Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
File: TCuJw8V6PilqpAYelihAvnro8Bg.mft (raw, json)
Hash identifier: KS789pYM438CllarICNPIymIJuD8gJ0UWOSzCz4nOhE=
Subject key identifier: 03:83:72:E6:F6:24:67:73:5F:D3:03:64:5D:08:15:89:F7:D7:4C:89
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 019A17CF323C6D9A9FAFD339771DE6B126C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
Manifest number: 1706
Signing time: Fri 24 Oct 2025 20:00:45 +0000
Manifest this update: Fri 24 Oct 2025 20:00:45 +0000
Manifest next update: Sat 25 Oct 2025 20:00:45 +0000
Files and hashes: 1: 1-dPM2O3Cq9rlPw_b3Bu58i_7ZQ.roa (hash: XqoYwMiUKjvv4+p3alYpBpdcCSNGWvnPPZeCLArAN1Y=)
2: AW8f1Sghrh8luWoSov2j0EZGy_0.roa (hash: U2vLNq7NQxJcwwJPbea0BifLKX9AZzxjKL7mEvlEow4=)
3: K1YVJlHcPkrvyly_yWAdk3Dvnxo.roa (hash: MPnb9N7UkomJ9P+V+pIw5n5BQ/plMrrPkuECb2IegXo=)
4: TCuJw8V6PilqpAYelihAvnro8Bg.crl (hash: Z94vMpwd9rcMW59jcCrkgSvr9Boj+dbBGm+L81r2Gms=)
5: Vr7IufA3C9NGikBSGaXPWfPn02s.roa (hash: X+swUdsmsoD9I6W5uD/P9WRwAMBsf3kXls0seEffEoQ=)
6: Y09DAS9bLh1xAHqahYhLrCah7Do.roa (hash: KsGpd22HLjZmnPLG6DA0cJZZzK6h+S5QA/ADl1ffSag=)
7: mYNoys889JEKo9j4oNdbRCLL9Zk.roa (hash: ZoVXON/ZR01LA7q9fnPxWvUyfhqGTxcjz/v5GxIUwf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:cf:32:3c:6d:9a:9f:af:d3:39:77:1d:e6:b1:26:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: Oct 24 20:00:45 2025 GMT
Not After : Oct 25 20:00:45 2025 GMT
Subject: CN=038372e6f62467735fd303645d081589f7d74c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:4b:d6:4e:4a:d8:e2:d4:e8:18:73:16:19:
fb:80:4a:c4:a0:21:44:8a:d4:86:76:13:f9:da:a3:
76:a5:f5:55:dc:1e:9b:65:c4:a0:61:a3:04:dc:b2:
ea:1b:53:3b:de:f0:42:36:50:99:fe:54:de:2c:56:
11:5f:25:ba:c6:f0:6f:4c:7f:6e:cd:81:5d:89:c9:
7c:e2:b6:e5:0f:6e:c0:df:80:89:01:ed:0c:8a:72:
69:8b:1f:44:8f:56:54:94:69:59:10:b3:b4:cf:4f:
6c:c1:d0:85:fe:0b:33:a3:2d:d1:fd:ce:58:74:51:
07:f7:6b:46:39:0d:68:42:b4:82:4f:00:8a:7d:d7:
83:f6:4a:6b:57:e2:2a:0b:87:b2:f9:fd:93:13:2f:
64:bb:12:1e:4f:2e:df:99:fd:b7:ac:c9:ab:43:71:
83:87:c4:aa:a2:1c:84:5b:a5:5f:c0:12:92:9c:ec:
e5:ef:90:e9:b1:07:13:04:dc:5d:29:eb:f7:14:55:
81:8d:13:64:4f:dc:cc:be:99:90:14:b0:c5:0b:b7:
6a:2a:bf:1f:13:4a:f2:e6:f5:9d:ef:5c:92:a0:f7:
af:d5:b7:97:02:56:71:b6:a5:94:03:50:31:fd:96:
90:d2:5a:c6:87:24:73:a1:92:24:28:8c:96:0a:aa:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:83:72:E6:F6:24:67:73:5F:D3:03:64:5D:08:15:89:F7:D7:4C:89
