Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File: TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier: Lb5rdSvyiaNHC0bR9TT20AccPGZytBNpf4LaaZ9MgqI=
Subject key identifier: 9F:D7:29:4E:65:A4:08:67:B1:D1:40:AB:F2:CD:8C:38:F3:1C:01:5D
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer: /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial: 019A503E44AB2E237DE208589D4471A30173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 19:00:49 +0000
Manifest this update: Tue 04 Nov 2025 19:00:49 +0000
Manifest next update: Wed 05 Nov 2025 19:00:49 +0000
Files and hashes: 1: 06AfR8ZbdQ5_MZMYhDQjdfTo_kA.roa (hash: EEGnzX0afqpfc3Kn5NnezY7IPw+uVu1JdUrzEk+iDpk=)
2: 1-g-A4hn_DsUBjrSOtmwbaV2sjfc.roa (hash: H/p8gImyoUDaEoDvhM9gHqspIznQXZjV/layX0BmypQ=)
3: 43zHI9RV_-UV0H8FudTqslXERT8.roa (hash: jjlOWoTue0eCIb3Fk8Ot7n6TxzmNBAQWzlFe/V95Bl4=)
4: NBksY7qoZYso21Vw3xYrZFLq5eE.roa (hash: uWalzSU+haa+ieD4qUwSSt1pReJEBtMSVsUZjZILj3c=)
5: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: xTcOOFTgeUzYFr/Uzk4YDbHVjXV+LbIqQ1ryfGShzKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:44:ab:2e:23:7d:e2:08:58:9d:44:71:a3:01:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Validity
Not Before: Nov 4 19:00:49 2025 GMT
Not After : Nov 5 19:00:49 2025 GMT
Subject: CN=9fd7294e65a40867b1d140abf2cd8c38f31c015d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:ab:a4:7c:16:12:58:69:c3:fb:5c:4f:94:
be:09:ee:0a:ae:2d:6a:92:9b:51:66:36:c7:f8:ab:
4f:00:f3:c2:6d:c1:f8:61:76:b1:1e:94:4b:a4:ff:
66:5a:e8:44:68:f6:7c:62:59:7b:9c:00:99:d7:8e:
58:c8:c5:e4:de:b3:41:47:25:df:59:af:eb:8b:5b:
ba:5a:b3:20:19:ae:bd:3c:b1:3b:bf:96:f6:90:41:
9b:96:4e:ac:00:2c:b3:2c:aa:32:ab:5d:98:4c:f0:
0c:29:0b:56:42:a2:82:0f:62:0b:fc:16:e0:b8:19:
f8:ec:10:7a:17:78:37:56:1d:f9:a3:91:17:d7:a5:
d8:20:fa:52:a5:2c:f5:45:a7:46:f5:aa:d3:ef:85:
a5:a3:b9:77:e4:ea:ea:2d:56:37:d2:49:c9:f4:51:
f9:9d:92:fd:a1:9d:6a:6a:77:af:ee:41:39:a5:e2:
2b:77:81:47:30:4c:82:20:d8:bb:f5:9f:08:ad:6d:
ba:57:23:19:80:03:2e:b5:3f:ff:39:0b:1e:58:69:
51:3e:82:93:54:c3:aa:83:d0:34:15:b2:4d:ee:c5:
da:d3:c9:4d:dd:a1:52:8d:b8:71:78:88:9a:f5:d6:
dc:fd:7a:ef:de:1a:84:2c:b8:f6:1d:7a:9b:b7:0d:
c8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D7:29:4E:65:A4:08:67:B1:D1:40:AB:F2:CD:8C:38:F3:1C:01:5D
X509v3 Authority Key Identifier:
keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:46:cf:d7:4d:29:56:8a:08:bc:01:96:44:8f:9c:4e:7f:14:
b9:32:b4:4b:28:70:30:f0:49:ae:92:8d:e8:f0:2f:3d:51:2c:
04:2c:81:6b:71:4b:4a:fe:d4:e2:f7:ae:ba:ae:61:14:ef:16:
04:a2:51:d3:30:66:77:8a:8d:fa:d5:67:d3:0f:a6:19:de:1c:
8b:32:d3:cc:90:88:c7:29:27:ee:6f:18:26:77:9e:75:f7:79:
ba:a3:02:af:b7:0d:1c:62:84:e4:dc:3a:91:3c:1e:dc:a4:7a:
9d:41:80:1b:f3:cb:ff:72:00:47:0d:8e:fb:15:bb:97:f3:01:
c1:62:ef:49:26:94:79:5f:a0:0e:af:ca:8c:95:e4:a2:26:ce:
85:5b:d5:2c:3d:a0:21:e2:b0:51:58:04:2d:4a:da:45:df:c7:
71:d3:e6:c8:9f:f5:24:5d:f4:6e:f3:c1:42:6c:6e:90:9f:1e:
4d:45:cb:7e:37:db:fc:17:db:2d:67:29:a1:a2:c3:4f:a3:1d:
9f:87:f8:23:a2:7f:18:bb:89:af:77:09:b0:2c:04:e2:5a:30:
3c:0d:31:62:af:3f:9e:66:22:29:e9:ff:c7:7c:ac:f2:8e:2d:
d9:b9:a8:72:e2:81:c0:f9:e4:d8:ba:62:a2:98:ef:cd:b7:00:
6f:5c:e5:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPkSrLiN94ghYnURxowFzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTExMzI0ZTg2OWJjNGNhNWVjOGJhZDBkM2RkZmY2ODU0
NDE5NzkwHhcNMjUxMTA0MTkwMDQ5WhcNMjUxMTA1MTkwMDQ5WjAzMTEwLwYDVQQD
Eyg5ZmQ3Mjk0ZTY1YTQwODY3YjFkMTQwYWJmMmNkOGMzOGYzMWMwMTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvGrpHwWElhpw/tcT5S+Ce4Kri1q
kptRZjbH+KtPAPPCbcH4YXaxHpRLpP9mWuhEaPZ8Yll7nACZ145YyMXk3rNBRyXf
Wa/ri1u6WrMgGa69PLE7v5b2kEGblk6sACyzLKoyq12YTPAMKQtWQqKCD2IL/Bbg
uBn47BB6F3g3Vh35o5EX16XYIPpSpSz1RadG9arT74Wlo7l35OrqLVY30knJ9FH5
nZL9oZ1qanev7kE5peIrd4FHMEyCINi79Z8IrW26VyMZgAMutT//OQseWGlRPoKT
VMOqg9A0FbJN7sXa08lN3aFSjbhxeIia9dbc/Xrv3hqELLj2HXqbtw3INQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/XKU5lpAhnsdFAq/LNjDjzHAFdMB8GA1UdIwQY
MBaAFEyREyToabxMpeyLrQ093/aFRBl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yYjM4YjMtMTJmMS00MjQyLWFkYWUt
YjdkMWNhYzUxZTBjLzEvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8yYjM4YjMtMTJmMS00MjQyLWFkYWUtYjdkMWNhYzUxZTBj
LzEvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0bP100p
VooIvAGWRI+cTn8UuTK0SyhwMPBJrpKN6PAvPVEsBCyBa3FLSv7U4veuuq5hFO8W
BKJR0zBmd4qN+tVn0w+mGd4cizLTzJCIxykn7m8YJneedfd5uqMCr7cNHGKE5Nw6
kTwe3KR6nUGAG/PL/3IARw2O+xW7l/MBwWLvSSaUeV+gDq/KjJXkoibOhVvVLD2g
IeKwUVgELUraRd/HcdPmyJ/1JF30bvPBQmxukJ8eTUXLfjfb/BfbLWcpoaLDT6Md
n4f4I6J/GLuJr3cJsCwE4lowPA0xYq8/nmYiKen/x3ys8o4t2bmocuKBwPnk2Lpi
opjvzbcAb1zlvA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:51 2025 by rpki-client