Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
File: ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json)
Hash identifier: hi/yuTR3fawsH40mbMMc3PPr0fRa/BMpykkVUGPNMN0=
Subject key identifier: 23:37:FC:1C:D2:3A:B7:D2:F4:C2:D9:79:16:6C:AE:8E:3F:9B:DE:3F
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Certificate issuer: /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial: 019A54F6684A72D3CA456D51FCAEDE8C364E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
Manifest number: 0EC9
Signing time: Wed 05 Nov 2025 17:00:25 +0000
Manifest this update: Wed 05 Nov 2025 17:00:25 +0000
Manifest next update: Thu 06 Nov 2025 17:00:25 +0000
Files and hashes: 1: 2bbjZnItd_WfSUsxeSim-v-qB-g.roa (hash: U3T6Blvywe2N+XOmN4d0Sfw2WTnfp19mqzXdb2WW/M8=)
2: hs7awmW5u-N7i3rafiPiNllc2Bo.roa (hash: zx9QQVE6GtEBw9ZKQW610wAAxlFBO5GbObUYOTrSVsA=)
3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: N2F4MwOHfOhpUIDTreWVDSpGi1iuQYPqnI/hlORjL+M=)
4: ucQNwDwE2vdn8aT5NeBfcaMP4xI.roa (hash: uOUVs3Rq9AKXwjmauSrDsTRXthAY0OABda9jaa1tn6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:68:4a:72:d3:ca:45:6d:51:fc:ae:de:8c:36:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Validity
Not Before: Nov 5 17:00:25 2025 GMT
Not After : Nov 6 17:00:25 2025 GMT
Subject: CN=2337fc1cd23ab7d2f4c2d979166cae8e3f9bde3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5f:e4:19:01:e0:ac:e1:12:7b:48:c8:3f:1c:
d0:53:b0:26:4d:f2:b1:7f:43:05:61:f5:0f:6c:6f:
63:1b:ca:60:da:7c:19:c3:a3:52:8c:d4:7d:e1:a3:
0b:ac:df:7e:89:9d:7b:6a:85:c9:15:6c:d1:59:59:
25:fd:c9:a6:9f:fa:00:8a:90:92:ab:0b:60:62:2d:
2d:5d:d0:08:77:58:f2:a6:67:25:6e:51:d0:c9:d1:
c2:c9:ae:77:cb:db:e1:c7:95:d7:22:6d:53:06:f3:
c3:60:24:8b:c2:e4:24:58:74:1f:a8:d0:88:c2:04:
50:cf:5e:0f:16:86:b5:d3:84:77:a9:15:a3:0a:0b:
d6:c9:a6:05:47:ac:93:88:54:4f:a6:1a:79:e5:aa:
32:d0:06:81:d4:f6:77:70:8a:6b:eb:77:d0:b9:e7:
f1:9f:c3:ab:98:bb:c2:72:d5:ff:82:d3:22:8d:dc:
6e:cc:f9:00:45:6a:45:bc:01:6f:4c:8b:5c:e4:02:
41:16:63:de:9c:40:16:c9:17:dd:36:79:e6:f8:22:
81:7a:78:f4:f5:b2:a9:f6:4b:1a:f5:9d:c3:c8:2b:
b8:c2:4a:28:07:99:5b:1c:aa:5e:4d:7c:c6:17:99:
f7:97:8d:af:46:59:5f:6b:7b:dc:4b:9e:9a:e2:12:
3b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:37:FC:1C:D2:3A:B7:D2:F4:C2:D9:79:16:6C:AE:8E:3F:9B:DE:3F
X509v3 Authority Key Identifier:
keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6d:12:c9:da:2c:d0:55:2a:98:35:5d:44:b8:40:52:78:3c:
e1:d4:9f:f5:9e:e6:c8:6b:31:f5:20:d6:92:84:16:56:49:05:
d4:a5:7d:c9:ea:8b:b7:7a:b2:78:cc:7d:c2:d9:6d:0a:83:8b:
b0:61:38:76:9d:26:de:cc:80:75:44:50:44:af:08:25:1b:7b:
51:d5:95:0e:b7:67:05:f0:b0:db:51:62:44:c0:8a:37:80:a3:
e4:6e:bc:14:b0:37:14:4e:7c:4d:41:8f:bc:86:08:61:68:80:
cd:34:5d:2b:9b:b9:85:15:e4:90:1c:d6:f5:bf:2c:09:f8:40:
b1:42:1a:4e:a0:bb:25:47:9d:bb:01:b3:de:e5:d4:03:5d:a8:
a3:9a:cf:f7:ab:5c:05:99:5f:18:65:c2:c1:8e:9d:4d:84:ea:
bf:2e:56:02:30:d1:5d:0b:32:b9:8b:5e:77:47:dd:53:d2:20:
77:24:f8:fe:25:bc:59:86:c7:e0:e9:64:31:8d:d1:05:68:5d:
03:d3:84:e9:72:0a:9b:9c:a0:85:b8:47:ca:a5:c9:c1:b9:01:
17:51:66:0e:55:7e:69:d9:35:9f:10:67:05:cb:74:1f:9f:07:
3b:aa:0d:84:e3:bc:ab:a0:28:ef:b5:90:9f:77:4b:e2:9f:56:
71:34:77:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpU9mhKctPKRW1R/K7ejDZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2Y2Y0ZTU3Y2JjMTVjZTRlY2VmNDRmNTBlNWI4NTkyZmJl
ZWVlYTAwHhcNMjUxMTA1MTcwMDI1WhcNMjUxMTA2MTcwMDI1WjAzMTEwLwYDVQQD
EygyMzM3ZmMxY2QyM2FiN2QyZjRjMmQ5NzkxNjZjYWU4ZTNmOWJkZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71/kGQHgrOESe0jIPxzQU7AmTfKx
f0MFYfUPbG9jG8pg2nwZw6NSjNR94aMLrN9+iZ17aoXJFWzRWVkl/cmmn/oAipCS
qwtgYi0tXdAId1jypmclblHQydHCya53y9vhx5XXIm1TBvPDYCSLwuQkWHQfqNCI
wgRQz14PFoa104R3qRWjCgvWyaYFR6yTiFRPphp55aoy0AaB1PZ3cIpr63fQuefx
n8OrmLvCctX/gtMijdxuzPkARWpFvAFvTItc5AJBFmPenEAWyRfdNnnm+CKBenj0
9bKp9ksa9Z3DyCu4wkooB5lbHKpeTXzGF5n3l42vRllfa3vcS56a4hI7ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCM3/BzSOrfS9MLZeRZsro4/m94/MB8GA1UdIwQY
MBaAFLbPTlfLwVzk7O9E9Q5bhZL77u6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80ZTg5N2YtZTQzNS00NzE1LWEzYzUt
ODViZTQyNWQzMTk5LzEvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80ZTg5N2YtZTQzNS00NzE1LWEzYzUtODViZTQyNWQzMTk5
LzEvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARW0Sydos
0FUqmDVdRLhAUng84dSf9Z7myGsx9SDWkoQWVkkF1KV9yeqLt3qyeMx9wtltCoOL
sGE4dp0m3syAdURQRK8IJRt7UdWVDrdnBfCw21FiRMCKN4Cj5G68FLA3FE58TUGP
vIYIYWiAzTRdK5u5hRXkkBzW9b8sCfhAsUIaTqC7JUeduwGz3uXUA12oo5rP96tc
BZlfGGXCwY6dTYTqvy5WAjDRXQsyuYted0fdU9IgdyT4/iW8WYbH4OlkMY3RBWhd
A9OE6XIKm5yghbhHyqXJwbkBF1FmDlV+adk1nxBnBct0H58HO6oNhOO8q6Ao77WQ
n3dL4p9WcTR37g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:45:45 2025 by rpki-client