Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: uL8KaI0xwXb9cCFIEAPFMlOaPwaG62kIi6kvT67JLjM=
Subject key identifier: D4:C5:0B:18:01:0B:D9:0A:BA:C4:68:CF:25:D9:DD:E8:7B:D9:1B:36
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 019A1FF66668EC86D75146622804509B6511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 145C
Signing time: Sun 26 Oct 2025 10:00:32 +0000
Manifest this update: Sun 26 Oct 2025 10:00:32 +0000
Manifest next update: Mon 27 Oct 2025 10:00:32 +0000
Files and hashes: 1: bqp6f9GjY5TF5wTxOeK8Ji-YrkE.roa (hash: b7SVmPCcwJQed2khWFQ0sTeZykPXeoqQG4LQy2NRwCA=)
2: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: wjpcVYB7B1p1mCeME+mJrP+Stm9fnw5RHFQqulSmy1g=)
3: xktUIB6GDLW-h2_LFZTy4dam33Y.roa (hash: BgrfS/HN5mPWhSmcXKgkikTloXU/AxYtLSZ8SaD1EM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:f6:66:68:ec:86:d7:51:46:62:28:04:50:9b:65:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Oct 26 10:00:32 2025 GMT
Not After : Oct 27 10:00:32 2025 GMT
Subject: CN=d4c50b18010bd90abac468cf25d9dde87bd91b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:ab:9e:7c:27:81:a2:0f:49:e3:d9:a3:ed:
a2:fd:3b:65:5c:30:35:66:b3:77:e0:50:7f:9d:ec:
cc:7e:6b:d1:34:ac:35:6a:c9:2e:d6:69:54:23:a4:
d7:8d:d9:18:1b:2e:f9:5a:77:b7:0f:1b:0d:95:14:
16:6c:05:86:48:cf:4a:86:6f:99:da:d7:64:da:c0:
84:18:29:92:0a:31:5d:f4:d0:f7:9b:3a:fa:d9:2f:
27:f4:a5:9f:8a:ee:68:69:67:f2:91:91:3d:50:cc:
b2:4d:9f:47:1f:44:d7:a0:4e:7c:26:8f:2b:77:07:
d2:00:d6:06:7a:66:26:64:e1:95:ce:e5:dc:c0:c9:
00:6f:19:36:28:73:62:7b:59:dd:d2:8d:34:dc:d9:
e9:18:8a:08:7e:f7:fa:2d:12:f1:1c:51:36:02:ad:
bd:15:7b:d8:a8:11:72:ac:1d:6b:04:ce:c0:4a:ea:
53:10:d9:2c:0e:dd:fa:d5:fc:b7:0a:0a:ac:24:7b:
51:08:72:aa:50:89:32:1f:cc:c8:61:b7:5f:13:54:
e9:9b:00:77:39:c9:02:2c:76:ec:95:61:26:68:18:
4b:ab:f7:59:9c:c0:b4:e6:51:81:b8:65:30:38:6d:
e6:16:73:b0:33:68:0d:cc:39:22:d7:58:bd:3f:c0:
05:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C5:0B:18:01:0B:D9:0A:BA:C4:68:CF:25:D9:DD:E8:7B:D9:1B:36
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f6:14:a4:37:2e:9a:ab:91:eb:78:bc:c0:a3:aa:24:51:55:
8d:6a:2b:2f:07:ca:89:e6:84:a4:e3:80:a2:4f:ca:3f:84:fa:
91:bf:1b:2c:49:e9:c3:d6:d1:f1:7c:25:f4:ad:6d:b9:84:e0:
93:49:19:37:e0:cb:38:f2:02:43:cd:6c:a3:ca:50:18:7b:3d:
f7:e7:d6:5e:2b:d8:57:01:09:12:51:b1:38:40:d4:11:51:56:
94:9a:90:19:ea:e3:48:9f:2e:46:e4:2e:d2:c9:33:03:c5:29:
6f:84:34:7e:b2:be:60:05:36:79:20:01:ef:ce:f8:eb:18:e1:
7b:ba:dd:75:7e:e4:7e:52:4f:40:17:e9:29:8c:a8:2d:c9:b3:
bb:4e:07:7d:6f:f0:90:ed:1d:5a:db:00:77:a5:25:8f:bc:b7:
29:4e:fa:3a:d0:a1:b6:af:a4:1d:d7:04:4a:c6:63:2a:29:2a:
f3:73:69:4a:cb:b8:8f:4c:b6:c9:24:f5:50:95:b2:e2:bb:6f:
4f:50:b8:25:99:ff:6d:58:1d:2c:46:4a:d8:f1:24:af:bb:0e:
6d:ec:82:97:1a:44:ab:ae:79:d4:f3:40:14:85:e1:fe:64:7e:
40:1d:1a:3f:0a:31:fe:f7:16:1b:dd:6f:d7:bc:b0:59:2d:64:
92:3b:1f:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZof9mZo7IbXUUZiKARQm2URMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZjExNTQyNGMxODFjNjc5NjZjY2MyNDY3ZWRlNjlkMDYw
Y2NmNTMwHhcNMjUxMDI2MTAwMDMyWhcNMjUxMDI3MTAwMDMyWjAzMTEwLwYDVQQD
EyhkNGM1MGIxODAxMGJkOTBhYmFjNDY4Y2YyNWQ5ZGRlODdiZDkxYjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjSrnnwngaIPSePZo+2i/TtlXDA1
ZrN34FB/nezMfmvRNKw1asku1mlUI6TXjdkYGy75Wne3DxsNlRQWbAWGSM9Khm+Z
2tdk2sCEGCmSCjFd9ND3mzr62S8n9KWfiu5oaWfykZE9UMyyTZ9HH0TXoE58Jo8r
dwfSANYGemYmZOGVzuXcwMkAbxk2KHNie1nd0o003NnpGIoIfvf6LRLxHFE2Aq29
FXvYqBFyrB1rBM7ASupTENksDt361fy3CgqsJHtRCHKqUIkyH8zIYbdfE1TpmwB3
OckCLHbslWEmaBhLq/dZnMC05lGBuGUwOG3mFnOwM2gNzDki11i9P8AFlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTFCxgBC9kKusRozyXZ3eh72Rs2MB8GA1UdIwQY
MBaAFLTxFUJMGBxnlmzMJGft5p0GDM9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBFVlFrd1lIR2VXYk13a1otM21uUVlNejFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84NjkyMTQtMTZkNC00NWUwLWI4N2Ut
MzJlOTMyZDZmZDBlLzEvdFBFVlFrd1lIR2VXYk13a1otM21uUVlNejFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS84NjkyMTQtMTZkNC00NWUwLWI4N2UtMzJlOTMyZDZmZDBl
LzEvdFBFVlFrd1lIR2VXYk13a1otM21uUVlNejFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/YUpDcu
mquR63i8wKOqJFFVjWorLwfKieaEpOOAok/KP4T6kb8bLEnpw9bR8Xwl9K1tuYTg
k0kZN+DLOPICQ81so8pQGHs99+fWXivYVwEJElGxOEDUEVFWlJqQGerjSJ8uRuQu
0skzA8Upb4Q0frK+YAU2eSAB78746xjhe7rddX7kflJPQBfpKYyoLcmzu04HfW/w
kO0dWtsAd6Ulj7y3KU76OtChtq+kHdcESsZjKikq83NpSsu4j0y2yST1UJWy4rtv
T1C4JZn/bVgdLEZK2PEkr7sObeyClxpEq6551PNAFIXh/mR+QB0aPwox/vcWG91v
17ywWS1kkjsfVg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 16:48:54 2025 by rpki-client