Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
File: Ty_D6GA1oLjpOA_7I_I_V0MLess.mft (raw, json)
Hash identifier: RoUdJfUN1iyyOIA+QpykXFIqIvkPza0ce+tTAnDP1sE=
Subject key identifier: 0B:CD:87:56:03:85:3D:72:90:E6:35:61:DB:A9:06:A7:B6:E4:23:A9
Authority key identifier: 4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB
Certificate issuer: /CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
Certificate serial: 019A70DC20B4927ED13C53CD51F44398EB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
Manifest number: 0F8E
Signing time: Tue 11 Nov 2025 03:01:05 +0000
Manifest this update: Tue 11 Nov 2025 03:01:05 +0000
Manifest next update: Wed 12 Nov 2025 03:01:05 +0000
Files and hashes: 1: Ty_D6GA1oLjpOA_7I_I_V0MLess.crl (hash: ji0YL5I/5NJBgOLBtmOfKoeF3sO8J6UEKuW1C0M+orU=)
2: WjR-M02WnGrf1hvkkNo0bZEQvnQ.roa (hash: CW8wqMfi/RZSfPuGRw3DqaK3c0hn412Beo4u95KUkQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:20:b4:92:7e:d1:3c:53:cd:51:f4:43:98:eb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
Validity
Not Before: Nov 11 03:01:05 2025 GMT
Not After : Nov 12 03:01:05 2025 GMT
Subject: CN=0bcd875603853d7290e63561dba906a7b6e423a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:75:d2:7e:85:a2:a0:74:0e:c8:3f:0a:dd:
3e:96:80:81:08:cb:76:4d:7f:ba:69:7a:af:32:f2:
99:9c:ab:e8:05:bc:c5:10:7f:9f:4a:e3:c6:1a:24:
44:4e:62:91:f9:09:50:ed:c8:17:ef:07:f2:d6:86:
88:35:9f:4b:dc:9a:51:13:b3:03:55:f7:7b:42:89:
b1:be:fe:a4:43:80:20:27:2f:c8:df:98:da:63:46:
1c:87:64:71:70:55:d2:e5:ed:e9:b2:db:a2:59:96:
3c:91:0a:40:d5:b0:4b:41:9f:f4:ca:86:7f:9a:e5:
44:fa:57:02:dd:a0:ab:cb:ef:5d:2d:a0:a5:5a:4b:
c3:a7:42:0c:9d:fc:33:12:5c:f5:66:cd:0a:00:c0:
01:66:f1:15:e7:ac:f8:ba:77:90:bf:f8:6b:12:7c:
bc:24:e6:4c:90:47:55:d3:94:10:ca:73:e0:ad:67:
0b:07:b3:25:47:22:cf:14:6e:73:15:ae:40:ae:0a:
ee:f1:e7:41:60:da:c3:d0:ba:16:a8:e8:28:8f:c8:
a5:9c:48:ff:47:6b:96:70:79:f6:dc:5c:10:12:ca:
63:8a:da:5f:b7:16:ab:70:1b:e3:c3:18:b9:67:80:
f8:57:0f:b9:7d:a2:c5:ba:8b:1c:93:e7:0b:82:8f:
11:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CD:87:56:03:85:3D:72:90:E6:35:61:DB:A9:06:A7:B6:E4:23:A9
X509v3 Authority Key Identifier:
keyid:4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2a:7a:ac:fb:7b:d6:f1:4e:88:48:a7:5b:8a:d0:86:d8:ab:
f5:bc:a9:5d:e3:1c:a9:f3:b1:58:f9:43:ed:3a:43:7a:da:b9:
54:96:e8:dc:ec:53:ec:f8:1e:48:b5:45:79:1d:d3:c6:23:68:
11:82:a5:90:25:fe:92:75:5f:b3:96:ed:c1:5d:db:b9:ad:32:
0e:b2:cb:11:c0:c5:d2:5d:59:22:88:6a:dd:72:59:9a:a6:ec:
4d:40:c7:c6:4b:8a:29:42:7b:28:66:3d:24:8c:aa:67:f2:0d:
f0:71:c7:1b:e6:c0:d4:81:91:b0:32:03:9c:6e:52:b8:77:f4:
b1:5f:4e:31:f0:fa:23:47:1c:9b:51:be:64:29:da:e3:cc:ab:
8b:c7:38:df:43:ca:41:93:a5:2a:3f:92:98:c3:0e:1b:c4:f8:
bf:0d:d6:f4:46:e0:52:cc:1b:3a:6b:00:c8:fc:7a:16:ce:f4:
7f:d9:b5:1e:2c:9d:21:39:2c:fe:98:03:00:0d:8e:a5:ac:43:
4c:19:43:73:71:d1:d5:11:94:4c:db:3f:fa:aa:00:bb:fb:cb:
e5:1e:da:7e:42:49:4e:13:b4:70:6c:0d:fe:e1:b5:7a:fa:e5:
87:6c:7f:c7:7d:86:bd:be:ee:b6:dc:f3:62:33:df:8d:72:13:
d2:a8:ca:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3CC0kn7RPFPNUfRDmOsKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMmZjM2U4NjAzNWEwYjhlOTM4MGZmYjIzZjIzZjU3NDMw
YjdhY2IwHhcNMjUxMTExMDMwMTA1WhcNMjUxMTEyMDMwMTA1WjAzMTEwLwYDVQQD
EygwYmNkODc1NjAzODUzZDcyOTBlNjM1NjFkYmE5MDZhN2I2ZTQyM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZx10n6FoqB0Dsg/Ct0+loCBCMt2
TX+6aXqvMvKZnKvoBbzFEH+fSuPGGiRETmKR+QlQ7cgX7wfy1oaINZ9L3JpRE7MD
Vfd7Qomxvv6kQ4AgJy/I35jaY0Ych2RxcFXS5e3pstuiWZY8kQpA1bBLQZ/0yoZ/
muVE+lcC3aCry+9dLaClWkvDp0IMnfwzElz1Zs0KAMABZvEV56z4uneQv/hrEny8
JOZMkEdV05QQynPgrWcLB7MlRyLPFG5zFa5Argru8edBYNrD0LoWqOgoj8ilnEj/
R2uWcHn23FwQEspjitpftxarcBvjwxi5Z4D4Vw+5faLFuosck+cLgo8RwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvNh1YDhT1ykOY1YdupBqe25COpMB8GA1UdIwQY
MBaAFE8vw+hgNaC46TgP+yPyP1dDC3rLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8xZTM2ZTgtOGZhNi00YzE3LWEyNDAt
MzJlNTdiYzU0NzRiLzEvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8xZTM2ZTgtOGZhNi00YzE3LWEyNDAtMzJlNTdiYzU0NzRi
LzEvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSp6rPt7
1vFOiEinW4rQhtir9bypXeMcqfOxWPlD7TpDetq5VJbo3OxT7PgeSLVFeR3TxiNo
EYKlkCX+knVfs5btwV3bua0yDrLLEcDF0l1ZIohq3XJZmqbsTUDHxkuKKUJ7KGY9
JIyqZ/IN8HHHG+bA1IGRsDIDnG5SuHf0sV9OMfD6I0ccm1G+ZCna48yri8c430PK
QZOlKj+SmMMOG8T4vw3W9EbgUswbOmsAyPx6Fs70f9m1HiydITks/pgDAA2OpaxD
TBlDc3HR1RGUTNs/+qoAu/vL5R7afkJJThO0cGwN/uG1evrlh2x/x32Gvb7uttzz
YjPfjXIT0qjKfg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:22 2025 by rpki-client