Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: 0J/z6eHKmZLTeBm78tE5ZpkXqgjaRYj3P9O9zDQUrUM=
Subject key identifier: 67:82:32:95:B9:C7:11:69:14:42:76:95:66:21:C8:76:E3:E9:24:0D
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 019A29D4D19C4E022B26217870117694A7FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 08:00:04 +0000
Manifest this update: Tue 28 Oct 2025 08:00:04 +0000
Manifest next update: Wed 29 Oct 2025 08:00:04 +0000
Files and hashes: 1: 7kCB1J_rNDVtgNFDQBz-ZFXo6aA.roa (hash: j6xn4MHIGZVJXA81hfabdadaay1xFRv4GfnwCa5VtAQ=)
2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: avep7PcMpYQABC1pTY5UoUTSg0Kx4iZQWWGsXA8ma50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d4:d1:9c:4e:02:2b:26:21:78:70:11:76:94:a7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Oct 28 08:00:04 2025 GMT
Not After : Oct 29 08:00:04 2025 GMT
Subject: CN=67823295b9c71169144276956621c876e3e9240d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:ff:fb:bc:8b:b6:1f:7d:7c:3e:a7:06:09:
d6:4b:62:27:83:5b:15:a1:d4:7a:77:e2:e6:7d:6a:
14:c8:d7:01:a8:b2:3a:dd:d2:1d:24:7c:d0:9c:85:
0d:1f:16:9c:d3:7d:67:90:3f:37:25:4f:60:c6:71:
03:0d:e7:a5:dd:9d:8a:cc:32:cc:d8:5a:ff:e5:ba:
12:ad:65:16:4e:70:59:31:7c:79:b7:d0:ac:6e:16:
84:ff:d4:aa:ab:62:5c:48:0e:04:36:77:6e:8d:2b:
d2:a5:c2:cb:5d:2e:24:4d:b4:1a:97:5e:58:b3:3f:
2c:4c:18:97:d9:5e:07:c7:ea:72:6c:5e:64:03:a3:
fd:c4:ff:c4:72:b5:ab:66:fb:e1:24:ff:8d:ff:b1:
90:f1:29:39:b7:71:6a:70:97:21:43:a4:69:22:a9:
fa:08:83:c0:c7:b1:e5:58:19:f7:ef:d1:07:3f:10:
0b:c2:be:a9:d6:f8:bc:2e:65:a2:8f:5f:1c:01:38:
f8:a2:97:59:8f:15:32:f1:81:b9:d1:87:5d:8d:c7:
64:ed:41:90:42:d9:8f:78:95:94:ca:82:d5:69:91:
b0:f6:c6:8d:d0:03:e3:64:0d:2b:c1:52:65:b2:83:
8b:0b:92:87:8f:7f:e7:f9:e8:fa:30:e6:72:30:5d:
c8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:82:32:95:B9:C7:11:69:14:42:76:95:66:21:C8:76:E3:E9:24:0D
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8c:bf:93:cd:e8:4e:c5:44:19:fe:91:96:f9:a2:90:45:5b:
85:2f:3d:e4:c0:b3:76:e9:98:7c:ca:70:bb:92:a7:23:94:04:
d7:b3:b2:8b:1a:21:53:c9:1d:be:80:a2:a1:e7:c9:40:51:0f:
aa:b2:14:87:5f:d5:44:80:75:fc:14:46:65:42:ae:f0:cb:30:
33:fc:2a:af:5c:41:c9:95:93:0c:52:a5:b0:a0:60:d2:05:27:
1c:5b:3a:90:b9:5d:2d:5d:42:1d:ce:40:01:39:43:12:84:46:
b8:65:1a:ad:07:dd:e0:57:ba:78:b9:7b:5d:a6:32:01:fd:d3:
c1:f8:1d:96:4f:27:46:18:68:bc:c3:c8:03:27:de:63:d0:c3:
13:7e:01:29:aa:4c:21:fd:4e:96:16:87:4a:c7:14:f2:a9:83:
c3:d2:10:bd:e0:f9:b0:d7:0a:8a:31:31:ab:75:83:0e:db:9d:
bd:b4:7a:a8:74:ca:6b:f5:e2:45:79:f4:e0:6d:50:9f:b0:a4:
17:54:7a:6d:6c:ce:3c:7d:d2:5b:ee:7d:51:e4:75:11:c0:b5:
5b:12:c1:f2:68:51:1c:79:db:37:8c:00:d3:2c:65:1e:6d:f7:
e6:68:bd:e5:b8:39:c5:f6:84:45:a7:4c:f9:f5:1e:31:23:6e:
1e:e8:e3:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZop1NGcTgIrJiF4cBF2lKf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1N2FiNzE4YjRhY2IzYTY3OWM1ZGI4ZmNlZTcyOTRlZDZi
ZTJiZDAwHhcNMjUxMDI4MDgwMDA0WhcNMjUxMDI5MDgwMDA0WjAzMTEwLwYDVQQD
Eyg2NzgyMzI5NWI5YzcxMTY5MTQ0Mjc2OTU2NjIxYzg3NmUzZTkyNDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWv/+7yLth99fD6nBgnWS2Ing1sV
odR6d+LmfWoUyNcBqLI63dIdJHzQnIUNHxac031nkD83JU9gxnEDDeel3Z2KzDLM
2Fr/5boSrWUWTnBZMXx5t9CsbhaE/9Sqq2JcSA4ENndujSvSpcLLXS4kTbQal15Y
sz8sTBiX2V4Hx+pybF5kA6P9xP/EcrWrZvvhJP+N/7GQ8Sk5t3FqcJchQ6RpIqn6
CIPAx7HlWBn379EHPxALwr6p1vi8LmWij18cATj4opdZjxUy8YG50Yddjcdk7UGQ
QtmPeJWUyoLVaZGw9saN0APjZA0rwVJlsoOLC5KHj3/n+ej6MOZyMF3I0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeCMpW5xxFpFEJ2lWYhyHbj6SQNMB8GA1UdIwQY
MBaAFLV6txi0rLOmecXbj87nKU7WvivQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYt
YzcwMGVhMDNjMjI3LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYtYzcwMGVhMDNjMjI3
LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIy/k83o
TsVEGf6RlvmikEVbhS895MCzdumYfMpwu5KnI5QE17OyixohU8kdvoCioefJQFEP
qrIUh1/VRIB1/BRGZUKu8MswM/wqr1xByZWTDFKlsKBg0gUnHFs6kLldLV1CHc5A
ATlDEoRGuGUarQfd4Fe6eLl7XaYyAf3Twfgdlk8nRhhovMPIAyfeY9DDE34BKapM
If1OlhaHSscU8qmDw9IQveD5sNcKijExq3WDDtudvbR6qHTKa/XiRXn04G1Qn7Ck
F1R6bWzOPH3SW+59UeR1EcC1WxLB8mhRHHnbN4wA0yxlHm335mi95bg5xfaERadM
+fUeMSNuHujjkQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 15:46:03 2025 by rpki-client