Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
File: t4skH3ysfR5SHigxR-xhdjxCKqc.mft (raw, json)
Hash identifier: ZMLyJCVP1Zpsy8+1xlkSDAKcpdVvet8BF22RTLaaDF4=
Subject key identifier: A7:3C:7D:4F:A2:B6:83:1B:37:02:21:49:F2:8F:F6:B0:FD:C3:8E:76
Authority key identifier: B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
Certificate issuer: /CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Certificate serial: 019A4EF4D5D6980347B0F99A9C97C0C94C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
Manifest number: 07A8
Signing time: Tue 04 Nov 2025 13:00:59 +0000
Manifest this update: Tue 04 Nov 2025 13:00:59 +0000
Manifest next update: Wed 05 Nov 2025 13:00:59 +0000
Files and hashes: 1: JeMCMYiH53cU_3LMDeSKcS3Thhs.roa (hash: q+KDU3te7tpkPWYDo6SVWUaxsvwlZ34vk9tdHz3W+pc=)
2: t4skH3ysfR5SHigxR-xhdjxCKqc.crl (hash: n3TpjRLQ2wSrYsH8GYGUM6RjaKDO6FFrSBjLM1nypzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d5:d6:98:03:47:b0:f9:9a:9c:97:c0:c9:4c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Validity
Not Before: Nov 4 13:00:59 2025 GMT
Not After : Nov 5 13:00:59 2025 GMT
Subject: CN=a73c7d4fa2b6831b37022149f28ff6b0fdc38e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:eb:5e:cc:d8:c8:a2:c5:4f:44:e6:6c:cb:
d8:e4:ac:bb:25:06:c4:f4:fd:8a:89:e0:e0:3e:d9:
2e:02:89:2d:9b:07:9e:12:a0:7c:a8:51:2c:1c:46:
02:f2:57:27:67:3a:74:b4:33:04:a4:2c:bc:8a:67:
8a:29:d1:cc:88:a9:db:46:43:fc:8d:62:7d:9e:8a:
25:63:f9:c2:60:92:0c:b1:52:ac:2c:1d:12:1c:f2:
30:4d:f6:f1:7c:20:d7:39:c9:a5:51:83:7f:83:9c:
3a:ab:aa:c9:a2:f5:8f:06:d9:f8:56:fe:6a:01:a3:
ac:f8:14:62:00:ea:2b:dc:90:9a:68:14:f1:46:1d:
be:8f:eb:e6:86:c7:a1:b2:80:ab:68:46:d1:91:67:
4d:a3:ab:05:5b:eb:19:18:f0:17:8a:52:cf:2e:5a:
02:bc:85:03:1b:2c:e0:20:cb:c6:d5:cd:e6:e0:45:
6a:70:d2:97:63:ea:fd:83:ad:88:bc:de:0e:48:b3:
de:80:c3:b0:df:ef:37:47:80:0d:a4:52:e0:00:25:
a3:87:5a:0f:02:8a:d7:54:eb:d2:af:b2:35:16:b5:
30:68:a4:2b:65:53:a5:a7:19:3a:c3:8a:73:72:a9:
b5:59:fb:32:1c:9a:60:8e:ba:a7:6a:91:70:be:4b:
15:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3C:7D:4F:A2:B6:83:1B:37:02:21:49:F2:8F:F6:B0:FD:C3:8E:76
X509v3 Authority Key Identifier:
keyid:B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:31:42:ec:7c:6e:4b:15:49:49:80:17:27:29:82:41:49:7f:
02:61:76:79:3b:27:3b:92:e2:b4:52:b7:58:92:9d:a1:35:66:
