Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
File: tJvYTaF5l8uyhq-QIqsuBboItEI.mft (raw, json)
Hash identifier: LIISfB0D/IP4ndm60t3dXKx1+LZP9+ePo9FqjuhcMc0=
Subject key identifier: 13:02:BE:D5:E8:29:D0:15:20:46:C7:14:67:E0:DF:61:A6:E6:7D:A2
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial: 019A4E86D7310F8192A86A2D72410C212148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
Manifest number: 126D
Signing time: Tue 04 Nov 2025 11:00:50 +0000
Manifest this update: Tue 04 Nov 2025 11:00:50 +0000
Manifest next update: Wed 05 Nov 2025 11:00:50 +0000
Files and hashes: 1: 1-PqW8UmiSaov5LQilBVWMK5ZalY.roa (hash: TOVF5pxyQFktaD7ChGQ0pQzpTOW/D5b1AiH6KqbdxuQ=)
2: DaHb-AgbaohKBsaZFPAVDGbt_RI.roa (hash: T2KsBuhVxG35+5zMSgS7xBXEVKNyKlB23AKVgPghBi4=)
3: ZKaLH1RF9q1E6524_CLGwNAeKPU.roa (hash: NYm5o8T+AXl6BoN5iWRobD4OTRMc9uAM7u/9BRILK/4=)
4: tJvYTaF5l8uyhq-QIqsuBboItEI.crl (hash: 8wkDuF2YXpXq3n47XOfpWixtrL8M4fIzXoHAcHcnbZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:d7:31:0f:81:92:a8:6a:2d:72:41:0c:21:21:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Validity
Not Before: Nov 4 11:00:50 2025 GMT
Not After : Nov 5 11:00:50 2025 GMT
Subject: CN=1302bed5e829d0152046c71467e0df61a6e67da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:35:ae:0b:4a:e8:4b:4c:c5:ea:d9:c2:21:
0f:7c:65:90:64:56:31:6a:87:36:ea:fc:b5:04:b3:
f1:80:8a:fa:8a:0d:c2:e0:8d:48:f5:6f:2a:04:b0:
f0:98:21:73:6a:f8:06:f5:b1:41:91:ee:9b:ab:bb:
9b:20:9a:cf:57:f0:48:90:2b:d8:04:93:95:38:c5:
d9:4e:7f:28:ad:0e:48:36:8c:ef:96:dc:14:f3:fa:
64:79:b5:ce:e5:d2:92:f1:b3:37:cf:ac:51:10:85:
20:c4:39:9d:c5:33:c3:7e:15:42:b7:c9:c5:97:02:
2c:49:5a:75:9a:b2:2e:8d:eb:2c:69:c3:d2:36:6b:
78:f9:fc:04:e2:6e:61:01:9f:f0:32:f4:84:1f:ab:
70:68:97:98:63:d2:33:48:2f:66:28:08:08:5a:fd:
54:97:41:b1:f2:9b:08:b2:c0:b5:23:bf:4e:60:1a:
6c:63:e6:aa:2c:0e:59:5b:5d:bf:06:e4:ce:ed:00:
3b:6e:ec:d5:be:fe:2c:19:65:f8:94:54:2e:ac:09:
00:5c:2f:f2:5a:d5:9e:3f:b0:03:84:03:d0:f7:32:
10:2f:ec:e1:67:99:f4:ec:4a:6b:7e:3a:db:59:3d:
31:9b:38:32:34:5a:19:87:2b:63:b0:4e:1e:69:7a:
4f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:02:BE:D5:E8:29:D0:15:20:46:C7:14:67:E0:DF:61:A6:E6:7D:A2
X509v3 Authority Key Identifier:
keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:bd:cd:d8:21:54:ec:86:ea:80:b8:61:73:52:5d:b5:bf:b9:
ee:f8:6d:99:6a:61:07:50:4c:23:c9:1b:b1:aa:7a:96:86:62:
73:9d:77:c0:df:88:43:68:17:9e:07:20:41:7c:40:1e:6e:7e:
68:69:d9:bd:00:4f:54:54:0a:64:f4:bf:86:12:ac:96:e7:96:
7c:dc:7f:83:1a:66:50:2f:24:19:6e:45:9e:89:17:57:c2:f8:
ba:51:0d:25:30:7a:4d:5d:c0:10:15:0b:52:52:02:a6:be:89:
9a:97:b3:d9:dc:c6:bd:f2:20:89:f3:5f:a6:15:e7:90:85:32:
59:c4:38:d3:0d:bc:15:67:6c:88:ca:3d:ea:a3:cf:dd:70:d9:
25:00:41:31:b2:5b:d2:49:25:8b:4e:ca:d8:d6:ff:fb:dc:27:
cc:1e:ad:9d:b2:07:f9:8e:b6:1c:65:e5:59:d4:08:c2:3e:aa:
d0:c0:d9:ac:80:61:0d:c7:a7:70:2a:02:cf:17:79:c7:ca:4a:
a5:4c:bf:e7:06:65:9b:1e:3d:19:28:fa:b0:a9:9f:d6:1c:65:
6b:f1:2c:01:93:6e:da:57:7a:c5:03:f4:18:c9:8b:b5:c9:89:
b4:65:56:03:e6:e5:a5:0a:7f:ce:f2:56:de:15:63:18:ee:63:
2b:70:82:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhtcxD4GSqGotckEMISFIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OWJkODRkYTE3OTk3Y2JiMjg2YWY5MDIyYWIyZTA1YmEw
OGI0NDIwHhcNMjUxMTA0MTEwMDUwWhcNMjUxMTA1MTEwMDUwWjAzMTEwLwYDVQQD
EygxMzAyYmVkNWU4MjlkMDE1MjA0NmM3MTQ2N2UwZGY2MWE2ZTY3ZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWQ1rgtK6EtMxerZwiEPfGWQZFYx
aoc26vy1BLPxgIr6ig3C4I1I9W8qBLDwmCFzavgG9bFBke6bq7ubIJrPV/BIkCvY
BJOVOMXZTn8orQ5INozvltwU8/pkebXO5dKS8bM3z6xREIUgxDmdxTPDfhVCt8nF
lwIsSVp1mrIujessacPSNmt4+fwE4m5hAZ/wMvSEH6twaJeYY9IzSC9mKAgIWv1U
l0Gx8psIssC1I79OYBpsY+aqLA5ZW12/BuTO7QA7buzVvv4sGWX4lFQurAkAXC/y
WtWeP7ADhAPQ9zIQL+zhZ5n07EprfjrbWT0xmzgyNFoZhytjsE4eaXpPdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMCvtXoKdAVIEbHFGfg32Gm5n2iMB8GA1UdIwQY
MBaAFLSb2E2heZfLsoavkCKrLgW6CLRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2It
MGM5MDliZjViZTRkLzEvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2ItMGM5MDliZjViZTRk
LzEvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmr3N2CFU
7IbqgLhhc1Jdtb+57vhtmWphB1BMI8kbsap6loZic513wN+IQ2gXngcgQXxAHm5+
aGnZvQBPVFQKZPS/hhKslueWfNx/gxpmUC8kGW5FnokXV8L4ulENJTB6TV3AEBUL
UlICpr6Jmpez2dzGvfIgifNfphXnkIUyWcQ40w28FWdsiMo96qPP3XDZJQBBMbJb
0kkli07K2Nb/+9wnzB6tnbIH+Y62HGXlWdQIwj6q0MDZrIBhDcencCoCzxd5x8pK
pUy/5wZlmx49GSj6sKmf1hxla/EsAZNu2ld6xQP0GMmLtcmJtGVWA+blpQp/zvJW
3hVjGO5jK3CCwQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:34 2025 by rpki-client