Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: /7wfZsSUrCHgWfkyMWWhvvNTNUBYyIsmCJxHtuOeBPM=
Subject key identifier: 5C:06:47:F9:5E:4B:A5:09:02:DC:85:2B:C8:D6:90:3C:98:BE:7B:87
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 019A22C053A3A32F6B170D7638BD347533F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0BAC
Signing time: Sun 26 Oct 2025 23:00:20 +0000
Manifest this update: Sun 26 Oct 2025 23:00:20 +0000
Manifest next update: Mon 27 Oct 2025 23:00:20 +0000
Files and hashes: 1: E8fqlMMExB61QIsEKMENcZNpWcs.roa (hash: BmnUAt4AevLzEKuzLNe+ibP+z5vcZguaEireBbRJdHM=)
2: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: dEEm1shL0TPUFJKt5pA2TKLjkiTPdiIwvJz5y7ck33c=)
3: gXlhbbxVLQVqCMGvhejieNdtoBY.roa (hash: 8u7C6SqKmEB/oIEa7cYGrPkrur0B3bFj0WV0Kh36+qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:53:a3:a3:2f:6b:17:0d:76:38:bd:34:75:33:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Oct 26 23:00:20 2025 GMT
Not After : Oct 27 23:00:20 2025 GMT
Subject: CN=5c0647f95e4ba50902dc852bc8d6903c98be7b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:04:39:65:03:e2:3c:b5:9c:82:1a:3c:f7:
c3:ec:3c:ac:1f:e4:47:4e:d8:90:7b:74:45:97:5e:
76:4f:bc:60:a5:46:48:53:aa:87:40:6b:58:c1:18:
14:83:29:07:b8:7b:67:87:af:aa:b5:f6:3b:2e:62:
d3:be:2f:e9:b5:95:ba:55:89:cd:e8:88:4f:da:ac:
5d:9a:b1:71:43:bf:2a:1e:f3:26:36:62:8f:f1:b9:
ab:40:44:17:01:fb:11:19:7b:ac:00:b5:70:aa:d9:
56:50:6f:c2:23:3d:5f:12:d0:04:ea:10:2c:cf:4f:
4c:36:fd:43:d7:d9:08:19:04:c2:74:3c:0c:1a:4a:
3d:e4:b6:10:25:01:1d:57:dd:29:b8:1a:64:f2:1e:
83:c2:b9:c8:35:ff:0d:f0:40:60:3b:52:74:22:8f:
ae:ab:1d:50:c9:da:65:c3:11:2a:04:de:3b:44:70:
05:f0:0d:13:2c:1a:48:95:93:a7:73:5c:db:70:a9:
c9:8a:ba:c0:c0:46:9a:ee:6c:0c:d6:97:41:be:6c:
46:b2:38:75:ff:2e:6b:b6:35:0f:19:c5:68:c0:b7:
b5:76:2c:26:cd:ed:d6:78:61:b8:be:50:74:48:6f:
b3:99:cc:11:c9:55:68:88:c2:34:40:81:5e:9d:9d:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:06:47:F9:5E:4B:A5:09:02:DC:85:2B:C8:D6:90:3C:98:BE:7B:87
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:3e:dd:0b:fa:ec:1c:9f:cc:d3:1e:0f:2d:34:fc:7e:0e:19:
73:8b:aa:a2:7a:54:50:58:b3:0c:15:b3:84:8e:6e:af:93:eb:
9c:9b:f4:ae:cd:7e:42:87:93:c9:56:64:10:fc:78:4a:d5:28:
9e:04:05:d2:a2:ef:3e:5f:78:f9:52:48:7d:4e:09:7b:60:15:
21:88:e1:3b:a9:26:31:4b:8b:5e:41:19:c3:6b:03:d7:a1:3f:
9a:36:ee:32:f6:18:c7:c9:3c:51:97:35:61:a3:91:35:a8:3e:
27:bc:b9:6b:aa:13:98:2d:ca:be:ae:04:1f:a9:4d:75:7e:02:
45:b8:ea:1c:f2:ad:4c:07:41:eb:3a:42:53:51:f7:f7:12:86:
dd:05:8b:56:32:17:ee:7e:11:f3:71:ef:44:f1:57:a1:1c:2e:
f1:b0:0c:3e:d4:9e:26:bd:a9:45:2a:48:df:9b:19:e2:3d:ac:
7e:05:7f:a0:d9:12:72:60:f0:a5:12:07:6d:90:0f:a0:b9:dd:
f9:73:79:47:9b:71:a6:af:01:fc:f5:71:3c:49:91:42:6c:91:
eb:a2:f0:e6:56:98:05:49:66:58:3a:24:08:45:5e:aa:96:ab:
ac:ad:df:44:92:88:34:6a:65:67:5f:80:bb:e6:56:ca:20:e9:
3f:25:37:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiwFOjoy9rFw12OL00dTPxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMjNlMmVkYjMyMWUxYThhNWNlOWVlM2UyZDk1YWE0MGYw
ZGU4YTAwHhcNMjUxMDI2MjMwMDIwWhcNMjUxMDI3MjMwMDIwWjAzMTEwLwYDVQQD
Eyg1YzA2NDdmOTVlNGJhNTA5MDJkYzg1MmJjOGQ2OTAzYzk4YmU3Yjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW8EOWUD4jy1nIIaPPfD7DysH+RH
TtiQe3RFl152T7xgpUZIU6qHQGtYwRgUgykHuHtnh6+qtfY7LmLTvi/ptZW6VYnN
6IhP2qxdmrFxQ78qHvMmNmKP8bmrQEQXAfsRGXusALVwqtlWUG/CIz1fEtAE6hAs
z09MNv1D19kIGQTCdDwMGko95LYQJQEdV90puBpk8h6DwrnINf8N8EBgO1J0Io+u
qx1QydplwxEqBN47RHAF8A0TLBpIlZOnc1zbcKnJirrAwEaa7mwM1pdBvmxGsjh1
/y5rtjUPGcVowLe1diwmze3WeGG4vlB0SG+zmcwRyVVoiMI0QIFenZ3YSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwGR/leS6UJAtyFK8jWkDyYvnuHMB8GA1UdIwQY
MBaAFE0j4u2zIeGopc6e4+LZWqQPDeigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEt
NTM4NTA5ZjNhNzg5LzEvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEtNTM4NTA5ZjNhNzg5
LzEvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyD7dC/rs
HJ/M0x4PLTT8fg4Zc4uqonpUUFizDBWzhI5ur5PrnJv0rs1+QoeTyVZkEPx4StUo
ngQF0qLvPl94+VJIfU4Je2AVIYjhO6kmMUuLXkEZw2sD16E/mjbuMvYYx8k8UZc1
YaORNag+J7y5a6oTmC3Kvq4EH6lNdX4CRbjqHPKtTAdB6zpCU1H39xKG3QWLVjIX
7n4R83HvRPFXoRwu8bAMPtSeJr2pRSpI35sZ4j2sfgV/oNkScmDwpRIHbZAPoLnd
+XN5R5txpq8B/PVxPEmRQmyR66Lw5laYBUlmWDokCEVeqparrK3fRJKINGplZ1+A
u+ZWyiDpPyU3cw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:23 2025 by rpki-client