Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
File: T02gn7vpD7efDwiyB_g18PDaKf4.mft (raw, json)
Hash identifier: 5bhA6Hym6Z5rZtOOWT6uDuurfvAWva1u7EzgAl6YfaI=
Subject key identifier: 47:44:3A:EA:9D:D0:9E:CB:94:DE:51:44:69:B8:17:7E:7A:BF:40:B6
Authority key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
Certificate issuer: /CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Certificate serial: 019A24E61FCCF2052A5FA83230BB7DAB410B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 09:00:52 +0000
Manifest this update: Mon 27 Oct 2025 09:00:52 +0000
Manifest next update: Tue 28 Oct 2025 09:00:52 +0000
Files and hashes: 1: FuAE5x8IJALIfmhZTsiAE9-IbCg.roa (hash: MfUFICZEyn8ysR/zcHy2Sq4j5nmV7SDJce70wP8HCVI=)
2: T02gn7vpD7efDwiyB_g18PDaKf4.crl (hash: XWFr1JIe7K0GkeJnFyrECIg7CIPqIO8DWqimLkXgQ5I=)
3: gdPSlZVyk0yt_ww6hr6rZwJTSYc.roa (hash: BWCu7uf0+bhsgilLRDC1frTnR4k0Kb5AA6w389paaDU=)
4: iBqZQWjVBdiULjEjYkpA4wqz2gQ.roa (hash: 5JOBo54X9w8ocNdk7qTuaglinouKKSJrSomDV8exe9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:1f:cc:f2:05:2a:5f:a8:32:30:bb:7d:ab:41:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Validity
Not Before: Oct 27 09:00:52 2025 GMT
Not After : Oct 28 09:00:52 2025 GMT
Subject: CN=47443aea9dd09ecb94de514469b8177e7abf40b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:27:9f:01:77:9e:6d:2c:46:f6:fb:84:b1:b6:
08:de:cf:df:92:ee:02:3b:a0:31:9c:dc:e6:ac:5e:
a2:f0:50:19:e2:40:3e:03:c3:38:0e:8e:4f:68:ba:
1d:3b:fb:75:a4:4e:e9:bd:32:f4:45:6d:eb:21:b2:
84:8b:c6:c9:d2:19:be:b7:a9:d0:56:26:62:a0:f7:
a5:6b:31:5f:b6:12:1f:89:54:ee:a6:87:79:17:af:
e8:57:e2:45:c7:83:86:26:14:58:d7:26:c8:8c:17:
0f:1a:ea:45:a0:6c:cd:05:ce:dd:68:f1:aa:52:ba:
a3:74:f1:5d:a7:98:ec:c1:ae:fa:af:4b:7c:84:d5:
b0:d1:64:bc:98:cd:37:b1:07:94:f7:14:a1:fb:d1:
fd:3b:13:09:d8:0b:8c:5e:06:ad:19:dd:37:93:c2:
22:b8:c7:6a:31:ba:4e:7b:3a:a6:a5:2b:8c:3e:6f:
af:08:25:cc:a8:b5:a0:c6:e4:5d:c5:4d:86:72:86:
17:d6:a6:db:d4:c0:a3:dd:64:88:83:a2:0f:9e:68:
62:b0:be:67:16:4b:8c:45:53:67:d6:2b:aa:5f:d5:
b0:09:0e:28:94:86:27:9c:f0:72:00:40:c2:85:2c:
cc:b3:35:c2:b6:45:2e:45:f9:37:42:93:51:2e:4e:
b5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:44:3A:EA:9D:D0:9E:CB:94:DE:51:44:69:B8:17:7E:7A:BF:40:B6
X509v3 Authority Key Identifier:
keyid:4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:79:3f:82:cd:20:bc:e4:e7:ce:c8:e3:7e:78:82:c4:c3:cb:
