Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier: ne7ezuH73iMtUcIbllD63boj7JAUjcDHeku8vLo6q64=
Subject key identifier: 62:6C:6A:98:96:97:13:06:20:09:9F:9F:42:99:45:FA:F9:D9:3C:75
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 019A299E6478377158CF9FE6C19DF8B44E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number: 0197
Signing time: Tue 28 Oct 2025 07:00:37 +0000
Manifest this update: Tue 28 Oct 2025 07:00:37 +0000
Manifest next update: Wed 29 Oct 2025 07:00:37 +0000
Files and hashes: 1: r2p_nfti9wP7acQGEaKHM_xZ5Y4.roa (hash: 8x452bR9h9FZkxCtz0Hac6JBkLr+TCy/u9myFaRh5zg=)
2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: vUGRlorvbMlFamboNHMbKZ38ifEDocHjbmjUQMee1HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:64:78:37:71:58:cf:9f:e6:c1:9d:f8:b4:4e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: Oct 28 07:00:37 2025 GMT
Not After : Oct 29 07:00:37 2025 GMT
Subject: CN=626c6a989697130620099f9f429945faf9d93c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:06:bb:7f:a3:9e:4a:8d:a4:19:47:18:4e:
ee:ac:b6:1e:71:75:e1:32:72:ee:98:d0:78:5e:f8:
c1:c1:ea:c3:40:5f:b2:89:b0:1c:b7:ca:fc:09:2a:
86:d2:b7:0b:4b:ac:1b:3e:72:b6:da:e2:d4:de:8f:
82:c6:81:6b:9f:41:3f:54:38:fa:59:f4:4d:a6:f5:
05:c0:f2:ca:3c:f3:0c:32:14:19:93:81:08:c2:19:
f7:29:e9:2c:86:8e:04:a2:ba:c5:6b:ca:98:c2:05:
b3:ce:9a:a4:0c:fb:ce:7a:73:48:95:74:aa:1f:e6:
2d:84:f1:99:ff:c2:84:2a:ef:ed:ca:12:64:12:cd:
c7:1e:a1:e9:31:d1:08:be:d2:2f:86:5b:1d:d4:cb:
df:55:02:78:ff:f3:8b:22:3b:b5:72:81:63:8f:b3:
c3:4c:bb:d8:83:a8:29:2c:f9:a8:75:6e:e4:57:66:
f8:67:8a:95:38:7a:c9:f5:c6:52:94:2d:ae:1f:58:
24:31:86:b5:4e:20:bc:db:d1:62:2d:db:5b:09:b6:
84:48:cd:86:c6:53:b4:29:d0:cb:8a:b5:d9:17:36:
36:e3:20:ee:7d:06:16:6d:43:1b:ac:c1:ca:ce:20:
f3:23:2b:83:a2:26:33:20:f9:2b:72:41:e7:6c:29:
65:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6C:6A:98:96:97:13:06:20:09:9F:9F:42:99:45:FA:F9:D9:3C:75
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0a:37:9e:56:54:ed:65:80:8c:90:b1:37:32:2f:1f:77:74:
c4:ab:85:23:b2:2b:b6:03:32:77:27:46:3f:c4:9d:4d:3d:b4:
0e:f5:15:d8:bb:67:00:02:01:78:31:3b:cb:e0:c3:eb:40:76:
24:5d:e8:c6:92:16:71:03:79:ce:05:e9:02:91:ea:8d:82:fa:
0d:f3:5e:06:47:98:6d:8e:27:10:46:20:21:86:ee:4d:c8:8d:
42:85:29:2f:85:49:1a:02:9b:19:25:85:e6:4c:06:11:49:b2:
65:35:4c:1c:5c:1d:a1:16:8b:49:17:4c:8f:e5:17:6d:d7:ab:
af:7d:f7:d7:42:cc:11:51:1e:3f:6f:49:b1:3f:73:4c:c7:da:
5e:f7:2a:5e:5f:52:f1:c8:f3:69:53:9c:e2:fa:5e:23:1f:9f:
1e:fc:16:87:31:38:8b:91:6f:d1:81:ae:0f:1e:da:05:1a:f2:
49:0a:ec:62:97:fe:78:86:9a:e5:b3:93:f1:44:7b:6e:57:37:
b8:5c:9a:fb:96:9a:74:80:51:03:03:3e:28:81:1f:a9:1d:70:
14:e8:c6:67:41:11:dc:7f:4f:b6:98:60:65:9a:56:11:2e:2a:
2d:38:80:8b:b6:cd:13:67:b8:a6:5c:10:79:2a:d3:43:17:ff:
d0:b5:b6:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopnmR4N3FYz5/mwZ34tE4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NzNkMmRkYTkzZTQyMDQwOTE2M2RhNTllNzQxNGVlOTFh
MmVlZjIwHhcNMjUxMDI4MDcwMDM3WhcNMjUxMDI5MDcwMDM3WjAzMTEwLwYDVQQD
Eyg2MjZjNmE5ODk2OTcxMzA2MjAwOTlmOWY0Mjk5NDVmYWY5ZDkzYzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvwGu3+jnkqNpBlHGE7urLYecXXh
MnLumNB4XvjBwerDQF+yibAct8r8CSqG0rcLS6wbPnK22uLU3o+CxoFrn0E/VDj6
WfRNpvUFwPLKPPMMMhQZk4EIwhn3Keksho4EorrFa8qYwgWzzpqkDPvOenNIlXSq
H+YthPGZ/8KEKu/tyhJkEs3HHqHpMdEIvtIvhlsd1MvfVQJ4//OLIju1coFjj7PD
TLvYg6gpLPmodW7kV2b4Z4qVOHrJ9cZSlC2uH1gkMYa1TiC829FiLdtbCbaESM2G
xlO0KdDLirXZFzY24yDufQYWbUMbrMHKziDzIyuDoiYzIPkrckHnbCllzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJsapiWlxMGIAmfn0KZRfr52Tx1MB8GA1UdIwQY
MBaAFLVz0t2pPkIECRY9pZ50FO6Rou7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhQUzNhay1RZ1FKRmoybG5uUVU3cEdpN3ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yZjY3MmItMjM2Yy00MGZiLWFhZjYt
MDhkMGY0YmQyYzI4LzEvdFhQUzNhay1RZ1FKRmoybG5uUVU3cEdpN3ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yZjY3MmItMjM2Yy00MGZiLWFhZjYtMDhkMGY0YmQyYzI4
LzEvdFhQUzNhay1RZ1FKRmoybG5uUVU3cEdpN3ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQo3nlZU
7WWAjJCxNzIvH3d0xKuFI7IrtgMydydGP8SdTT20DvUV2LtnAAIBeDE7y+DD60B2
JF3oxpIWcQN5zgXpApHqjYL6DfNeBkeYbY4nEEYgIYbuTciNQoUpL4VJGgKbGSWF
5kwGEUmyZTVMHFwdoRaLSRdMj+UXbderr33310LMEVEeP29JsT9zTMfaXvcqXl9S
8cjzaVOc4vpeIx+fHvwWhzE4i5Fv0YGuDx7aBRrySQrsYpf+eIaa5bOT8UR7blc3
uFya+5aadIBRAwM+KIEfqR1wFOjGZ0ER3H9PtphgZZpWES4qLTiAi7bNE2e4plwQ
eSrTQxf/0LW2Xw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 13:14:25 2025 by rpki-client