ee:f5:27:fb:75:6c:a4:49:71:1f:7e:f9:de:21:c8:cb:0f:45:
65:37:b8:f2:3a:31:be:04:9c:19:67:1d:5a:55:2f:45:8e:9b:
14:44:12:2d:ec:98:62:05:ed:22:7d:5a:0a:a2:bd:34:1e:77:
b3:72:3b:91:ed:7d:9c:45:f6:53:8e:5a:5a:1d:76:3d:93:34:
89:6c:5d:83:a5:10:22:9b:6f:e0:d6:1b:81:18:b5:f9:10:87:
b2:f0:b4:26:3b:cf:e5:99:2f:8d:60:d3:d8:cf:35:27:f5:b7:
15:19:ec:70:c9:21:8f:be:db:07:c6:5a:87:59:2a:67:bd:4e:
76:f6:6d:17:59:e8:0c:20:a8:6a:78:78:ae:99:c3:0b:52:b5:
4f:96:1e:da:50:fb:5b:10:b1:ae:f5:2f:ef:d8:04:c7:49:24:
93:2d:ac:8a:c2:57:07:15:ea:17:a2:f0:a7:ca:e3:26:ad:e2:
7b:b9:e9:94:bf:08:c8:67:d2:b5:c2:28:de:ba:89:c9:da:be:
c9:33:29:f4:7a:00:28:ca:ce:66:c5:dd:5f:9a:0a:b7:de:59:
89:e6:bf:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9NXWmANHsPmanJfAyUxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OGIyNDFmN2NhYzdkMWU1MjFlMjgzMTQ3ZWM2MTc2M2M0
MjJhYTcwHhcNMjUxMTA0MTMwMDU5WhcNMjUxMTA1MTMwMDU5WjAzMTEwLwYDVQQD
EyhhNzNjN2Q0ZmEyYjY4MzFiMzcwMjIxNDlmMjhmZjZiMGZkYzM4ZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXXrXszYyKLFT0TmbMvY5Ky7JQbE
9P2KieDgPtkuAoktmweeEqB8qFEsHEYC8lcnZzp0tDMEpCy8imeKKdHMiKnbRkP8
jWJ9noolY/nCYJIMsVKsLB0SHPIwTfbxfCDXOcmlUYN/g5w6q6rJovWPBtn4Vv5q
AaOs+BRiAOor3JCaaBTxRh2+j+vmhsehsoCraEbRkWdNo6sFW+sZGPAXilLPLloC
vIUDGyzgIMvG1c3m4EVqcNKXY+r9g62IvN4OSLPegMOw3+83R4ANpFLgACWjh1oP
AorXVOvSr7I1FrUwaKQrZVOlpxk6w4pzcqm1WfsyHJpgjrqnapFwvksVjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKc8fU+itoMbNwIhSfKP9rD9w452MB8GA1UdIwQY
MBaAFLeLJB98rH0eUh4oMUfsYXY8QiqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRza0gzeXNmUjVTSGlneFIteGhkanhDS3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kMDMwNWYtMmIwZC00NDgwLThkOTIt
YzBkOTczY2EyNWQ4LzEvdDRza0gzeXNmUjVTSGlneFIteGhkanhDS3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kMDMwNWYtMmIwZC00NDgwLThkOTItYzBkOTczY2EyNWQ4
LzEvdDRza0gzeXNmUjVTSGlneFIteGhkanhDS3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzFC7Hxu
SxVJSYAXJymCQUl/AmF2eTsnO5LitFK3WJKdoTVm7vUn+3VspElxH3753iHIyw9F
ZTe48joxvgScGWcdWlUvRY6bFEQSLeyYYgXtIn1aCqK9NB53s3I7ke19nEX2U45a
Wh12PZM0iWxdg6UQIptv4NYbgRi1+RCHsvC0JjvP5ZkvjWDT2M81J/W3FRnscMkh
j77bB8Zah1kqZ71OdvZtF1noDCCoanh4rpnDC1K1T5Ye2lD7WxCxrvUv79gEx0kk
ky2sisJXBxXqF6Lwp8rjJq3ie7nplL8IyGfStcIo3rqJydq+yTMp9HoAKMrOZsXd
X5oKt95Ziea/pA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:41 2025 by rpki-client