Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier: CnEA4OJxB1EkMgG40Agt+P+pesa/5pNs4lh/qsI8i60=
Subject key identifier: A6:D8:C1:53:9C:99:B0:FB:B1:83:EE:C8:6B:AD:A3:CC:03:60:28:F2
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 019A0F39AE1300ACB781F96152B2A4EEA6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number: 0741
Signing time: Thu 23 Oct 2025 04:00:29 +0000
Manifest this update: Thu 23 Oct 2025 04:00:29 +0000
Manifest next update: Fri 24 Oct 2025 04:00:29 +0000
Files and hashes: 1: 1-deSD0Zx7mZFaKLgvp5MfNNL6B0.roa (hash: 0HLnR/UxvmJgyKOOTOBI/jNtxozr1BfrerbK66hTjvg=)
2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: MDG0WRP9D+I6YOobML9ubR/9S2t9eG+IQhLD2AqQLmQ=)
3: ztG3iRtcx4pgmD82wNPmhKWPj8w.roa (hash: 7wVFIe2H/2PMSyJC9QSggcK+C7T3Sk0wvSIjn0Idsps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:39:ae:13:00:ac:b7:81:f9:61:52:b2:a4:ee:a6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Oct 23 04:00:29 2025 GMT
Not After : Oct 24 04:00:29 2025 GMT
Subject: CN=a6d8c1539c99b0fbb183eec86bada3cc036028f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:41:6e:90:6f:7a:1b:8e:2f:9e:63:28:51:ce:
62:e2:a9:d6:9b:56:8b:70:6d:c7:71:dc:e4:e5:c7:
91:45:e1:7c:20:0f:74:5b:1b:9d:db:04:53:8a:6f:
85:98:f5:cc:73:7a:91:d9:ec:cd:e4:fc:f4:2b:c0:
7f:a8:04:c3:f7:f0:26:4d:f3:dd:72:92:99:46:8f:
69:d3:72:11:fe:7e:af:b4:d5:46:d7:07:39:61:e6:
b0:e4:5b:62:f7:29:0e:21:35:c4:19:67:3f:6d:de:
f5:81:2b:d0:52:a2:21:11:32:1a:db:17:ad:e7:fd:
01:32:ed:b8:13:fa:8f:37:b1:d0:5c:1b:4f:f9:7d:
06:42:31:00:c9:38:fb:4f:2c:fa:ab:31:90:d8:02:
45:89:6a:e6:b0:59:eb:0a:f2:d2:11:1a:71:cc:46:
43:19:32:e3:73:43:dc:2b:63:a8:e1:36:ba:7b:4c:
78:bc:f2:08:63:54:4c:e3:af:9a:97:19:5f:5d:3c:
5d:45:fa:ad:a2:9f:04:d6:75:bc:e6:03:88:f3:94:
13:08:88:09:43:97:3b:a0:6c:e3:3f:ea:1b:87:71:
36:61:b6:9e:41:cf:34:f6:6a:b4:8e:77:ab:c8:58:
e9:bd:83:f1:ad:5e:25:a8:9a:df:4d:64:cf:e4:59:
64:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D8:C1:53:9C:99:B0:FB:B1:83:EE:C8:6B:AD:A3:CC:03:60:28:F2
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:04:86:9f:af:46:7c:3d:de:11:7a:13:28:9c:c2:65:2f:9c:
74:d6:07:aa:2e:48:28:e4:a1:ee:b7:0b:0e:95:8c:ed:af:32:
9e:14:6a:12:40:44:ee:1c:de:38:79:37:b4:6f:35:80:ab:d3:
c4:d4:1c:dd:03:f2:3e:64:94:01:73:84:16:01:07:65:25:8b:
