Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
File: TSkoLUc3P5QvCti5HtlAk7Zuo68.mft (raw, json)
Hash identifier: DECdSASoA/Pc3hJf07cwZeB0cRKRPRIa+nPIXXrEDAY=
Subject key identifier: 02:E4:30:55:85:17:80:76:55:A6:B5:A9:F7:65:9C:4A:BB:E8:53:A5
Authority key identifier: 4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
Certificate issuer: /CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Certificate serial: 019A72267576F79C1C0DA5CF03C7082AEAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
Manifest number: 16A8
Signing time: Tue 11 Nov 2025 09:01:54 +0000
Manifest this update: Tue 11 Nov 2025 09:01:54 +0000
Manifest next update: Wed 12 Nov 2025 09:01:54 +0000
Files and hashes: 1: 8G7CKA2HbZHRoNb9HaqBloS90vU.roa (hash: lDvm+Nsn5gFxpzefNnpEbQ5VLuNGtuV4rwnVopzkwq0=)
2: TSkoLUc3P5QvCti5HtlAk7Zuo68.crl (hash: eAJU+RKqrO9y5O9Usa0HKS8lSzI5PoERwXxVhISukRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:75:76:f7:9c:1c:0d:a5:cf:03:c7:08:2a:ea:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Validity
Not Before: Nov 11 09:01:54 2025 GMT
Not After : Nov 12 09:01:54 2025 GMT
Subject: CN=02e430558517807655a6b5a9f7659c4abbe853a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:80:b1:e8:e7:0e:0e:22:aa:c9:2e:fa:3e:d1:
b8:c5:61:9e:29:dd:c9:a0:11:4c:6a:bc:09:52:22:
b4:70:c4:b7:d6:00:e7:4d:f6:2b:66:f2:04:ba:4d:
ce:ca:94:1f:72:12:ae:d6:bd:03:9a:f3:0a:c5:58:
da:93:ca:e0:35:82:be:75:c9:f9:c0:93:f8:1c:86:
cc:8a:af:8f:aa:f7:6f:e4:df:ee:d1:23:97:56:3d:
98:56:7a:94:5e:ce:6c:12:13:03:e9:f0:39:59:e1:
74:e1:78:42:76:c6:a0:c8:77:81:cd:0c:c4:58:da:
52:5f:a3:20:3f:ed:92:d7:e9:23:4e:85:c5:06:51:
d8:54:9e:fd:6b:d8:46:c2:2d:c4:ca:6c:1b:58:50:
49:9a:28:68:f0:3b:52:db:5c:58:cc:9e:f8:8d:2e:
14:26:38:2d:b2:5d:1b:45:cc:28:4d:f0:b2:68:21:
d7:8e:38:a6:3b:eb:eb:bd:dc:3e:11:4f:1a:17:44:
ce:9c:ad:27:10:14:91:fc:1e:40:97:f8:c9:e8:03:
13:95:1a:a1:a4:4a:15:75:68:6e:01:89:3f:70:9a:
5c:d7:aa:ca:0c:98:52:58:79:17:9b:57:6e:52:9c:
63:1e:f1:29:83:45:75:9e:67:d1:40:94:c0:56:d7:
56:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E4:30:55:85:17:80:76:55:A6:B5:A9:F7:65:9C:4A:BB:E8:53:A5
X509v3 Authority Key Identifier:
keyid:4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:21:6c:65:35:3e:57:3e:21:c4:c1:df:b8:ad:b6:7a:f6:cb:
b6:32:9a:a3:2f:f8:27:e5:7e:d9:59:d4:21:f7:49:80:74:a8:
