Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
File: TsVuJbACVuJM2jJN6yGqnRMBX2U.mft (raw, json)
Hash identifier: bh5734pfJlH2505M2lpFDmFxQuT9BL23epo6XTwFhxc=
Subject key identifier: 56:E1:90:BB:01:80:72:16:9D:FF:3A:AD:18:5F:92:1C:8E:C4:A4:E0
Authority key identifier: 4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
Certificate issuer: /CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Certificate serial: 019A51BE5EC126524656F25B6787B96536C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
Manifest number: C9
Signing time: Wed 05 Nov 2025 02:00:21 +0000
Manifest this update: Wed 05 Nov 2025 02:00:21 +0000
Manifest next update: Thu 06 Nov 2025 02:00:21 +0000
Files and hashes: 1: Ium09zmGvJCt2AU9c-Fdjqpa5l8.roa (hash: wf3B9W4I0o93C3K/6FUMd+RJ7+UQTH/bjXgr4nrzINY=)
2: TsVuJbACVuJM2jJN6yGqnRMBX2U.crl (hash: iK6SccOBsb14qVUIHxCGF3fxj6BrIZV8+KGUWC3ied0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:5e:c1:26:52:46:56:f2:5b:67:87:b9:65:36:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Validity
Not Before: Nov 5 02:00:21 2025 GMT
Not After : Nov 6 02:00:21 2025 GMT
Subject: CN=56e190bb018072169dff3aad185f921c8ec4a4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:9c:6e:b7:cb:02:f4:45:00:3b:56:fe:f4:
e2:04:d6:9e:7d:c8:4d:b3:8e:8f:94:9a:18:5b:c8:
42:8d:65:f5:1d:ee:a2:11:2e:2b:92:79:4c:6e:18:
dc:e2:3b:d8:73:ef:4f:eb:74:f3:4d:b0:7e:04:f1:
be:17:70:2c:bb:60:e0:b4:39:7b:ec:74:15:e8:5e:
d0:91:91:07:eb:17:d9:e4:20:fe:1e:7b:1d:52:b1:
b5:69:f1:91:86:c3:39:60:84:35:ed:c2:8d:aa:99:
ce:99:bc:12:d2:a5:64:fb:79:ee:c5:7b:7a:8e:c2:
36:ab:c2:7e:58:85:35:ab:ef:72:46:cb:f6:41:fa:
5d:2a:dd:d0:b7:ed:af:7b:ee:0a:a1:55:f8:92:98:
bf:90:19:97:b1:dd:3e:a2:db:6c:c1:81:81:c8:4a:
e4:e9:3f:ea:2a:c0:4c:2f:72:5d:ee:f9:a3:00:7a:
75:4e:55:8f:79:db:b0:0b:35:0c:4a:5d:a1:24:88:
67:4e:ca:bf:08:62:72:e7:dd:eb:5d:96:3c:c5:e9:
db:6f:95:2e:4e:fb:e0:89:09:39:5e:48:15:56:06:
d8:d2:a9:89:b3:e6:b2:3b:32:67:e3:d3:31:12:ed:
d3:27:f2:05:82:2c:36:f2:83:40:7a:0a:fe:b4:6f:
9a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E1:90:BB:01:80:72:16:9D:FF:3A:AD:18:5F:92:1C:8E:C4:A4:E0
X509v3 Authority Key Identifier:
keyid:4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:53:94:2f:66:61:21:f8:53:e0:09:d8:5f:15:19:a5:f2:fc:
53:f4:98:77:9e:85:49:d9:ed:9d:04:6d:d6:94:5f:ad:69:f9:
7c:47:da:86:7b:81:e8:c2:53:df:dc:a2:56:f3:99:02:a6:db:
39:ed:91:3a:0a:85:66:36:fb:cf:ec:12:86:b2:5d:3b:f8:27:
dc:09:d2:19:8c:a1:fd:fa:f9:81:60:89:35:61:0c:52:58:f7:
7a:6b:01:7a:0e:58:88:5b:7c:27:24:fc:0d:4b:30:bf:6f:91:
b4:f7:eb:47:80:ad:13:7e:56:cc:14:e2:0f:d4:71:60:08:6d:
9a:dc:28:c5:23:33:7c:1c:91:89:94:14:19:bc:3e:cb:d0:c6:
8b:80:fb:ae:62:09:ff:5c:be:ab:4d:6f:8a:31:ce:51:ef:ba:
a3:37:8e:7e:22:f6:53:1f:78:36:2d:fd:e8:02:2f:dc:66:a2:
f6:16:c3:f8:41:b3:4f:81:55:86:a1:a1:c6:08:3f:ec:28:17:
43:ac:c1:01:4b:7c:b8:2a:42:59:7e:6d:78:2a:0d:9e:e6:c8:
59:09:39:c0:63:6d:6b:14:51:97:70:d1:d6:2d:72:38:3a:7d:
79:a5:d9:26:5d:1f:82:a4:0e:b2:dd:54:d6:1f:2f:7b:5a:65:
0b:cb:9a:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvl7BJlJGVvJbZ4e5ZTbDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYzU2ZTI1YjAwMjU2ZTI0Y2RhMzI0ZGViMjFhYTlkMTMw
MTVmNjUwHhcNMjUxMTA1MDIwMDIxWhcNMjUxMTA2MDIwMDIxWjAzMTEwLwYDVQQD
Eyg1NmUxOTBiYjAxODA3MjE2OWRmZjNhYWQxODVmOTIxYzhlYzRhNGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqqcbrfLAvRFADtW/vTiBNaefchN
s46PlJoYW8hCjWX1He6iES4rknlMbhjc4jvYc+9P63TzTbB+BPG+F3Asu2DgtDl7
7HQV6F7QkZEH6xfZ5CD+HnsdUrG1afGRhsM5YIQ17cKNqpnOmbwS0qVk+3nuxXt6
jsI2q8J+WIU1q+9yRsv2QfpdKt3Qt+2ve+4KoVX4kpi/kBmXsd0+ottswYGByErk
6T/qKsBML3Jd7vmjAHp1TlWPeduwCzUMSl2hJIhnTsq/CGJy593rXZY8xenbb5Uu
TvvgiQk5XkgVVgbY0qmJs+ayOzJn49MxEu3TJ/IFgiw28oNAegr+tG+axQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbhkLsBgHIWnf86rRhfkhyOxKTgMB8GA1UdIwQY
MBaAFE7FbiWwAlbiTNoyTeshqp0TAV9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNWdUpiQUNWdUpNMmpKTjZ5R3FuUk1CWDJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82NmU2YmEtMDE3Ny00MmYzLWFhOTAt
MDlhMmM5Y2E3MTU1LzEvVHNWdUpiQUNWdUpNMmpKTjZ5R3FuUk1CWDJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS82NmU2YmEtMDE3Ny00MmYzLWFhOTAtMDlhMmM5Y2E3MTU1
LzEvVHNWdUpiQUNWdUpNMmpKTjZ5R3FuUk1CWDJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsFOUL2Zh
IfhT4AnYXxUZpfL8U/SYd56FSdntnQRt1pRfrWn5fEfahnuB6MJT39yiVvOZAqbb
Oe2ROgqFZjb7z+wShrJdO/gn3AnSGYyh/fr5gWCJNWEMUlj3emsBeg5YiFt8JyT8
DUswv2+RtPfrR4CtE35WzBTiD9RxYAhtmtwoxSMzfByRiZQUGbw+y9DGi4D7rmIJ
/1y+q01vijHOUe+6ozeOfiL2Ux94Ni396AIv3Gai9hbD+EGzT4FVhqGhxgg/7CgX
Q6zBAUt8uCpCWX5teCoNnubIWQk5wGNtaxRRl3DR1i1yODp9eaXZJl0fgqQOst1U
1h8ve1plC8ua6g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:01 2025 by rpki-client