4b:40:6e:e1:47:05:ba:29:35:b9:a9:f3:92:62:b0:aa:b6:ab:
21:45:a1:40:bb:a2:41:18:da:3b:59:3f:d3:6f:7e:6c:e8:a1:
ec:03:41:39:8a:93:79:9b:58:e0:03:03:9c:09:69:b0:e5:0b:
ce:6e:43:ed:ee:b9:8a:c6:85:a5:11:4c:8b:c9:31:2f:de:af:
ed:f1:9c:68:46:8d:40:1e:1f:94:b3:69:c6:3f:3d:a4:c1:51:
dc:78:8d:6c:0d:a0:64:23:d2:b4:3f:71:00:75:21:1f:5d:39:
d8:8a:26:e8:c6:3f:aa:9f:5e:d1:55:eb:de:53:ef:16:cf:69:
38:99:37:bd:19:e0:b7:70:87:1f:44:c5:6a:9b:87:9e:7c:e1:
54:86:18:f4:d1:64:92:87:c2:69:26:eb:df:57:d1:77:ad:f8:
1d:24:f5:0c:ae:05:d8:ad:c8:c6:95:38:f3:2f:c1:b7:00:1b:
6c:71:24:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoPOa4TAKy3gflhUrKk7qb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNzQ2MTQ3N2I1OWI3YmMwOTA2ZjZjZTYwNjUwYmIzYWQy
ZGVlNTcwHhcNMjUxMDIzMDQwMDI5WhcNMjUxMDI0MDQwMDI5WjAzMTEwLwYDVQQD
EyhhNmQ4YzE1MzljOTliMGZiYjE4M2VlYzg2YmFkYTNjYzAzNjAyOGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkFukG96G44vnmMoUc5i4qnWm1aL
cG3Hcdzk5ceRReF8IA90Wxud2wRTim+FmPXMc3qR2ezN5Pz0K8B/qATD9/AmTfPd
cpKZRo9p03IR/n6vtNVG1wc5Yeaw5Fti9ykOITXEGWc/bd71gSvQUqIhETIa2xet
5/0BMu24E/qPN7HQXBtP+X0GQjEAyTj7Tyz6qzGQ2AJFiWrmsFnrCvLSERpxzEZD
GTLjc0PcK2Oo4Ta6e0x4vPIIY1RM46+alxlfXTxdRfqtop8E1nW85gOI85QTCIgJ
Q5c7oGzjP+obh3E2YbaeQc809mq0jneryFjpvYPxrV4lqJrfTWTP5FlkewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbYwVOcmbD7sYPuyGuto8wDYCjyMB8GA1UdIwQY
MBaAFE50YUd7Wbe8CQb2zmBlC7OtLe5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG5SaFIzdFp0N3dKQnZiT1lHVUxzNjB0N2xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MTEwOWYtMmQxOS00MWNlLWJhNmUt
ZGRiYzBkZWY4M2UxLzEvVG5SaFIzdFp0N3dKQnZiT1lHVUxzNjB0N2xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MTEwOWYtMmQxOS00MWNlLWJhNmUtZGRiYzBkZWY4M2Ux
LzEvVG5SaFIzdFp0N3dKQnZiT1lHVUxzNjB0N2xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwSGn69G
fD3eEXoTKJzCZS+cdNYHqi5IKOSh7rcLDpWM7a8ynhRqEkBE7hzeOHk3tG81gKvT
xNQc3QPyPmSUAXOEFgEHZSWLS0Bu4UcFuik1uanzkmKwqrarIUWhQLuiQRjaO1k/
029+bOih7ANBOYqTeZtY4AMDnAlpsOULzm5D7e65isaFpRFMi8kxL96v7fGcaEaN
QB4flLNpxj89pMFR3HiNbA2gZCPStD9xAHUhH1052Iom6MY/qp9e0VXr3lPvFs9p
OJk3vRngt3CHH0TFapuHnnzhVIYY9NFkkofCaSbr31fRd634HST1DK4F2K3IxpU4
8y/BtwAbbHEkWw==
-----END CERTIFICATE-----
Generated at Thu Oct 23 10:01:26 2025 by rpki-client