6f:b1:30:da:80:3a:9c:8b:5a:26:28:22:17:ac:da:46:a8:7f:
04:29:e0:85:4f:b3:81:39:37:42:a9:70:fa:95:ca:0f:7e:ff:
14:03:36:9b:a5:9f:5f:88:87:f6:dd:d2:f8:ff:3c:36:67:a7:
81:a6:af:d4:a0:aa:c3:9a:e4:35:1f:fe:e3:82:df:a3:7f:05:
64:bf:53:a3:90:78:d2:67:8e:cf:8d:7a:ce:96:a6:66:98:be:
51:cf:17:a4:00:c6:c6:ba:95:06:0a:dd:95:a9:15:fa:6f:f1:
02:a7:96:05:d9:45:b6:9e:89:55:cc:c0:cc:08:6d:42:cd:80:
cf:0b:3c:04:f5:e7:77:7b:2c:bf:ec:41:43:5b:87:0f:fe:47:
df:00:35:37:e1:3f:b4:cc:15:f1:a6:c4:d1:04:aa:02:37:b6:
a5:d4:13:9e:e2:93:bf:47:24:8f:da:0b:99:9f:37:d0:a1:3a:
bb:97:73:2d:86:40:b6:08:45:85:fb:00:ea:f2:9c:fa:cd:7e:
e0:5a:88:bf:d5:8d:21:7b:a3:7f:52:a6:fa:c9:16:54:70:c8:
79:01:66:04:38:2a:ed:4f:ff:f1:03:c7:75:5f:7f:b4:a9:3d:
5b:38:17:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZok5h/M8gUqX6gyMLt9q0ELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNGRhMDlmYmJlOTBmYjc5ZjBmMDhiMjA3ZjgzNWYwZjBk
YTI5ZmUwHhcNMjUxMDI3MDkwMDUyWhcNMjUxMDI4MDkwMDUyWjAzMTEwLwYDVQQD
Eyg0NzQ0M2FlYTlkZDA5ZWNiOTRkZTUxNDQ2OWI4MTc3ZTdhYmY0MGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyefAXeebSxG9vuEsbYI3s/fku4C
O6AxnNzmrF6i8FAZ4kA+A8M4Do5PaLodO/t1pE7pvTL0RW3rIbKEi8bJ0hm+t6nQ
ViZioPelazFfthIfiVTupod5F6/oV+JFx4OGJhRY1ybIjBcPGupFoGzNBc7daPGq
UrqjdPFdp5jswa76r0t8hNWw0WS8mM03sQeU9xSh+9H9OxMJ2AuMXgatGd03k8Ii
uMdqMbpOezqmpSuMPm+vCCXMqLWgxuRdxU2GcoYX1qbb1MCj3WSIg6IPnmhisL5n
FkuMRVNn1iuqX9WwCQ4olIYnnPByAEDChSzMszXCtkUuRfk3QpNRLk61VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdEOuqd0J7LlN5RRGm4F356v0C2MB8GA1UdIwQY
MBaAFE9NoJ+76Q+3nw8Isgf4NfDw2in+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDAyZ243dnBEN2VmRHdpeUJfZzE4UERhS2Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82NmJkM2EtNTEyMS00OTBkLThjOTIt
NmVhOTRhOTYxZDRjLzEvVDAyZ243dnBEN2VmRHdpeUJfZzE4UERhS2Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82NmJkM2EtNTEyMS00OTBkLThjOTItNmVhOTRhOTYxZDRj
LzEvVDAyZ243dnBEN2VmRHdpeUJfZzE4UERhS2Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvHk/gs0g
vOTnzsjjfniCxMPLb7Ew2oA6nItaJigiF6zaRqh/BCnghU+zgTk3Qqlw+pXKD37/
FAM2m6WfX4iH9t3S+P88Nmengaav1KCqw5rkNR/+44Lfo38FZL9To5B40meOz416
zpamZpi+Uc8XpADGxrqVBgrdlakV+m/xAqeWBdlFtp6JVczAzAhtQs2Azws8BPXn
d3ssv+xBQ1uHD/5H3wA1N+E/tMwV8abE0QSqAje2pdQTnuKTv0ckj9oLmZ830KE6
u5dzLYZAtghFhfsA6vKc+s1+4FqIv9WNIXujf1Km+skWVHDIeQFmBDgq7U//8QPH
dV9/tKk9WzgX4w==
-----END CERTIFICATE-----
Generated at Mon Oct 27 17:43:05 2025 by rpki-client