Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
File: tDqirb6dQEE3M58g_VhiPIo58TA.mft (raw, json)
Hash identifier: EoF1+1a3RUmyT11H7FBq6ScNphAF9zXGEcu0KQe+II4=
Subject key identifier: 0E:68:E4:CC:31:F8:80:46:AE:B1:F4:A8:47:7D:FE:9F:B8:6F:2E:4B
Authority key identifier: B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
Certificate issuer: /CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Certificate serial: 019A7149A01CF38433449777C3BCC79C58C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
Manifest number: 06CB
Signing time: Tue 11 Nov 2025 05:00:41 +0000
Manifest this update: Tue 11 Nov 2025 05:00:41 +0000
Manifest next update: Wed 12 Nov 2025 05:00:41 +0000
Files and hashes: 1: DR42yKGsjL2cx3Lp0nYZ2-J6QjI.roa (hash: SNpq+XJB/gPAUUzDmYBdIDihlauDEu/Coqako/V/GUw=)
2: tDqirb6dQEE3M58g_VhiPIo58TA.crl (hash: sWnhxErG8SZbmh+H4+NrKDmnfUOHW/M1xj6qhJyIS6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a0:1c:f3:84:33:44:97:77:c3:bc:c7:9c:58:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Validity
Not Before: Nov 11 05:00:41 2025 GMT
Not After : Nov 12 05:00:41 2025 GMT
Subject: CN=0e68e4cc31f88046aeb1f4a8477dfe9fb86f2e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:56:a5:e8:68:8b:c3:d3:6b:d3:3e:6c:99:
3e:40:4a:5a:20:1e:0f:dd:ec:52:19:7c:95:fa:c8:
b7:78:7a:eb:f4:d6:15:8a:a7:07:21:34:71:64:df:
60:d0:74:e4:43:3d:59:92:f0:18:a8:f1:8b:23:2c:
8f:41:ed:fe:6b:ef:45:f4:0b:91:99:39:84:f4:46:
74:5a:af:ff:83:23:3d:fc:de:f7:8a:c7:c0:1f:18:
bc:53:50:50:76:1f:a2:e8:c0:45:9f:07:dc:ab:99:
82:4a:09:1c:d8:e5:5d:bd:e7:81:b3:4f:fa:28:d0:
54:c1:e2:66:ef:b3:38:78:a1:05:dd:5c:16:ce:17:
5f:2d:26:2b:ea:8c:3f:53:fd:96:53:6c:15:99:c5:
be:75:ef:cd:1d:49:f5:fd:b4:ca:f5:f0:f9:f9:05:
5e:66:b8:a8:b0:a5:46:65:3e:0b:6f:da:dd:45:2a:
3a:f8:a2:da:b7:31:6f:c9:80:c5:a1:57:c6:40:95:
6b:e1:e1:82:e0:50:e6:31:32:30:b8:54:9b:37:0a:
be:74:65:9e:a2:80:e2:92:23:c7:6a:51:5c:84:39:
00:dd:2a:cf:c9:b9:2e:d5:8d:e3:84:42:7b:db:0e:
23:cc:94:aa:c9:ec:0f:2a:08:47:87:01:ae:63:a5:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:68:E4:CC:31:F8:80:46:AE:B1:F4:A8:47:7D:FE:9F:B8:6F:2E:4B
X509v3 Authority Key Identifier:
keyid:B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:da:5c:6d:05:36:39:ac:28:1c:7e:4d:a6:40:bf:22:34:52:
71:c9:f0:8a:3d:49:a7:9e:59:e4:e0:66:de:62:a5:58:59:c6:
5d:b1:4a:98:07:2f:e2:eb:aa:ff:1d:25:62:c3:e5:70:6c:fe:
76:ce:ce:97:88:c0:ea:39:34:10:74:a3:09:1c:af:49:55:b6:
df:ab:98:d5:9c:02:07:1e:a3:4e:c1:ec:95:7f:65:43:42:fe:
d2:c5:c0:b4:b9:36:00:f3:a4:94:e7:a4:5b:8c:ab:0c:8b:86:
77:e4:84:6d:80:14:a9:e0:d9:a4:34:70:e9:6d:97:1d:5b:0d:
41:03:ba:a4:c1:97:4a:50:89:49:e3:c7:ff:41:b5:9a:db:cd:
14:e2:22:7d:1a:ae:d8:50:4a:99:1e:4b:3b:4e:c4:d2:a7:7f:
24:7b:2c:e1:07:8a:a0:b1:0c:9e:1e:ac:d5:2d:c8:42:17:23:
eb:05:19:15:41:3e:ef:32:e5:ad:dc:2f:41:2d:9a:4a:36:de:
2f:ea:d1:4a:d7:45:dd:26:29:ae:8c:98:85:dc:90:5f:fe:de:
f7:f1:97:15:3b:67:ec:13:7b:af:bb:83:8a:d9:a9:5e:7e:bf:
6d:a2:f7:be:ad:82:2e:37:02:8e:b8:99:3a:72:99:f5:d6:4d:
88:cc:0b:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSaAc84QzRJd3w7zHnFjCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0M2FhMmFkYmU5ZDQwNDEzNzMzOWYyMGZkNTg2MjNjOGEz
OWYxMzAwHhcNMjUxMTExMDUwMDQxWhcNMjUxMTEyMDUwMDQxWjAzMTEwLwYDVQQD
EygwZTY4ZTRjYzMxZjg4MDQ2YWViMWY0YTg0NzdkZmU5ZmI4NmYyZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgJWpehoi8PTa9M+bJk+QEpaIB4P
3exSGXyV+si3eHrr9NYViqcHITRxZN9g0HTkQz1ZkvAYqPGLIyyPQe3+a+9F9AuR
mTmE9EZ0Wq//gyM9/N73isfAHxi8U1BQdh+i6MBFnwfcq5mCSgkc2OVdveeBs0/6
KNBUweJm77M4eKEF3VwWzhdfLSYr6ow/U/2WU2wVmcW+de/NHUn1/bTK9fD5+QVe
ZriosKVGZT4Lb9rdRSo6+KLatzFvyYDFoVfGQJVr4eGC4FDmMTIwuFSbNwq+dGWe
ooDikiPHalFchDkA3SrPybku1Y3jhEJ72w4jzJSqyewPKghHhwGuY6XwsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5o5Mwx+IBGrrH0qEd9/p+4by5LMB8GA1UdIwQY
MBaAFLQ6oq2+nUBBNzOfIP1YYjyKOfEwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNjJmNDAtNDhjNy00M2M2LTlkODMt
MTU0OGFjMTM1NmJlLzEvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yNjJmNDAtNDhjNy00M2M2LTlkODMtMTU0OGFjMTM1NmJl
LzEvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9pcbQU2
OawoHH5NpkC/IjRSccnwij1Jp55Z5OBm3mKlWFnGXbFKmAcv4uuq/x0lYsPlcGz+
ds7Ol4jA6jk0EHSjCRyvSVW236uY1ZwCBx6jTsHslX9lQ0L+0sXAtLk2APOklOek
W4yrDIuGd+SEbYAUqeDZpDRw6W2XHVsNQQO6pMGXSlCJSePH/0G1mtvNFOIifRqu
2FBKmR5LO07E0qd/JHss4QeKoLEMnh6s1S3IQhcj6wUZFUE+7zLlrdwvQS2aSjbe
L+rRStdF3SYproyYhdyQX/7e9/GXFTtn7BN7r7uDitmpXn6/baL3vq2CLjcCjriZ
OnKZ9dZNiMwLcQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:52 2025 by rpki-client