Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
File: tvvGPvVhSn75WhBhiOPXh1XGh7k.mft (raw, json)
Hash identifier: EwFxU7t06gisQ/kdyR2P/WlwZUJOgx6BPtqbYDRNLRo=
Subject key identifier: E6:9B:E6:E9:3A:E6:20:B5:0F:E9:7D:C1:FE:EF:AF:05:2D:30:24:E4
Authority key identifier: B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
Certificate issuer: /CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Certificate serial: 019A4D3D1C1FF68481DFD8163AD89CD7059E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 05:00:41 +0000
Manifest this update: Tue 04 Nov 2025 05:00:41 +0000
Manifest next update: Wed 05 Nov 2025 05:00:41 +0000
Files and hashes: 1: QdYCM-qh5Yk3hD7JDcUwBV0zQOE.roa (hash: dojllc59NZSm9Mz/NGxjdimG/qqIGOvM1pQ0q5KpNiE=)
2: YUVqQdQIyjArliTwomJUYJEwCGQ.roa (hash: 4idaosIzVzGBgf2LXtYCKacvmrm3Vvf4Nk86J3M+nPs=)
3: tvvGPvVhSn75WhBhiOPXh1XGh7k.crl (hash: dPDbsV3H2miettVcaLrwPEG1XTWAL3MhIsz2A2UkqVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:1c:1f:f6:84:81:df:d8:16:3a:d8:9c:d7:05:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Validity
Not Before: Nov 4 05:00:41 2025 GMT
Not After : Nov 5 05:00:41 2025 GMT
Subject: CN=e69be6e93ae620b50fe97dc1feefaf052d3024e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:1c:e1:3a:21:b2:d0:92:a3:93:2d:f5:6a:
f0:fe:32:e5:7b:70:ba:6f:dc:56:43:22:57:50:c6:
15:41:21:d3:ed:31:9f:30:8c:49:5b:db:8f:4c:af:
29:99:16:b4:b6:04:ed:46:63:7e:af:c2:b5:7c:77:
7b:17:73:7b:22:96:cb:0b:6e:f9:cf:8d:22:2e:af:
08:55:28:2d:29:cb:2f:2d:9a:91:ea:0e:4d:4f:b1:
17:fb:29:3d:0c:32:3d:cf:0e:51:70:bb:9e:52:83:
48:df:e5:f2:06:52:33:c0:14:02:8a:fc:70:74:67:
e0:b1:04:6f:a3:9b:05:fc:c4:d2:6e:07:34:f6:b8:
49:6c:5f:89:51:75:c5:6f:6b:d9:a0:0b:df:00:6a:
50:fb:1c:43:21:27:6b:b7:04:73:6b:e5:ed:47:71:
db:6f:4e:89:01:dd:4b:5f:a2:c5:b5:06:48:81:cb:
11:4c:96:6e:65:6b:88:fe:94:af:90:d5:b2:ad:8b:
32:23:3c:39:76:61:06:8d:a1:6f:1b:5a:bf:ea:fc:
a7:b8:d2:23:34:e2:0f:5d:b1:d6:b9:b4:64:74:a2:
70:30:10:20:e9:53:ea:00:ba:dc:4f:a5:f4:96:1a:
3c:64:16:27:05:52:2f:e9:28:3c:5d:42:ed:6e:d1:
79:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9B:E6:E9:3A:E6:20:B5:0F:E9:7D:C1:FE:EF:AF:05:2D:30:24:E4
X509v3 Authority Key Identifier:
keyid:B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d0:59:00:4a:14:aa:29:58:aa:f1:9c:53:12:45:b8:9a:6d:
ca:66:15:a0:03:ba:d3:2b:0a:24:4d:ef:34:76:18:35:d4:ed:
d5:76:5f:65:32:90:80:c4:28:a0:11:a9:b8:1f:d8:ae:95:eb:
41:07:fa:89:9b:d7:cc:a8:5e:8b:a0:54:cf:9d:ca:83:a6:00:
e0:91:b6:c4:35:a4:e7:0b:71:cd:e2:e4:30:ad:af:c9:46:54:
32:61:98:77:14:ac:93:19:7e:d0:dd:60:5b:5b:ec:59:7d:da:
81:d8:f0:fa:1e:7f:55:bb:ef:c3:e7:02:33:2a:54:6e:5d:2a:
95:83:14:d8:9c:8c:59:e3:55:40:68:b0:b3:a1:da:64:df:be:
c2:41:a6:d9:c2:9e:37:e9:0d:46:53:68:2e:bc:24:ea:f7:fd:
4e:e1:f7:eb:1f:2a:2e:ac:af:c1:74:43:6e:ef:26:4c:7d:5b:
d1:ae:3e:ed:f4:b7:dd:99:af:49:60:86:8d:0a:df:4b:b6:4a:
84:ba:44:b1:8f:24:59:36:0f:ba:9c:83:8e:6c:dd:2f:f6:a5:
1e:12:f9:36:04:e2:8d:9c:65:a2:42:83:32:eb:90:c7:34:eb:
a7:59:f0:a8:4f:8b:a3:41:d3:21:45:7a:b5:1a:7b:c0:25:ff:
b0:82:9c:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPRwf9oSB39gWOtic1wWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZmJjNjNlZjU2MTRhN2VmOTVhMTA2MTg4ZTNkNzg3NTVj
Njg3YjkwHhcNMjUxMTA0MDUwMDQxWhcNMjUxMTA1MDUwMDQxWjAzMTEwLwYDVQQD
EyhlNjliZTZlOTNhZTYyMGI1MGZlOTdkYzFmZWVmYWYwNTJkMzAyNGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMAc4TohstCSo5Mt9Wrw/jLle3C6
b9xWQyJXUMYVQSHT7TGfMIxJW9uPTK8pmRa0tgTtRmN+r8K1fHd7F3N7IpbLC275
z40iLq8IVSgtKcsvLZqR6g5NT7EX+yk9DDI9zw5RcLueUoNI3+XyBlIzwBQCivxw
dGfgsQRvo5sF/MTSbgc09rhJbF+JUXXFb2vZoAvfAGpQ+xxDISdrtwRza+XtR3Hb
b06JAd1LX6LFtQZIgcsRTJZuZWuI/pSvkNWyrYsyIzw5dmEGjaFvG1q/6vynuNIj
NOIPXbHWubRkdKJwMBAg6VPqALrcT6X0lho8ZBYnBVIv6Sg8XULtbtF59wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOab5uk65iC1D+l9wf7vrwUtMCTkMB8GA1UdIwQY
MBaAFLb7xj71YUp++VoQYYjj14dVxoe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHZ2R1B2VmhTbjc1V2hCaGlPUFhoMVhHaDdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84NjMxZjUtNTRhMi00ODZmLWI5YTUt
MDgxYTFhZTZlYmQ2LzEvdHZ2R1B2VmhTbjc1V2hCaGlPUFhoMVhHaDdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS84NjMxZjUtNTRhMi00ODZmLWI5YTUtMDgxYTFhZTZlYmQ2
LzEvdHZ2R1B2VmhTbjc1V2hCaGlPUFhoMVhHaDdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9BZAEoU
qilYqvGcUxJFuJptymYVoAO60ysKJE3vNHYYNdTt1XZfZTKQgMQooBGpuB/YrpXr
QQf6iZvXzKhei6BUz53Kg6YA4JG2xDWk5wtxzeLkMK2vyUZUMmGYdxSskxl+0N1g
W1vsWX3agdjw+h5/Vbvvw+cCMypUbl0qlYMU2JyMWeNVQGiws6HaZN++wkGm2cKe
N+kNRlNoLrwk6vf9TuH36x8qLqyvwXRDbu8mTH1b0a4+7fS33ZmvSWCGjQrfS7ZK
hLpEsY8kWTYPupyDjmzdL/alHhL5NgTijZxlokKDMuuQxzTrp1nwqE+Lo0HTIUV6
tRp7wCX/sIKcLw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:29:58 2025 by rpki-client