Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
File: TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json)
Hash identifier: DF29lEI/JpIx3oJaVcvzatarA8wDMsN7LqVw3sAf8MM=
Subject key identifier: 4E:83:46:21:AE:3C:49:27:50:F6:82:E1:F7:A9:C0:2C:13:A0:32:7A
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial: 019A4D06CD1C791D51935D3C92EA9FC922A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
Manifest number: 0DCF
Signing time: Tue 04 Nov 2025 04:01:22 +0000
Manifest this update: Tue 04 Nov 2025 04:01:22 +0000
Manifest next update: Wed 05 Nov 2025 04:01:22 +0000
Files and hashes: 1: 1-QMPtoomm6W5CX-SS0fyQ5AS734.roa (hash: hcd0LKLxrMub9hVDF7pi719s+IDTrzb/8hX4yl7gw2w=)
2: 8-JB4jMg3_rMGJjuIMVCBLnxwQ8.roa (hash: buBER4odhou/4TCkZQ3UeIhbfaoQJUXmTZ3cmJ4K9k8=)
3: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: V5mWIP96rEHdldVKhpDAVslNSNi3p3A4YC/Pz5lLOlQ=)
4: pSmbhIOz_v9DcZ6BjkBTv88tPZ4.roa (hash: 1vOAxGM5C9HFgFv3tm1lOiYWc4bRDbFQtmaO7PV8kkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:cd:1c:79:1d:51:93:5d:3c:92:ea:9f:c9:22:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Validity
Not Before: Nov 4 04:01:22 2025 GMT
Not After : Nov 5 04:01:22 2025 GMT
Subject: CN=4e834621ae3c492750f682e1f7a9c02c13a0327a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:2a:57:49:49:4e:67:47:32:b8:54:4d:8f:
3d:4f:bb:ee:26:ed:1f:a0:ee:bd:cc:e3:1e:26:2b:
47:c2:bf:bd:ea:47:df:cd:8b:b8:d3:21:9e:cf:2b:
b5:c9:b2:9b:ed:18:4c:d4:63:96:fd:71:89:2d:4a:
0e:89:39:22:24:09:4b:3d:a3:11:2f:a9:97:84:23:
17:42:c7:98:1a:da:b6:e0:d1:03:8d:19:09:f1:d5:
bd:40:fc:b3:20:06:63:21:01:fb:7c:71:84:f4:e7:
bb:ec:dc:b8:75:40:59:69:c2:d4:f1:2a:6f:17:7f:
b4:d1:1a:0a:13:8a:0d:3f:c7:d1:b1:b5:82:db:d5:
97:f4:41:77:69:32:88:41:3a:38:cf:e4:ae:fc:d3:
23:bc:67:4a:21:87:d3:41:e8:b2:5c:fa:e7:5a:9e:
fb:5b:de:11:7b:49:4a:eb:dc:dc:12:09:ba:91:f3:
0b:79:a1:2c:94:06:c0:e4:5f:45:66:a4:7e:d0:a9:
cc:11:b3:cb:48:6f:c6:62:9c:24:76:fd:a6:2f:af:
91:64:8d:6a:b5:c4:0e:da:4d:29:dd:11:6b:e4:03:
c2:11:39:cb:ed:24:2c:3d:57:21:2e:e4:74:aa:62:
08:a2:da:d7:23:37:0f:76:9e:a9:3e:a5:3f:ff:cf:
df:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:83:46:21:AE:3C:49:27:50:F6:82:E1:F7:A9:C0:2C:13:A0:32:7A
X509v3 Authority Key Identifier:
keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c0:11:59:d4:ed:0f:3a:ba:9d:5c:d4:84:ac:e6:92:44:61:
