Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
File: tI8GPSnpEPAzvstlbouZAfaeyXQ.mft (raw, json)
Hash identifier: mrvhRi8ilbunhpcNsrig3mZ3nuFBXF5Q3urXt1vKkLU=
Subject key identifier: 29:76:CA:27:93:3A:06:44:45:8A:7B:16:8A:1C:62:50:3B:A4:C4:ED
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 019A7149EFBAE77F66C9E50185AB7458EB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
Manifest number: 101D
Signing time: Tue 11 Nov 2025 05:01:02 +0000
Manifest this update: Tue 11 Nov 2025 05:01:02 +0000
Manifest next update: Wed 12 Nov 2025 05:01:02 +0000
Files and hashes: 1: 7KQuRRixFRD2InAA41vDA8b46Ss.roa (hash: pqy5x79CuZKPgbD27qu8dFnC6qLbsZEYs512o7B8AtE=)
2: tI8GPSnpEPAzvstlbouZAfaeyXQ.crl (hash: cuCcaV/Ggfqwn4C5+sv2T4vFbHSWCKbcDvflzA61SJQ=)
3: vM1WQhwz3cRdhRzRWZYRS2EG35U.roa (hash: 6cZcrnHWZ9ymPZFFF87v+vfASbgITAqQf6OR2I+DcbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ef:ba:e7:7f:66:c9:e5:01:85:ab:74:58:eb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Nov 11 05:01:02 2025 GMT
Not After : Nov 12 05:01:02 2025 GMT
Subject: CN=2976ca27933a0644458a7b168a1c62503ba4c4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:9a:7c:db:da:34:5a:f7:ed:2c:f5:50:b9:
93:e1:d6:21:b3:23:5f:6a:07:3f:2d:1e:af:91:33:
95:28:da:2a:d1:e5:8f:f0:42:40:a3:5b:2e:c4:1f:
23:ad:5f:a8:1c:ac:02:4b:7c:8c:c4:a9:02:f7:ca:
3a:fe:7b:9a:90:b3:a8:a6:bf:bc:81:f6:48:68:6b:
4a:6b:d3:81:0c:4d:fd:95:29:3c:0e:0d:16:17:f3:
e2:90:f1:94:12:00:ff:b8:55:29:58:3e:74:a1:43:
a9:fd:d5:76:b0:ce:d1:3e:43:e7:0d:5b:e2:38:5d:
d1:09:58:df:d2:55:be:68:81:c8:f0:27:81:8a:8b:
8a:54:b0:02:bc:ca:5f:9e:7d:66:fc:0f:f5:73:88:
3f:89:31:02:de:56:1e:42:05:24:be:0b:69:ce:3b:
49:aa:ec:e6:cc:60:76:f9:82:53:dd:87:38:92:f9:
8a:44:ab:fb:f0:97:db:d6:f8:02:5f:6d:bc:9e:9f:
46:59:c2:c8:af:f4:ae:9a:52:68:c2:ab:04:c7:1c:
f2:ec:ea:db:83:f7:a9:2c:90:ae:c6:94:a6:21:6a:
3d:5c:76:39:f2:26:22:68:a4:e5:1f:f6:fd:31:05:
f4:d0:ea:ff:b0:b3:b2:86:2d:59:c5:34:d1:fa:80:
71:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:76:CA:27:93:3A:06:44:45:8A:7B:16:8A:1C:62:50:3B:A4:C4:ED
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d7:8b:ef:50:07:f4:1b:29:bf:d2:cb:e8:af:f3:a6:1b:c1:
e6:be:66:3f:5e:c0:34:bf:9d:f5:c8:3e:92:27:c9:81:c3:8e:
7a:aa:ee:c6:3b:5a:b1:59:a3:d9:99:96:8a:8e:db:6f:ca:05:
a5:f1:fc:30:b0:9a:8a:82:65:16:83:8a:0b:d0:ee:bc:72:e2:
a6:fb:a6:52:c6:96:36:f3:42:7d:e9:7f:4b:5d:ac:f2:34:b6:
51:f6:4c:a9:13:5f:bc:38:c2:7a:b5:0c:78:9c:71:bc:4d:bd:
b7:92:17:ad:0a:54:b4:6f:5a:38:0c:60:cd:91:9a:11:92:6a:
60:2c:f7:b8:2e:fc:1b:09:7e:b6:65:41:40:42:a7:d2:97:30:
9f:9d:c5:48:97:a4:ca:68:f2:84:72:1d:8f:d7:a8:30:cd:e0:
86:3c:33:f3:b2:d2:d9:52:1c:e3:ba:82:fb:70:b0:7f:b4:23:
e7:ee:05:60:c9:d4:a9:92:a3:ea:c9:a5:10:b1:0a:ff:80:21:
71:84:7b:f6:6d:26:04:06:4b:4a:48:95:5b:9d:38:c0:81:78:
3f:71:eb:34:85:50:5e:8f:46:eb:f0:e5:d2:2c:3a:82:7d:bd:
36:41:df:4b:ed:58:59:62:c6:f6:aa:9f:51:56:db:28:4b:25:
cf:ce:36:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSe+6539myeUBhat0WOuFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OGYwNjNkMjllOTEwZjAzM2JlY2I2NTZlOGI5OTAxZjY5
ZWM5NzQwHhcNMjUxMTExMDUwMTAyWhcNMjUxMTEyMDUwMTAyWjAzMTEwLwYDVQQD
EygyOTc2Y2EyNzkzM2EwNjQ0NDU4YTdiMTY4YTFjNjI1MDNiYTRjNGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBGafNvaNFr37Sz1ULmT4dYhsyNf
agc/LR6vkTOVKNoq0eWP8EJAo1suxB8jrV+oHKwCS3yMxKkC98o6/nuakLOopr+8
gfZIaGtKa9OBDE39lSk8Dg0WF/PikPGUEgD/uFUpWD50oUOp/dV2sM7RPkPnDVvi
OF3RCVjf0lW+aIHI8CeBiouKVLACvMpfnn1m/A/1c4g/iTEC3lYeQgUkvgtpzjtJ
quzmzGB2+YJT3Yc4kvmKRKv78Jfb1vgCX228np9GWcLIr/SumlJowqsExxzy7Orb
g/epLJCuxpSmIWo9XHY58iYiaKTlH/b9MQX00Or/sLOyhi1ZxTTR+oBxoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCl2yieTOgZERYp7FoocYlA7pMTtMB8GA1UdIwQY
MBaAFLSPBj0p6RDwM77LZW6LmQH2nsl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEk4R1BTbnBFUEF6dnN0bGJvdVpBZmFleVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8yNmM3ZmYtOTk4ZS00MTMxLWE3NDct
M2M0M2MzZDM1ZWYzLzEvdEk4R1BTbnBFUEF6dnN0bGJvdVpBZmFleVhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8yNmM3ZmYtOTk4ZS00MTMxLWE3NDctM2M0M2MzZDM1ZWYz
LzEvdEk4R1BTbnBFUEF6dnN0bGJvdVpBZmFleVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndeL71AH
9Bspv9LL6K/zphvB5r5mP17ANL+d9cg+kifJgcOOeqruxjtasVmj2ZmWio7bb8oF
pfH8MLCaioJlFoOKC9DuvHLipvumUsaWNvNCfel/S12s8jS2UfZMqRNfvDjCerUM
eJxxvE29t5IXrQpUtG9aOAxgzZGaEZJqYCz3uC78Gwl+tmVBQEKn0pcwn53FSJek
ymjyhHIdj9eoMM3ghjwz87LS2VIc47qC+3Cwf7Qj5+4FYMnUqZKj6smlELEK/4Ah
cYR79m0mBAZLSkiVW504wIF4P3HrNIVQXo9G6/Dl0iw6gn29NkHfS+1YWWLG9qqf
UVbbKEslz842tg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:38 2025 by rpki-client