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:22:97:95:b3:02:6c:0f:e1:06:5e:99:10:9b:3b:45:7f:c4:
6f:23:e3:aa:42:8c:bf:fd:3c:44:4f:45:66:06:03:62:28:cd:
83:8c:00:00:4f:c3:fd:8d:07:e4:5a:bf:42:1b:49:07:0b:9a:
a8:93:08:e8:ad:f5:4c:b5:40:5d:51:90:c1:69:13:dc:3c:e4:
ee:a2:de:6f:db:46:c6:75:c3:41:9c:f6:92:f5:d8:10:51:c3:
01:67:45:09:0b:c0:3e:e7:b5:6b:72:af:8c:ad:53:f9:63:94:
e3:7d:76:1e:b9:69:eb:8a:3d:d8:4e:92:60:79:03:58:6b:b8:
0d:08:f2:b2:d5:63:fd:eb:99:7a:92:46:4f:b0:e7:11:92:6e:
64:05:d3:16:e0:6b:b5:12:81:48:66:14:c8:ec:0d:62:9a:5b:
fa:5b:ba:4e:d9:06:0d:3c:54:c9:93:75:88:17:43:29:86:f4:
8b:8c:1c:bb:3b:21:1f:e4:38:c7:7a:18:0e:62:43:ce:c9:34:
da:6d:a1:13:1b:23:72:84:5f:db:74:b3:81:eb:e0:49:3e:bb:
cf:a3:09:4f:91:d5:ae:fd:40:bc:eb:22:66:0f:5a:ec:f0:88:
e8:26:ec:de:9b:ea:ac:6f:ab:23:7c:38:50:11:44:57:19:8e:
35:3b:bf:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoXzzI8bZqfr9M5dx3msSbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMmI4OWMzYzU3YTNlMjk2YWE0MDYxZTk2Mjg0MGJlN2Fl
OGYwMTgwHhcNMjUxMDI0MjAwMDQ1WhcNMjUxMDI1MjAwMDQ1WjAzMTEwLwYDVQQD
EygwMzgzNzJlNmY2MjQ2NzczNWZkMzAzNjQ1ZDA4MTU4OWY3ZDc0Yzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu1L1k5K2OLU6BhzFhn7gErEoCFE
itSGdhP52qN2pfVV3B6bZcSgYaME3LLqG1M73vBCNlCZ/lTeLFYRXyW6xvBvTH9u
zYFdicl84rblD27A34CJAe0MinJpix9Ej1ZUlGlZELO0z09swdCF/gszoy3R/c5Y
dFEH92tGOQ1oQrSCTwCKfdeD9kprV+IqC4ey+f2TEy9kuxIeTy7fmf23rMmrQ3GD
h8SqohyEW6VfwBKSnOzl75DpsQcTBNxdKev3FFWBjRNkT9zMvpmQFLDFC7dqKr8f
E0ry5vWd71ySoPev1beXAlZxtqWUA1Ax/ZaQ0lrGhyRzoZIkKIyWCqrT3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAODcub2JGdzX9MDZF0IFYn310yJMB8GA1UdIwQY
MBaAFEwricPFej4paqQGHpYoQL566PAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQt
MTEyOGU1Y2U2YTViLzEvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQtMTEyOGU1Y2U2YTVi
LzEvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCKXlbMC
bA/hBl6ZEJs7RX/EbyPjqkKMv/08RE9FZgYDYijNg4wAAE/D/Y0H5Fq/QhtJBwua
qJMI6K31TLVAXVGQwWkT3Dzk7qLeb9tGxnXDQZz2kvXYEFHDAWdFCQvAPue1a3Kv
jK1T+WOU4312Hrlp64o92E6SYHkDWGu4DQjystVj/euZepJGT7DnEZJuZAXTFuBr
tRKBSGYUyOwNYppb+lu6TtkGDTxUyZN1iBdDKYb0i4wcuzshH+Q4x3oYDmJDzsk0
2m2hExsjcoRf23SzgevgST67z6MJT5HVrv1AvOsiZg9a7PCI6Cbs3pvqrG+rI3w4
UBFEVxmONTu/jg==
-----END CERTIFICATE-----
Generated at Sat Oct 25 00:45:11 2025 by rpki-client