dd:12:f4:45:ce:5a:ce:77:3d:dd:d5:05:3d:2c:b4:0b:49:9a:
9f:98:14:39:90:d2:89:d3:60:c1:f9:42:06:55:dd:f5:74:3c:
01:df:e2:9a:09:23:93:87:35:68:08:1c:72:2c:7c:46:ae:3c:
1f:19:b0:43:48:ee:a9:47:df:ab:a2:2e:65:81:15:cc:ae:60:
e2:85:5e:48:da:64:a0:c8:a5:c5:7f:e6:0c:00:a8:00:7f:e3:
89:a5:4f:96:14:94:f2:80:50:ce:51:ce:1a:89:39:a0:32:bc:
47:3e:29:13:64:6b:5d:d7:40:dd:fd:ae:06:c4:cd:79:95:f8:
64:24:4b:3c:87:9b:17:73:c0:e2:e2:53:25:14:6a:63:39:04:
2a:2e:ae:5b:47:81:86:de:1f:f5:a2:36:bf:b2:55:ac:f0:86:
52:bd:ed:a3:48:95:8f:2f:56:90:5e:13:e0:a2:b3:6e:ae:99:
56:ed:fa:b8:66:a0:c2:90:87:b5:dc:f6:3d:aa:56:4f:9d:43:
8f:de:ea:e0:a8:ca:d4:10:f6:9a:6c:24:52:8a:3a:eb:fe:01:
c0:49:f1:71:74:df:c0:69:2a:9a:cd:c8:99:8e:29:34:76:95:
9f:65:66:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBs0ceR1Rk108kuqfySKiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMmY5ZmQ1YzhhMTRjZGM5ZjMxYzQ1ODVjZDYwZGI1N2Nm
ZmI0YzIwHhcNMjUxMTA0MDQwMTIyWhcNMjUxMTA1MDQwMTIyWjAzMTEwLwYDVQQD
Eyg0ZTgzNDYyMWFlM2M0OTI3NTBmNjgyZTFmN2E5YzAyYzEzYTAzMjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqsqV0lJTmdHMrhUTY89T7vuJu0f
oO69zOMeJitHwr+96kffzYu40yGezyu1ybKb7RhM1GOW/XGJLUoOiTkiJAlLPaMR
L6mXhCMXQseYGtq24NEDjRkJ8dW9QPyzIAZjIQH7fHGE9Oe77Ny4dUBZacLU8Spv
F3+00RoKE4oNP8fRsbWC29WX9EF3aTKIQTo4z+Su/NMjvGdKIYfTQeiyXPrnWp77
W94Re0lK69zcEgm6kfMLeaEslAbA5F9FZqR+0KnMEbPLSG/GYpwkdv2mL6+RZI1q
tcQO2k0p3RFr5APCETnL7SQsPVchLuR0qmIIotrXIzcPdp6pPqU//8/fMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6DRiGuPEknUPaC4fepwCwToDJ6MB8GA1UdIwQY
MBaAFE0vn9XIoUzcnzHEWFzWDbV8/7TCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kYTRlNDYtMmE5My00NGE0LWI4ZTMt
YzIxMzNkZDgxYjU2LzEvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kYTRlNDYtMmE5My00NGE0LWI4ZTMtYzIxMzNkZDgxYjU2
LzEvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksARWdTt
Dzq6nVzUhKzmkkRh3RL0Rc5aznc93dUFPSy0C0man5gUOZDSidNgwflCBlXd9XQ8
Ad/imgkjk4c1aAgccix8Rq48HxmwQ0juqUffq6IuZYEVzK5g4oVeSNpkoMilxX/m
DACoAH/jiaVPlhSU8oBQzlHOGok5oDK8Rz4pE2RrXddA3f2uBsTNeZX4ZCRLPIeb
F3PA4uJTJRRqYzkEKi6uW0eBht4f9aI2v7JVrPCGUr3to0iVjy9WkF4T4KKzbq6Z
Vu36uGagwpCHtdz2PapWT51Dj97q4KjK1BD2mmwkUoo66/4BwEnxcXTfwGkqms3I
mY4pNHaVn2VmTg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 09:43:25 2025 by rpki-client