
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
File: ti1M7HgzBZI-NJftiE8cRFtOePs.mft (raw, json)
Hash identifier: 5ECp9spuLRh0iLvhGSTeD5uJJR6NEVmjRQj+MsxrdUo=
Subject key identifier: 89:53:F0:8F:B8:1D:78:F4:DC:23:8A:85:25:58:AA:82:76:93:7D:84
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 019A533F37B7C7528E9FDC7A716E68867E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
Manifest number: 07AF
Signing time: Wed 05 Nov 2025 09:00:43 +0000
Manifest this update: Wed 05 Nov 2025 09:00:43 +0000
Manifest next update: Thu 06 Nov 2025 09:00:43 +0000
Files and hashes: 1: 1ZLLlpQFZQkTqIBAHCc5d1VfoKs.roa (hash: y420UM0xhYvhHVANW5cNvzv2FZY2TvVXtMQ3bLwlcAQ=)
2: Lu657SoGRO5i41akpdqVykwmDPo.roa (hash: L0TXwFUTYgd55jn30MVoW0Y/jyiw8Ro0oBxR271bBjw=)
3: mWU4uI3AED3kVRIGqsNYpuYsgY4.roa (hash: Fq84oAvE6fP7h+/uIBzyy7ivRhelDe2jm1K3Ltmpeog=)
4: ormFqBbSNZ9STHM9altDZ_d23vQ.roa (hash: J6zKFE4hCTyzQ+z5ZObdUSvjFEcPbgT7zIhL9WAYj1Y=)
5: ti1M7HgzBZI-NJftiE8cRFtOePs.crl (hash: nxoxLU9Nt82xuhmmFRtO5bTjPy2khx2NjHZJ/IMQovs=)
6: uvReHNZu0Zx8p75NQaqJP-qKUVY.roa (hash: KwvRsYUs0tG71ha16eVgbI+g8wMn509oBtGucdJdGuU=)
7: vrn7liTWiOV54a6bn1xF4EHebFc.roa (hash: mJIlU8Z+TC1dGYbjGa/ajMktQWJNT60JPY6KVtsPkZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:37:b7:c7:52:8e:9f:dc:7a:71:6e:68:86:7e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Nov 5 09:00:43 2025 GMT
Not After : Nov 6 09:00:43 2025 GMT
Subject: CN=8953f08fb81d78f4dc238a852558aa8276937d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1a:8e:a5:e9:6e:25:e4:9c:4f:ec:01:36:58:
23:7e:89:c8:26:b2:77:b3:2d:5f:63:53:97:d0:83:
d1:1c:ad:b8:62:1b:55:15:50:0b:e9:f1:63:eb:b2:
16:e9:60:b8:56:3a:a3:15:eb:4c:4b:9e:14:fa:20:
f0:8c:77:14:e3:32:56:ba:fd:b7:93:1e:ef:c1:bb:
0d:2b:e3:06:00:3c:c5:66:40:38:d8:82:e3:cc:47:
08:4a:1b:70:1b:57:0a:23:0d:b4:a8:ea:68:df:6a:
d2:28:24:7c:d8:f5:c8:b7:3f:ab:b9:ac:85:37:b0:
b8:bd:8e:63:4c:83:8c:72:5f:4e:89:2b:6a:ac:1b:
2f:c0:f0:f8:f6:8e:9c:75:70:35:33:5d:13:53:15:
ca:be:b8:ed:22:4d:cf:f7:96:6b:3e:8a:26:43:92:
24:96:2e:4c:c3:0b:56:8b:68:9a:fa:96:cd:cd:e1:
f8:21:72:64:5b:57:9b:b5:56:92:c9:c9:fa:32:e4:
7a:67:6f:05:02:b8:63:29:6a:e0:c5:8f:0a:d7:8b:
82:ce:f5:ff:04:da:4d:c5:ca:a6:b5:72:bd:cf:8f:
ac:4a:86:ed:d6:c8:98:96:b5:56:c1:c3:23:47:8d:
02:7c:ae:64:26:3b:27:04:65:31:8e:39:37:df:b1:
76:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:53:F0:8F:B8:1D:78:F4:DC:23:8A:85:25:58:AA:82:76:93:7D:84
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:dd:70:98:34:f0:c1:e4:b3:b4:f3:38:50:28:64:c8:32:7d:
a6:c5:71:ff:76:27:a5:86:f4:86:05:d7:db:a4:e5:3c:2d:79:
08:15:b0:64:b7:1c:94:1a:0f:dc:ce:da:b0:cb:31:90:c6:13:
82:71:fb:67:63:a1:f4:bc:4f:bd:f3:76:46:6f:64:15:ec:e3:
d7:6c:d5:c6:bf:58:ea:71:e5:f1:7f:b0:25:23:30:ac:f9:b5:
46:4d:1f:ec:f7:b5:b1:14:02:c3:a7:ef:30:9a:1b:62:ab:b6:
a2:69:d0:7d:ee:cd:68:77:f3:66:fd:2c:fb:7b:99:40:0e:57:
9f:1f:b0:40:a1:cb:ca:88:aa:4b:78:d4:bc:ac:63:0b:12:c0:
f2:bf:4f:e7:e3:20:14:fb:85:e5:b5:ae:16:33:84:d7:d9:ef:
5b:e3:c3:e3:ae:c5:73:5f:4d:32:41:2f:69:70:8d:ec:74:b5:
95:6b:87:3c:da:75:3b:86:c9:16:5a:2c:2e:c6:b9:9c:ea:56:
63:2b:9c:e0:da:af:dd:68:cd:c6:ca:94:30:2e:67:a0:27:a0:
d8:cf:3c:83:89:6f:be:14:1f:9e:1d:ef:7c:f8:9e:79:89:a2:
1d:2f:ea:90:13:0d:29:94:84:73:6e:69:8b:d4:a1:97:cb:b2:
bd:f3:fd:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTPze3x1KOn9x6cW5ohn4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmQ0Y2VjNzgzMzA1OTIzZTM0OTdlZDg4NGYxYzQ0NWI0
ZTc4ZmIwHhcNMjUxMTA1MDkwMDQzWhcNMjUxMTA2MDkwMDQzWjAzMTEwLwYDVQQD
Eyg4OTUzZjA4ZmI4MWQ3OGY0ZGMyMzhhODUyNTU4YWE4Mjc2OTM3ZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRqOpeluJeScT+wBNlgjfonIJrJ3
sy1fY1OX0IPRHK24YhtVFVAL6fFj67IW6WC4VjqjFetMS54U+iDwjHcU4zJWuv23
kx7vwbsNK+MGADzFZkA42ILjzEcIShtwG1cKIw20qOpo32rSKCR82PXItz+ruayF
N7C4vY5jTIOMcl9OiStqrBsvwPD49o6cdXA1M10TUxXKvrjtIk3P95ZrPoomQ5Ik
li5MwwtWi2ia+pbNzeH4IXJkW1ebtVaSycn6MuR6Z28FArhjKWrgxY8K14uCzvX/
BNpNxcqmtXK9z4+sSobt1siYlrVWwcMjR40CfK5kJjsnBGUxjjk337F2yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlT8I+4HXj03COKhSVYqoJ2k32EMB8GA1UdIwQY
MBaAFLYtTOx4MwWSPjSX7YhPHERbTnj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTIt
ZDMyZTI3ZmI3ZTU5LzEvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTItZDMyZTI3ZmI3ZTU5
LzEvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlN1wmDTw
weSztPM4UChkyDJ9psVx/3YnpYb0hgXX26TlPC15CBWwZLcclBoP3M7asMsxkMYT
gnH7Z2Oh9LxPvfN2Rm9kFezj12zVxr9Y6nHl8X+wJSMwrPm1Rk0f7Pe1sRQCw6fv
MJobYqu2omnQfe7NaHfzZv0s+3uZQA5Xnx+wQKHLyoiqS3jUvKxjCxLA8r9P5+Mg
FPuF5bWuFjOE19nvW+PD467Fc19NMkEvaXCN7HS1lWuHPNp1O4bJFlosLsa5nOpW
Yyuc4Nqv3WjNxsqUMC5noCeg2M88g4lvvhQfnh3vfPieeYmiHS/qkBMNKZSEc25p
i9Shl8uyvfP99Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:27:32 2025 by rpki-client