Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File: T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier: cCWc3oOwGEq1sLC61eauZeRLCRx8IARdjEJS3JWAI6E=
Subject key identifier: DA:57:19:84:DC:F0:36:E8:83:61:53:EC:43:44:E5:62:3F:FF:D6:BA
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 019A50E2E1EB001FDDCA8B883C247F96C6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 22:00:37 +0000
Manifest this update: Tue 04 Nov 2025 22:00:37 +0000
Manifest next update: Wed 05 Nov 2025 22:00:37 +0000
Files and hashes: 1: N4O1f1HdN3aaUng8Ezj5qGov-Js.roa (hash: sfcsuhZVAT4PlLRFtuXFGetuMIfE20AC6DkhL2YQizc=)
2: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: 8uKohNwD53opjObPRJrC1pQWM0v5QluSlXfQ/EuvS1c=)
3: _UFtjPZkJY8PTrDfIiY7fIJkM78.roa (hash: 8nSnhnVWRfLLWBF2I/d3mZE5/5hk3aPfKW0pXvBb3bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:e1:eb:00:1f:dd:ca:8b:88:3c:24:7f:96:c6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: Nov 4 22:00:37 2025 GMT
Not After : Nov 5 22:00:37 2025 GMT
Subject: CN=da571984dcf036e8836153ec4344e5623fffd6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:39:18:63:d0:70:f8:7f:c5:a9:38:fd:a4:
72:d7:91:2c:de:65:2e:19:0c:a4:fa:1e:3c:87:d9:
51:a4:08:eb:fa:53:5c:f7:d3:ca:49:ff:84:61:81:
cf:07:be:b6:4f:99:78:1a:5a:25:0d:f6:c6:17:54:
94:60:d5:5b:9a:46:bf:45:49:80:40:37:ff:7d:d2:
16:9a:8c:27:c0:f9:20:71:64:4a:59:50:d6:e6:89:
39:e7:9b:a1:17:d9:05:06:fe:36:58:d2:e1:16:17:
74:ae:37:6e:63:f8:e1:5a:fb:9e:d1:02:a6:84:86:
05:e1:a4:38:bb:6d:bd:b7:03:81:6b:74:5f:1b:19:
c6:b4:d3:03:a2:15:b5:a3:08:5e:70:89:01:1a:69:
0c:ff:f2:13:01:2b:d7:71:ca:d0:a0:62:96:3e:e2:
5e:52:f0:03:cb:d9:b0:90:18:86:65:20:b6:8f:b0:
f9:c9:07:bc:40:aa:81:15:9b:3a:08:a1:0d:e0:f1:
36:46:fc:4b:5b:49:d0:99:22:a2:82:65:3b:91:2b:
99:47:0b:52:98:04:9b:55:8c:0f:2a:79:8a:8d:45:
38:0d:33:35:71:c3:99:bd:d8:3a:a8:e0:b1:f0:60:
e0:9c:d4:d7:c4:4f:0d:17:18:49:5d:08:52:e3:6b:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:57:19:84:DC:F0:36:E8:83:61:53:EC:43:44:E5:62:3F:FF:D6:BA
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:23:bd:14:1b:0b:1b:67:56:b7:d5:91:c4:7c:0a:cf:0e:87:
1c:ce:0d:30:c2:78:3d:cc:a6:b2:b3:8b:b7:94:2d:d9:5e:12:
47:79:89:e8:95:cd:31:60:3a:fb:3c:7a:4d:4d:71:fe:a2:c3:
73:77:15:24:d9:b4:53:f7:4a:77:31:b0:53:8d:3d:6b:96:86:
d8:83:50:62:d0:3e:63:11:fe:15:ef:88:a0:55:2d:2e:d1:71:
b1:35:82:07:fd:42:46:ef:60:84:f8:ac:80:58:24:c3:b1:6f:
f6:2b:cb:20:ab:24:99:b8:44:5f:0d:7f:0a:55:f4:3f:e6:74:
3e:56:69:e3:32:f4:94:61:b9:3e:d3:73:51:95:3f:fa:f4:2d:
e0:58:67:a2:f9:f7:b5:39:d9:98:0e:71:0f:9c:bc:a8:4b:38:
5d:fd:90:d3:e3:19:6e:01:a9:ed:2d:f4:62:bf:38:cf:e8:7f:
be:34:1b:a1:97:df:dc:17:a1:50:7a:b1:98:13:a6:67:47:c0:
ed:90:57:de:04:ef:93:19:b5:88:d1:af:0c:bd:89:05:07:4b:
62:b3:8f:3b:99:06:c8:85:24:32:c2:ae:5f:5a:31:23:21:67:
31:d7:28:be:1e:62:b6:3c:3c:52:7c:27:48:54:fe:9d:99:9b:
e7:a0:d8:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4uHrAB/dyouIPCR/lsa0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTA4YTZkODY4YWI5ZTliZGIxMDQ3MmZiZWMzMWM5NjZl
OTQyNzQwHhcNMjUxMTA0MjIwMDM3WhcNMjUxMTA1MjIwMDM3WjAzMTEwLwYDVQQD
EyhkYTU3MTk4NGRjZjAzNmU4ODM2MTUzZWM0MzQ0ZTU2MjNmZmZkNmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC85GGPQcPh/xak4/aRy15Es3mUu
GQyk+h48h9lRpAjr+lNc99PKSf+EYYHPB762T5l4GlolDfbGF1SUYNVbmka/RUmA
QDf/fdIWmownwPkgcWRKWVDW5ok555uhF9kFBv42WNLhFhd0rjduY/jhWvue0QKm
hIYF4aQ4u229twOBa3RfGxnGtNMDohW1owhecIkBGmkM//ITASvXccrQoGKWPuJe
UvADy9mwkBiGZSC2j7D5yQe8QKqBFZs6CKEN4PE2RvxLW0nQmSKigmU7kSuZRwtS
mASbVYwPKnmKjUU4DTM1ccOZvdg6qOCx8GDgnNTXxE8NFxhJXQhS42utVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpXGYTc8Dbog2FT7ENE5WI//9a6MB8GA1UdIwQY
MBaAFE+Qim2GirnpvbEEcvvsMclm6UJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVDS2JZYUt1ZW05c1FSeS0td3h5V2JwUW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80ZDc3ZDktYjBhMy00OGFkLWFhMmEt
MWM2ZWU1YmJlYjY2LzEvVDVDS2JZYUt1ZW05c1FSeS0td3h5V2JwUW5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80ZDc3ZDktYjBhMy00OGFkLWFhMmEtMWM2ZWU1YmJlYjY2
LzEvVDVDS2JZYUt1ZW05c1FSeS0td3h5V2JwUW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyO9FBsL
G2dWt9WRxHwKzw6HHM4NMMJ4PcymsrOLt5Qt2V4SR3mJ6JXNMWA6+zx6TU1x/qLD
c3cVJNm0U/dKdzGwU409a5aG2INQYtA+YxH+Fe+IoFUtLtFxsTWCB/1CRu9ghPis
gFgkw7Fv9ivLIKskmbhEXw1/ClX0P+Z0PlZp4zL0lGG5PtNzUZU/+vQt4Fhnovn3
tTnZmA5xD5y8qEs4Xf2Q0+MZbgGp7S30Yr84z+h/vjQboZff3BehUHqxmBOmZ0fA
7ZBX3gTvkxm1iNGvDL2JBQdLYrOPO5kGyIUkMsKuX1oxIyFnMdcovh5itjw8Unwn
SFT+nZmb56DYZA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:48:02 2025 by rpki-client