Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
File: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft (raw, json)
Hash identifier: 5SxIOoX0TwC7eqAI2zU8gvnTa9A8Gdy66DbwH4i5UHg=
Subject key identifier: 99:03:5F:4B:83:CF:BF:85:94:13:2A:C4:8B:F8:75:EE:E1:D6:57:27
Authority key identifier: B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A
Certificate issuer: /CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
Certificate serial: 019A71B78926C922E627A8DCF6E3433586DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
Manifest number: 12C7
Signing time: Tue 11 Nov 2025 07:00:44 +0000
Manifest this update: Tue 11 Nov 2025 07:00:44 +0000
Manifest next update: Wed 12 Nov 2025 07:00:44 +0000
Files and hashes: 1: nqRmyRsi2-hKiZqffDikHhIZIA8.roa (hash: vx+mbFW9leAh9kJ2X2Cv3OUNnkvDKbo77etkxvxrmFM=)
2: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl (hash: OXRgrUHKeO9DoNawW2wrqKF8hVeCXZpTxHWralJEyE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:89:26:c9:22:e6:27:a8:dc:f6:e3:43:35:86:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
Validity
Not Before: Nov 11 07:00:44 2025 GMT
Not After : Nov 12 07:00:44 2025 GMT
Subject: CN=99035f4b83cfbf8594132ac48bf875eee1d65727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1b:2c:12:f7:9a:9d:60:f5:a3:78:ba:ce:bd:
32:8e:ee:1e:d2:25:7c:74:bb:6e:59:78:90:05:54:
3b:81:9a:00:0b:bf:93:e2:d4:4e:d2:6a:38:27:b8:
eb:69:cc:16:70:d8:69:53:a6:d5:77:71:28:70:67:
aa:d2:a6:aa:c0:56:f0:b8:c7:15:92:9d:32:bf:db:
f5:2f:3e:78:6d:b2:1f:93:70:02:34:98:08:1e:e9:
5e:a7:76:e6:d7:38:c7:45:f2:bb:a8:cf:56:68:b8:
1b:30:ab:20:80:aa:14:02:25:c1:38:af:39:12:75:
48:8a:bf:0a:77:e0:4f:66:57:71:f1:de:cd:a6:75:
bb:c5:ac:6f:82:8e:9c:e3:4a:76:a5:92:27:74:cb:
5f:0f:11:7a:a1:90:00:77:f6:08:14:ec:9a:02:83:
cb:ba:1f:dd:b2:11:0e:9d:a0:7a:03:4e:e7:38:5c:
fa:3f:b9:74:a8:f5:81:b8:99:3b:94:3d:29:a2:4f:
9f:73:e8:75:50:ff:b2:ee:dc:d8:ff:58:07:8b:3d:
b1:d0:51:19:04:d8:0a:47:2f:b6:b0:16:35:a1:2f:
91:28:34:cc:c9:ab:81:0d:73:cc:28:2c:85:8e:18:
3e:4d:d1:bf:66:46:a1:81:af:59:63:d1:6e:92:db:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:03:5F:4B:83:CF:BF:85:94:13:2A:C4:8B:F8:75:EE:E1:D6:57:27
X509v3 Authority Key Identifier:
keyid:B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c3:06:5b:21:6b:16:b2:89:c1:bf:c6:9b:73:78:e8:c7:61:
5e:d1:96:7a:af:18:73:f5:53:9e:07:7c:1d:25:30:0a:09:38:
5d:a2:30:a7:8e:62:59:5e:57:90:ea:0e:a5:2c:83:d0:52:19:
6b:3e:12:67:99:78:7f:2b:e8:39:4c:bd:95:86:cf:4d:dd:d4:
ae:c9:b0:51:0c:3b:45:45:77:86:20:20:d7:51:e6:ba:f9:c0:
fb:8d:86:a5:4a:98:17:65:73:34:cc:ea:c9:d9:ff:e4:86:cd:
dc:ed:cd:41:1f:2f:42:a8:c6:72:49:61:6f:66:7d:51:ee:f2:
84:9d:93:23:ee:14:82:2a:43:1f:5a:5b:9d:79:69:4f:91:06:
ae:57:25:f2:58:ed:30:fe:c8:5a:25:47:3d:11:e7:3a:85:cb:
2c:4e:a0:de:25:13:1d:f9:64:62:a4:00:54:84:61:cd:c5:14:
7c:73:57:37:c2:d0:3f:95:bb:37:f2:fd:f5:f5:cb:74:42:b0:
93:97:3c:44:e6:51:6f:53:82:d5:b9:43:38:2a:9d:d9:23:71:
04:36:4b:ec:2b:a0:69:68:7d:ff:3e:55:da:ee:52:bf:a1:2b:
a0:bb:93:b9:b8:78:d1:68:d2:af:b9:3e:79:d1:7c:a0:97:d7:
09:be:c8:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt4kmySLmJ6jc9uNDNYbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZDhiMjdhYWE1NWU1MWEzNDVmNmE0NTE5ZTM2Nzk1NTA0
NmMzMGEwHhcNMjUxMTExMDcwMDQ0WhcNMjUxMTEyMDcwMDQ0WjAzMTEwLwYDVQQD
Eyg5OTAzNWY0YjgzY2ZiZjg1OTQxMzJhYzQ4YmY4NzVlZWUxZDY1NzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxssEveanWD1o3i6zr0yju4e0iV8
dLtuWXiQBVQ7gZoAC7+T4tRO0mo4J7jracwWcNhpU6bVd3EocGeq0qaqwFbwuMcV
kp0yv9v1Lz54bbIfk3ACNJgIHulep3bm1zjHRfK7qM9WaLgbMKsggKoUAiXBOK85
EnVIir8Kd+BPZldx8d7NpnW7xaxvgo6c40p2pZIndMtfDxF6oZAAd/YIFOyaAoPL
uh/dshEOnaB6A07nOFz6P7l0qPWBuJk7lD0pok+fc+h1UP+y7tzY/1gHiz2x0FEZ
BNgKRy+2sBY1oS+RKDTMyauBDXPMKCyFjhg+TdG/Zkahga9ZY9Fuktt8gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkDX0uDz7+FlBMqxIv4de7h1lcnMB8GA1UdIwQY
MBaAFLTYsnqqVeUaNF9qRRnjZ5VQRsMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE5peWVxcFY1Um8wWDJwRkdlTm5sVkJHd3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kM2MxZDUtZTkyMy00ODMxLTgwNGMt
Yzc1ODYyODJmZTEzLzEvdE5peWVxcFY1Um8wWDJwRkdlTm5sVkJHd3dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kM2MxZDUtZTkyMy00ODMxLTgwNGMtYzc1ODYyODJmZTEz
LzEvdE5peWVxcFY1Um8wWDJwRkdlTm5sVkJHd3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcMGWyFr
FrKJwb/Gm3N46MdhXtGWeq8Yc/VTngd8HSUwCgk4XaIwp45iWV5XkOoOpSyD0FIZ
az4SZ5l4fyvoOUy9lYbPTd3UrsmwUQw7RUV3hiAg11HmuvnA+42GpUqYF2VzNMzq
ydn/5IbN3O3NQR8vQqjGcklhb2Z9Ue7yhJ2TI+4UgipDH1pbnXlpT5EGrlcl8ljt
MP7IWiVHPRHnOoXLLE6g3iUTHflkYqQAVIRhzcUUfHNXN8LQP5W7N/L99fXLdEKw
k5c8ROZRb1OC1blDOCqd2SNxBDZL7CugaWh9/z5V2u5Sv6EroLuTubh40WjSr7k+
edF8oJfXCb7ITQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:05 2025 by rpki-client