cc:48:4f:e6:93:13:c9:06:e1:83:f5:7f:54:ee:3a:d7:7c:a6:
49:e0:94:0a:91:40:78:98:1a:1f:0d:db:a3:48:ff:22:65:9a:
2d:67:b6:1d:3c:35:cb:69:fb:62:14:00:b6:a9:5d:62:05:f1:
a8:02:51:a0:85:88:e2:9f:2f:92:8c:4f:70:6e:ab:2d:2f:4c:
d3:09:a6:39:19:62:2a:8c:0a:0a:4c:d2:10:4f:cb:4f:46:61:
c2:f1:15:64:1a:a4:48:02:d0:8a:90:06:05:25:94:3a:b2:10:
3f:6d:15:2b:af:6a:32:1d:fa:28:c1:8b:40:fe:e8:40:d9:ec:
b9:0c:c6:39:90:04:0b:e9:35:8e:f7:2f:3c:64:d2:70:4b:80:
94:a7:76:12:aa:65:a1:a4:a9:2d:53:8b:f6:31:66:2f:c1:47:
be:16:94:04:4b:0b:e4:11:d7:7e:74:6d:10:3f:13:72:40:5b:
4e:1b:cc:25:67:0a:e4:bf:87:ea:b2:35:f5:e9:0e:17:99:13:
18:a9:4c:5d:17:ed:86:cb:af:24:9e:12:11:95:56:f9:5d:64:
46:1f:b6:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJnV295wcDaXPA8cIKurnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMjkyODJkNDczNzNmOTQyZjBhZDhiOTFlZDk0MDkzYjY2
ZWEzYWYwHhcNMjUxMTExMDkwMTU0WhcNMjUxMTEyMDkwMTU0WjAzMTEwLwYDVQQD
EygwMmU0MzA1NTg1MTc4MDc2NTVhNmI1YTlmNzY1OWM0YWJiZTg1M2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlICx6OcODiKqyS76PtG4xWGeKd3J
oBFMarwJUiK0cMS31gDnTfYrZvIEuk3OypQfchKu1r0DmvMKxVjak8rgNYK+dcn5
wJP4HIbMiq+Pqvdv5N/u0SOXVj2YVnqUXs5sEhMD6fA5WeF04XhCdsagyHeBzQzE
WNpSX6MgP+2S1+kjToXFBlHYVJ79a9hGwi3EymwbWFBJmiho8DtS21xYzJ74jS4U
Jjgtsl0bRcwoTfCyaCHXjjimO+vrvdw+EU8aF0TOnK0nEBSR/B5Al/jJ6AMTlRqh
pEoVdWhuAYk/cJpc16rKDJhSWHkXm1duUpxjHvEpg0V1nmfRQJTAVtdWfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALkMFWFF4B2Vaa1qfdlnEq76FOlMB8GA1UdIwQY
MBaAFE0pKC1HNz+ULwrYuR7ZQJO2bqOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFNrb0xVYzNQNVF2Q3RpNUh0bEFrN1p1bzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82NWE0YzItMzRiMy00MjA1LWFmZDEt
YzU0ODFkYjM3MThkLzEvVFNrb0xVYzNQNVF2Q3RpNUh0bEFrN1p1bzY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82NWE0YzItMzRiMy00MjA1LWFmZDEtYzU0ODFkYjM3MThk
LzEvVFNrb0xVYzNQNVF2Q3RpNUh0bEFrN1p1bzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCFsZTU+
Vz4hxMHfuK22evbLtjKaoy/4J+V+2VnUIfdJgHSozEhP5pMTyQbhg/V/VO4613ym
SeCUCpFAeJgaHw3bo0j/ImWaLWe2HTw1y2n7YhQAtqldYgXxqAJRoIWI4p8vkoxP
cG6rLS9M0wmmORliKowKCkzSEE/LT0ZhwvEVZBqkSALQipAGBSWUOrIQP20VK69q
Mh36KMGLQP7oQNnsuQzGOZAEC+k1jvcvPGTScEuAlKd2EqploaSpLVOL9jFmL8FH
vhaUBEsL5BHXfnRtED8TckBbThvMJWcK5L+H6rI19ekOF5kTGKlMXRfthsuvJJ4S
EZVW+V1kRh+2qQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:40 2025 by rpki-client