Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
File: tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json)
Hash identifier: ZNFbhKFfcph08gf2GfJvegvYUX/3Z78s/3IAQLcbgHE=
Subject key identifier: 83:AA:4E:B3:21:71:26:3A:0E:BB:3D:3C:9D:D9:EC:BF:63:AD:42:91
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial: 019A7112D8F0B2ED171A5B3E150F7EEAC31B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
Manifest number: 04C2
Signing time: Tue 11 Nov 2025 04:00:51 +0000
Manifest this update: Tue 11 Nov 2025 04:00:51 +0000
Manifest next update: Wed 12 Nov 2025 04:00:51 +0000
Files and hashes: 1: 3NvNrWEVmChu4DMSl71yUBOUL1E.roa (hash: GasLqu+d7ICCgXWrZURm0ppqSwFCpgX0/TSR8hCVtjo=)
2: 7PrThjlXTdWomtXWwr_eOJDlAFY.roa (hash: 2SgrElvVXtH7x+BnWs8QSmeq0QSew6wcOvgzJlh8YyA=)
3: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: fdahBt1iYsbLAxLNCD1MwK6zw2Z7l4N9uLbU+ZxlH60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d8:f0:b2:ed:17:1a:5b:3e:15:0f:7e:ea:c3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
Validity
Not Before: Nov 11 04:00:51 2025 GMT
Not After : Nov 12 04:00:51 2025 GMT
Subject: CN=83aa4eb32171263a0ebb3d3c9dd9ecbf63ad4291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:30:3e:46:bf:6e:06:d1:31:af:3b:45:6f:
f8:11:62:31:32:df:f9:64:ab:83:17:04:18:7e:08:
83:5e:fd:40:fa:56:eb:1d:1f:6e:9f:e3:b1:5e:73:
84:9b:25:07:d0:90:77:67:6d:61:86:36:49:97:65:
40:82:8d:c0:2a:b8:e7:5f:60:04:19:a8:d8:1d:f6:
a6:31:bc:42:78:a9:38:64:95:3f:36:00:f5:ce:7a:
52:d0:d1:21:46:28:c7:ba:df:d2:9a:cf:f4:67:fc:
ee:f4:ec:67:51:a8:92:08:d2:67:5f:03:04:28:e2:
c4:61:fd:2c:f8:fc:2f:88:12:6d:31:1f:7d:5a:92:
02:db:24:13:fe:f1:b5:fd:76:77:e3:1f:cd:69:76:
ff:7e:b4:34:a6:cf:5a:00:9d:b3:e3:9d:8e:f9:6d:
98:67:d5:1b:c2:d5:9f:f6:6c:d0:85:89:77:aa:54:
45:c6:d3:18:bd:c0:d2:e6:8e:60:f5:dd:21:2a:8f:
53:51:37:62:fc:52:1b:90:dc:ea:26:9c:d0:a8:8c:
f1:fb:5c:8a:30:ee:58:18:48:62:1d:f4:66:d2:c9:
90:82:17:d0:9c:ee:b1:ae:8c:d2:c6:01:fd:6f:35:
d9:3b:34:ee:d3:d3:00:fe:6a:10:fd:40:5f:6d:ad:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AA:4E:B3:21:71:26:3A:0E:BB:3D:3C:9D:D9:EC:BF:63:AD:42:91
X509v3 Authority Key Identifier:
keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:49:0d:aa:86:4e:45:bf:36:9a:17:01:d9:7f:19:26:08:41:
25:37:77:7d:51:37:64:82:db:55:d4:b5:62:3a:ad:f1:17:62:
59:b1:90:28:e1:c8:72:4e:a7:e5:53:ff:c6:87:f4:e3:2a:c5:
76:60:01:09:77:2c:5d:48:a5:b9:ed:ba:75:8a:75:27:3e:a3:
d0:88:ff:33:e2:74:9b:bb:d6:8e:c3:76:2e:da:bf:53:cf:5e:
73:b5:eb:59:f2:93:71:ee:41:e8:1c:95:65:2b:38:48:45:85:
7b:22:2b:98:a3:07:f6:d2:b1:40:c1:af:38:7d:ca:3d:e6:43:
46:fb:a7:b0:26:7e:d8:17:a6:7c:2f:05:65:02:71:7b:62:f3:
fc:c6:61:50:88:ed:24:23:da:d6:79:c4:be:68:db:b9:e1:35:
18:9f:35:40:5e:4b:05:6a:bc:51:f0:c6:8e:11:5c:ff:ff:16:
3d:99:c5:79:46:07:e7:75:b1:e4:a1:06:b0:6a:79:e9:85:30:
8a:f8:b0:16:42:45:41:6a:29:ab:4e:7e:1a:76:29:dc:46:f1:
7b:f2:0b:f8:15:1e:a9:4c:ef:d7:7c:8e:58:19:54:29:91:52:
f1:bc:f7:b9:e0:a2:22:dd:b2:79:a1:5d:d3:97:c9:7b:ad:5c:
e7:07:f8:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEtjwsu0XGls+FQ9+6sMbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2M2EzMDk0NDM5Y2FjMGY1NTU3MDEyODZjZDU0MzczYmNl
NmNiNTAwHhcNMjUxMTExMDQwMDUxWhcNMjUxMTEyMDQwMDUxWjAzMTEwLwYDVQQD
Eyg4M2FhNGViMzIxNzEyNjNhMGViYjNkM2M5ZGQ5ZWNiZjYzYWQ0MjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEUwPka/bgbRMa87RW/4EWIxMt/5
ZKuDFwQYfgiDXv1A+lbrHR9un+OxXnOEmyUH0JB3Z21hhjZJl2VAgo3AKrjnX2AE
GajYHfamMbxCeKk4ZJU/NgD1znpS0NEhRijHut/Sms/0Z/zu9OxnUaiSCNJnXwME
KOLEYf0s+PwviBJtMR99WpIC2yQT/vG1/XZ34x/NaXb/frQ0ps9aAJ2z452O+W2Y
Z9UbwtWf9mzQhYl3qlRFxtMYvcDS5o5g9d0hKo9TUTdi/FIbkNzqJpzQqIzx+1yK
MO5YGEhiHfRm0smQghfQnO6xrozSxgH9bzXZOzTu09MA/moQ/UBfba3jfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOqTrMhcSY6Drs9PJ3Z7L9jrUKRMB8GA1UdIwQY
MBaAFLY6MJRDnKwPVVcBKGzVQ3O85stQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYt
OWRkZGQ2ODAyMDg4LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYtOWRkZGQ2ODAyMDg4
LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0kNqoZO
Rb82mhcB2X8ZJghBJTd3fVE3ZILbVdS1Yjqt8RdiWbGQKOHIck6n5VP/xof04yrF
dmABCXcsXUilue26dYp1Jz6j0Ij/M+J0m7vWjsN2Ltq/U89ec7XrWfKTce5B6ByV
ZSs4SEWFeyIrmKMH9tKxQMGvOH3KPeZDRvunsCZ+2BemfC8FZQJxe2Lz/MZhUIjt
JCPa1nnEvmjbueE1GJ81QF5LBWq8UfDGjhFc//8WPZnFeUYH53Wx5KEGsGp56YUw
iviwFkJFQWopq05+GnYp3Ebxe/IL+BUeqUzv13yOWBlUKZFS8bz3ueCiIt2yeaFd
05fJe61c5wf4gw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:34 2025 by rpki-client