Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File: tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier: mySUWAAK6NX+7/4V/Ucvs83hAkdZeO0d485tZbi55KM=
Subject key identifier: A1:E7:2F:CB:ED:D9:C4:DB:BD:AF:7F:61:09:EF:16:B2:11:F6:3D:7F
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial: 019A500724E0DB27A0A0E98A059D6C8CEC9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 18:00:36 +0000
Manifest this update: Tue 04 Nov 2025 18:00:36 +0000
Manifest next update: Wed 05 Nov 2025 18:00:36 +0000
Files and hashes: 1: H94mgXcbmEPiObELGoT_irqbFZA.roa (hash: zafi3kAgrBwpb+xZqeS8u0za5f6rLKTWup2Rk4ukWyE=)
2: cpfSzQsU6bXhLoYlLCepUpPhGUA.roa (hash: I8cvRLDssMsd0UHP/4nXy9rkIVrQ1W/PN2dEJTBJ8Vc=)
3: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: x4OTelQUTukefp9EPdefKVeAkEUEd27+EHpPUge6Ul8=)
4: v0ygM5ko9tgsiV9gTnymwBnpZD8.roa (hash: Qr8YJSCtuGUwCDefoz4H2ImMBPjSdowCdy9x6G8wdbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:24:e0:db:27:a0:a0:e9:8a:05:9d:6c:8c:ec:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
Validity
Not Before: Nov 4 18:00:36 2025 GMT
Not After : Nov 5 18:00:36 2025 GMT
Subject: CN=a1e72fcbedd9c4dbbdaf7f6109ef16b211f63d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:0e:d4:fc:2c:e0:75:02:23:7d:cb:0c:25:
d0:3b:14:01:b6:fb:1a:b9:5a:12:57:2e:4e:a3:c9:
6b:82:0a:ec:4c:07:d0:46:47:1c:7c:3d:fa:0b:4b:
aa:46:9d:7b:01:70:3b:67:47:0e:dd:b1:2a:f2:e6:
88:0a:a7:f2:d6:13:8b:f9:8c:cb:5f:f5:15:c4:f8:
40:c4:a1:21:7a:72:d4:c9:b2:71:cc:fb:89:91:c3:
39:86:cb:08:54:94:a7:9d:7f:c8:8d:34:a9:ed:e2:
7b:2c:38:33:2f:64:9d:f2:6a:4b:ee:09:d7:5a:55:
f3:8b:d0:3d:e8:59:6e:6c:ca:3e:eb:01:f0:28:b0:
a4:a8:67:33:fd:90:17:b5:e9:f6:be:f8:4f:77:7b:
df:df:c9:40:3b:1e:7e:89:3c:7d:75:ed:f1:78:3b:
a9:08:51:b2:77:e1:92:a2:75:bc:6e:29:67:14:3e:
9a:fd:35:30:a3:f9:e9:c0:f8:88:9c:2e:ec:7f:5e:
3a:f0:24:cc:c2:4c:f0:6f:a4:66:ad:ce:f8:39:d1:
d9:de:fd:df:32:74:18:53:e2:80:20:f7:a3:21:c0:
71:7f:b5:6f:8e:b4:87:2f:35:2b:02:ed:1d:73:f8:
a5:d2:f7:ab:2f:f9:77:fb:4d:2e:b9:f0:ce:0b:f0:
97:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E7:2F:CB:ED:D9:C4:DB:BD:AF:7F:61:09:EF:16:B2:11:F6:3D:7F
X509v3 Authority Key Identifier:
keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b1:30:d6:cb:8e:a4:11:71:65:51:e8:4a:41:3b:da:bc:e9:
9f:b7:1c:bc:bc:4e:be:ef:a9:5a:3a:f3:dd:f9:70:09:69:9f:
7b:37:d8:23:af:50:f3:64:55:82:15:23:d0:7f:b6:23:d6:38:
6a:a1:68:79:11:f9:3f:dc:2c:be:34:16:e8:cc:b8:97:98:00:
5b:01:de:9a:21:56:2e:de:03:08:62:e7:fd:a0:03:a5:61:8b:
3c:11:97:4a:4f:8a:08:25:b1:0d:61:04:37:22:52:6e:08:12:
05:9b:cb:9a:ff:0d:34:c8:13:b5:9f:2c:6d:1f:41:d6:a8:cc:
41:f4:51:c5:8b:ab:f8:f0:89:78:78:9a:b1:6a:00:f6:20:5d:
75:40:3e:b5:1e:d7:94:36:4d:03:c8:37:6a:cf:54:8d:3f:0b:
1b:5e:68:ec:77:7c:49:64:d9:2c:42:40:b0:69:69:73:0c:6c:
1e:a0:4b:08:5d:f3:ca:82:e5:0d:20:3e:f7:d0:16:05:c6:2a:
50:ce:1d:78:d5:55:92:fc:2a:f6:ef:40:48:79:8e:8c:8e:50:
3c:91:a5:68:59:d8:e3:44:fc:03:c6:1d:c3:5b:6e:85:85:61:
2e:9c:17:84:0f:65:c2:03:c9:2b:e4:59:ac:b8:0b:cb:56:f0:
34:4e:81:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQByTg2yegoOmKBZ1sjOydMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MzAwNTYxOTY4OGVmYmFmZmQwNmUxMDhhNDNiZGYyMDY0
M2UwZDYwHhcNMjUxMTA0MTgwMDM2WhcNMjUxMTA1MTgwMDM2WjAzMTEwLwYDVQQD
EyhhMWU3MmZjYmVkZDljNGRiYmRhZjdmNjEwOWVmMTZiMjExZjYzZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZoO1Pws4HUCI33LDCXQOxQBtvsa
uVoSVy5Oo8lrggrsTAfQRkccfD36C0uqRp17AXA7Z0cO3bEq8uaICqfy1hOL+YzL
X/UVxPhAxKEhenLUybJxzPuJkcM5hssIVJSnnX/IjTSp7eJ7LDgzL2Sd8mpL7gnX
WlXzi9A96FlubMo+6wHwKLCkqGcz/ZAXten2vvhPd3vf38lAOx5+iTx9de3xeDup
CFGyd+GSonW8bilnFD6a/TUwo/npwPiInC7sf1468CTMwkzwb6Rmrc74OdHZ3v3f
MnQYU+KAIPejIcBxf7VvjrSHLzUrAu0dc/il0verL/l3+00uufDOC/CXlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHnL8vt2cTbva9/YQnvFrIR9j1/MB8GA1UdIwQY
MBaAFLUwBWGWiO+6/9BuEIpDvfIGQ+DWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFRBRllaYUk3N3JfMEc0UWlrTzk4Z1pENE5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy85OTVmYmQtOTFmYi00M2JiLThmMjYt
Y2Q0YmQ0NDI3NWM1LzEvdFRBRllaYUk3N3JfMEc0UWlrTzk4Z1pENE5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy85OTVmYmQtOTFmYi00M2JiLThmMjYtY2Q0YmQ0NDI3NWM1
LzEvdFRBRllaYUk3N3JfMEc0UWlrTzk4Z1pENE5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLEw1suO
pBFxZVHoSkE72rzpn7ccvLxOvu+pWjrz3flwCWmfezfYI69Q82RVghUj0H+2I9Y4
aqFoeRH5P9wsvjQW6My4l5gAWwHemiFWLt4DCGLn/aADpWGLPBGXSk+KCCWxDWEE
NyJSbggSBZvLmv8NNMgTtZ8sbR9B1qjMQfRRxYur+PCJeHiasWoA9iBddUA+tR7X
lDZNA8g3as9UjT8LG15o7Hd8SWTZLEJAsGlpcwxsHqBLCF3zyoLlDSA+99AWBcYq
UM4deNVVkvwq9u9ASHmOjI5QPJGlaFnY40T8A8Ydw1tuhYVhLpwXhA9lwgPJK+RZ
rLgLy1bwNE6BFQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:50 2025 by rpki-client