4oAqMB8GA1UdIwQY
MBaAFE6/aze5T5W0kFz4xqIdiAPqv6d+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHI5ck43bFBsYlNRWFBqR29oMklBLXFfcDM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hMjE3MmQtYjY1MS00M2RhLThhY2Yt
ZTdlNzRkYjcyMWQyLzEvVHI5ck43bFBsYlNRWFBqR29oMklBLXFfcDM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hMjE3MmQtYjY1MS00M2RhLThhY2YtZTdlNzRkYjcyMWQy
LzEvVHI5ck43bFBsYlNRWFBqR29oMklBLXFfcDM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQIds+Nz
+2e+BhI3wo3SszKBErFZ5EvGSfHVu7ZutfDe6BUWfnUIjTT3DTutldAh0JQhAFLb
k/GCA2rcCiwQgkfnDXaU0zpFahzbyDTzv7ErdiZXpmtGK+xw8OnoqsxVPG1BRgAV
id0FwS0fuHtOnEzMbfesXurh72WYtxGK3kM2Y/E4ON0MBnXM3iwc7DIVJipHdtZb
uMyStjM/J49CfOrnZ8BOVpJd4FPxAC2BM1g7J3XXOD4cAiQaNA1Xo6eoSK4Xnmxd
fRQa4gikkESV7MWfR3+UjnbUoB1Gr+c5FN4DbxB834l7lmT+X/Nuni83qQPHTtaV
o47kt6av29NF6w==
-----END CERTIFICATE-----
Generated at Tue Oct 28 13:39:57 2025 by rpki-client