Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: LCBIybqzE7GtbmxTCW8cORQ7tT/LLvjQIhmF433CHAg=
Subject key identifier: 42:B5:CF:0B:1E:05:ED:DF:B1:16:6C:5A:F5:BB:CF:3A:90:C6:08:7A
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 019A228A549BF6542379E05BF551D12E487B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 22:01:22 +0000
Manifest this update: Sun 26 Oct 2025 22:01:22 +0000
Manifest next update: Mon 27 Oct 2025 22:01:22 +0000
Files and hashes: 1: J7n-Yd5XTH7n67jouruR47yViJQ.roa (hash: uOcoBZNZsx1gjsqlLawiv97uMdypKgT5mBdaC/TonUs=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: XJvYM+vGEhJKBFjmY93rrtuQpA7tHZDRjfVb/2WfKxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:54:9b:f6:54:23:79:e0:5b:f5:51:d1:2e:48:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Oct 26 22:01:22 2025 GMT
Not After : Oct 27 22:01:22 2025 GMT
Subject: CN=42b5cf0b1e05eddfb1166c5af5bbcf3a90c6087a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:04:14:86:05:b8:3f:58:dd:c4:e7:b2:50:
ad:cc:2c:dd:f2:80:ad:50:0b:71:42:71:e4:4a:7a:
71:05:4b:64:08:53:77:7d:dc:21:0b:97:8a:5f:b8:
47:74:bf:51:c5:de:cb:a7:7c:7c:68:f6:81:2c:77:
75:33:4c:43:72:21:fb:b2:e7:5d:5b:d4:74:14:61:
72:44:6e:91:c9:a0:58:e4:23:f1:98:b8:e3:d4:87:
a2:94:94:56:0e:b0:10:0e:10:8b:b5:38:f2:48:62:
8f:2a:12:58:7e:41:a9:b6:ee:c7:c1:7a:16:bb:ec:
2e:20:8c:e6:85:3d:e4:49:c0:c0:04:c5:5c:f7:63:
a7:5a:74:cf:1a:81:41:17:ca:64:32:3e:86:35:48:
a7:46:df:0a:eb:e0:72:0b:b8:cb:c2:19:7e:bf:8e:
c0:da:f0:e3:da:3d:7a:04:e1:c2:7f:d2:52:86:2e:
24:e4:f3:05:3e:e8:8b:d4:ef:4b:07:16:90:fc:bb:
6a:ac:a0:4f:23:c6:49:fb:c9:94:ed:c2:10:6a:2e:
5c:cb:97:d3:10:90:74:91:b7:22:02:f1:31:65:cc:
0b:70:fc:c0:d2:b1:d1:92:28:f8:f0:5a:ca:0e:16:
a4:40:f8:bb:50:93:ca:b2:c6:76:5e:44:14:61:dc:
96:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B5:CF:0B:1E:05:ED:DF:B1:16:6C:5A:F5:BB:CF:3A:90:C6:08:7A
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6e:6f:05:8e:0b:18:7e:a2:f4:4c:29:b4:0b:c2:42:cc:ec:
ea:ff:d0:ee:8e:e8:d2:b8:f8:35:04:6a:42:5e:dc:c4:db:72:
e3:29:e5:3f:73:18:b8:77:07:ae:44:b0:27:e7:ea:59:eb:21:
13:ed:40:47:f8:bf:85:46:29:01:9c:73:1b:20:96:38:62:d2:
b4:e7:9c:fe:32:e0:92:29:15:91:ba:3a:e1:d6:84:b5:fb:15:
7b:44:e3:bd:fb:1b:35:4a:d8:aa:a1:b6:65:49:28:04:d1:f6:
39:c3:8f:3e:a0:1c:55:89:ff:af:5a:c9:f8:8a:1d:90:30:d2:
30:b4:3e:3e:c5:67:d9:10:96:41:ae:f2:2f:c1:24:30:f4:f3:
26:79:8c:7d:76:56:ec:c0:74:b2:17:a0:67:f2:1d:81:04:3d:
9a:4d:b0:d7:f3:e1:b9:53:1f:99:28:29:9b:bd:f6:2a:73:42:
97:88:70:26:db:07:ce:f9:d1:99:6e:a4:f8:dc:88:e4:02:b6:
d2:46:ec:c3:23:9b:99:c9:28:0d:79:b5:75:f6:47:14:b1:a4:
63:13:9c:59:6a:64:f1:cd:c5:32:41:d4:6f:50:a5:fb:c5:23:
dd:b8:b4:b2:38:72:0b:8c:2e:5b:fd:2d:d0:49:a0:cd:41:8f:
25:de:79:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiilSb9lQjeeBb9VHRLkh7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OWViNTBjYjhiYWM5MmRjMTc2ZThhODdjZjI1NTUyODIy
MTk0ZmEwHhcNMjUxMDI2MjIwMTIyWhcNMjUxMDI3MjIwMTIyWjAzMTEwLwYDVQQD
Eyg0MmI1Y2YwYjFlMDVlZGRmYjExNjZjNWFmNWJiY2YzYTkwYzYwODdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ8EFIYFuD9Y3cTnslCtzCzd8oCt
UAtxQnHkSnpxBUtkCFN3fdwhC5eKX7hHdL9Rxd7Lp3x8aPaBLHd1M0xDciH7sudd
W9R0FGFyRG6RyaBY5CPxmLjj1IeilJRWDrAQDhCLtTjySGKPKhJYfkGptu7HwXoW
u+wuIIzmhT3kScDABMVc92OnWnTPGoFBF8pkMj6GNUinRt8K6+ByC7jLwhl+v47A
2vDj2j16BOHCf9JShi4k5PMFPuiL1O9LBxaQ/LtqrKBPI8ZJ+8mU7cIQai5cy5fT
EJB0kbciAvExZcwLcPzA0rHRkij48FrKDhakQPi7UJPKssZ2XkQUYdyWjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEK1zwseBe3fsRZsWvW7zzqQxgh6MB8GA1UdIwQY
MBaAFLSetQy4usktwXboqHzyVVKCIZT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEt
NGNhOTU2YjA4YTQxLzEvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEtNGNhOTU2YjA4YTQx
LzEvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXW5vBY4L
GH6i9EwptAvCQszs6v/Q7o7o0rj4NQRqQl7cxNty4ynlP3MYuHcHrkSwJ+fqWesh
E+1AR/i/hUYpAZxzGyCWOGLStOec/jLgkikVkbo64daEtfsVe0TjvfsbNUrYqqG2
ZUkoBNH2OcOPPqAcVYn/r1rJ+IodkDDSMLQ+PsVn2RCWQa7yL8EkMPTzJnmMfXZW
7MB0shegZ/IdgQQ9mk2w1/PhuVMfmSgpm732KnNCl4hwJtsHzvnRmW6k+NyI5AK2
0kbswyObmckoDXm1dfZHFLGkYxOcWWpk8c3FMkHUb1Cl+8Uj3bi0sjhyC4wuW/0t
0EmgzUGPJd55TQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 08:38:47 2025 by rpki-client