Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
File: T-uUV-xRnoI3hncQvMgvow6uZ8A.mft (raw, json)
Hash identifier: h/AeJFtMFaGABaXULOqVe67CFESjnEiMsJnDxQz1TXM=
Subject key identifier: 08:85:96:05:E2:29:69:12:17:D7:CF:CC:2B:8D:B9:0D:E4:1C:81:D7
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Certificate issuer: /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial: 019A4FD069EAE3C7520DF6D34D0161C41A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 17:00:49 +0000
Manifest this update: Tue 04 Nov 2025 17:00:49 +0000
Manifest next update: Wed 05 Nov 2025 17:00:49 +0000
Files and hashes: 1: DMobrS7vy2moYzGxgBwp5Xf3ALI.roa (hash: FXiETzyRXvUDm+4e6t+4D5feOq7eyRK3o1W4hSbV9WQ=)
2: M_KXgx_JXGIc6tpaSDgr0M5BMPw.roa (hash: X3pXFD/5xK/MixjNA4bRNTqRZIbmtfbltIvMKrIW70U=)
3: T-uUV-xRnoI3hncQvMgvow6uZ8A.crl (hash: YZnuSDUADtRn11ENzztR/8+TuPua2pc8eiKSmaZYYlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:69:ea:e3:c7:52:0d:f6:d3:4d:01:61:c4:1a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Validity
Not Before: Nov 4 17:00:49 2025 GMT
Not After : Nov 5 17:00:49 2025 GMT
Subject: CN=08859605e229691217d7cfcc2b8db90de41c81d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:b1:e1:2a:3e:9e:4a:51:b1:0a:e3:7a:b1:
cd:b3:0c:68:b2:44:33:50:14:6a:72:5e:d4:91:b7:
13:a7:0c:d9:b4:13:2c:65:47:60:25:b2:49:6e:d5:
01:82:12:bb:28:bd:ec:92:7f:43:39:cc:90:50:33:
a0:20:32:2e:a1:b9:cb:de:0d:1a:0d:2d:f1:69:fa:
02:80:dc:8b:58:2a:a3:3c:ab:d5:e7:fc:80:9b:9d:
d5:75:eb:6e:43:e2:ae:b8:e9:72:eb:40:01:57:d5:
58:1a:a8:e4:f8:40:f7:0b:72:ec:41:c9:cd:ee:c6:
be:da:2d:7e:61:c0:5a:6b:3a:d8:0a:a4:cf:7f:9d:
bc:cc:96:ed:df:8d:93:5b:78:f2:35:28:d0:bd:25:
df:72:e3:b2:d5:7f:07:ef:77:fc:1f:59:1b:4e:e2:
e3:38:9c:d3:14:d7:f1:89:40:63:d1:70:d2:e8:c1:
22:cb:65:09:4a:28:62:22:50:b6:28:00:a7:32:ed:
7e:a0:00:30:06:47:af:49:c7:2e:f1:20:d7:d2:2f:
f6:ff:a7:e4:a4:d7:8b:e8:84:94:12:dd:ec:40:f0:
9e:52:d3:2e:21:2f:2a:f7:73:13:81:6c:9c:75:6d:
58:d3:d9:5b:d8:f2:2e:24:88:4d:40:67:a1:a8:d3:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:85:96:05:E2:29:69:12:17:D7:CF:CC:2B:8D:B9:0D:E4:1C:81:D7
X509v3 Authority Key Identifier:
keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a1:7c:24:91:39:db:f4:1a:db:79:32:ea:6f:45:da:fb:6b:
8e:1a:a8:64:34:85:e4:90:9e:7a:a1:26:fc:5c:d6:1a:ea:09:
c8:c4:fb:17:d1:87:4b:82:77:93:02:db:ec:63:68:d8:ab:70:
c6:52:64:8f:90:47:c6:8e:6c:55:52:28:4a:5f:85:47:52:a7:
d5:56:fa:ff:16:e7:bb:df:ef:ac:91:f1:51:f3:19:f9:89:fc:
c9:5e:77:f4:d1:69:c8:dd:8f:4e:0f:9c:c2:55:6e:77:47:77:
7e:6b:2d:49:6f:d7:19:9c:07:2d:df:7c:55:06:f8:f7:cf:5b:
9e:e1:de:d3:24:0f:8f:30:eb:01:1a:17:c3:b7:42:34:50:98:
90:49:84:fd:ba:c3:6b:53:97:bc:05:9c:75:30:bf:38:6c:d5:
0f:3b:3d:53:41:62:5a:9f:20:ca:ed:a1:9e:06:e6:58:c7:d6:
9f:a7:03:7a:17:4d:75:83:66:f2:f8:be:4e:51:de:60:82:cb:
57:57:5c:45:80:10:f7:5a:16:87:6c:17:a9:db:69:ce:c0:44:
c7:2e:52:bf:36:b6:21:06:79:18:02:d1:73:35:84:e6:da:55:
25:2b:37:54:c7:79:51:4c:d3:82:45:60:31:ec:6b:5a:6d:d0:
ad:86:f2:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0Gnq48dSDfbTTQFhxBpnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZWI5NDU3ZWM1MTllODIzNzg2NzcxMGJjYzgyZmEzMGVh
ZTY3YzAwHhcNMjUxMTA0MTcwMDQ5WhcNMjUxMTA1MTcwMDQ5WjAzMTEwLwYDVQQD
EygwODg1OTYwNWUyMjk2OTEyMTdkN2NmY2MyYjhkYjkwZGU0MWM4MWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuASx4So+nkpRsQrjerHNswxoskQz
UBRqcl7UkbcTpwzZtBMsZUdgJbJJbtUBghK7KL3skn9DOcyQUDOgIDIuobnL3g0a
DS3xafoCgNyLWCqjPKvV5/yAm53VdetuQ+KuuOly60ABV9VYGqjk+ED3C3LsQcnN
7sa+2i1+YcBaazrYCqTPf528zJbt342TW3jyNSjQvSXfcuOy1X8H73f8H1kbTuLj
OJzTFNfxiUBj0XDS6MEiy2UJSihiIlC2KACnMu1+oAAwBkevSccu8SDX0i/2/6fk
pNeL6ISUEt3sQPCeUtMuIS8q93MTgWycdW1Y09lb2PIuJIhNQGehqNNfBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiFlgXiKWkSF9fPzCuNuQ3kHIHXMB8GA1UdIwQY
MBaAFE/rlFfsUZ6CN4Z3ELzIL6MOrmfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iOGY1MGUtNDc1Zi00YjQ3LTg1YzAt
NWYxMjM1NTVjZmIxLzEvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9iOGY1MGUtNDc1Zi00YjQ3LTg1YzAtNWYxMjM1NTVjZmIx
LzEvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqF8JJE5
2/Qa23ky6m9F2vtrjhqoZDSF5JCeeqEm/FzWGuoJyMT7F9GHS4J3kwLb7GNo2Ktw
xlJkj5BHxo5sVVIoSl+FR1Kn1Vb6/xbnu9/vrJHxUfMZ+Yn8yV539NFpyN2PTg+c
wlVud0d3fmstSW/XGZwHLd98VQb4989bnuHe0yQPjzDrARoXw7dCNFCYkEmE/brD
a1OXvAWcdTC/OGzVDzs9U0FiWp8gyu2hngbmWMfWn6cDehdNdYNm8vi+TlHeYILL
V1dcRYAQ91oWh2wXqdtpzsBExy5Svza2IQZ5GALRczWE5tpVJSs3VMd5UUzTgkVg
MexrWm3QrYbyjg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:42:47 2025 by rpki-client