Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: jMV5G2BWIvPvHtqMdA/Xw7iy/sKWJoeWpdonWgXAaEg=
Subject key identifier: 03:8C:14:87:85:06:9C:02:CE:31:B4:EE:F4:A3:8A:9E:45:84:F6:D1
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 019A4EF5B9B313996BA2241D111EC7F4FB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 07E4
Signing time: Tue 04 Nov 2025 13:01:57 +0000
Manifest this update: Tue 04 Nov 2025 13:01:57 +0000
Manifest next update: Wed 05 Nov 2025 13:01:57 +0000
Files and hashes: 1: G4FFwIyiIU29W95QZk9-MWiLljM.roa (hash: iDaSzS67wgh1om9NMNs4mTJZEfMH7AGf6ifeuTsPDRg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: AuznlLhGT/2npw61x4pahZlmLqBYpYCuBH+Hj5DHjJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b9:b3:13:99:6b:a2:24:1d:11:1e:c7:f4:fb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Nov 4 13:01:57 2025 GMT
Not After : Nov 5 13:01:57 2025 GMT
Subject: CN=038c148785069c02ce31b4eef4a38a9e4584f6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:e5:1d:aa:85:5f:92:3d:a1:3f:69:ab:63:
54:4c:07:be:ce:54:2b:b6:c8:73:e5:96:43:75:cc:
58:7d:ac:7a:ce:b0:20:51:88:83:6a:93:23:2e:bc:
d0:0c:c5:c9:5b:f1:17:84:15:d1:7d:5e:da:ad:4d:
98:9d:3a:d0:29:cf:3a:3d:8b:4f:15:f3:10:5b:9b:
17:69:00:1e:96:16:6d:c7:1a:2e:d5:79:fc:6a:5a:
37:39:48:cb:c2:68:a3:a1:58:77:7d:96:bb:7e:2b:
48:28:4a:87:c8:02:3c:9a:ab:53:30:44:2f:6f:71:
39:41:9d:4c:71:f3:80:22:00:8b:64:95:54:cc:08:
32:cb:99:2f:96:a7:fe:2b:b7:4d:a6:53:20:02:92:
69:c2:94:eb:97:3f:eb:e7:4a:95:45:ed:7e:c1:e4:
c6:61:0e:72:4f:c1:64:24:59:54:b7:a8:43:bb:76:
c8:14:8c:03:a4:cb:f0:1c:b0:de:cf:16:fe:6e:cd:
0f:20:63:8f:e5:3d:62:f3:8d:b7:c8:2e:6f:35:aa:
f4:2d:21:b0:51:b4:e9:8b:90:0d:5c:e0:91:67:64:
bc:59:52:c5:95:54:d9:42:3a:13:84:55:9b:7b:dd:
59:55:6f:41:8c:c7:8c:b9:24:36:f4:09:ae:2a:f2:
a3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8C:14:87:85:06:9C:02:CE:31:B4:EE:F4:A3:8A:9E:45:84:F6:D1
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:62:eb:c2:a8:8b:2d:63:b8:d4:a4:c6:a6:57:1e:44:ff:99:
c3:d3:14:dd:94:6b:36:93:e3:1b:14:03:14:ca:34:c7:ad:b2:
eb:97:cd:64:76:9f:6a:74:46:d3:34:ff:7a:6f:6b:c0:23:23:
58:d5:6d:7f:5f:3a:f3:8e:55:66:c8:c7:c7:6e:1d:1e:9a:c5:
eb:3a:31:48:ac:0d:82:e0:ac:fe:1f:70:a8:80:69:ba:43:37:
46:5f:f4:95:f5:d6:77:91:6d:33:11:b5:c3:ab:aa:b9:4d:d7:
97:60:fe:f2:b6:96:cb:0c:bf:94:48:00:12:e7:25:31:ec:7f:
31:63:7d:bd:84:ea:1e:ff:4e:bd:e0:23:06:0c:2f:38:31:5b:
14:ef:c5:97:90:55:e7:86:f2:71:e6:7a:f4:2c:f0:a5:80:d8:
20:da:5b:22:0f:9c:b3:35:ae:92:a3:3f:5a:48:81:aa:62:46:
f8:dc:d8:2d:ac:4b:83:23:a1:4e:29:73:c7:f7:3e:ae:26:63:
52:41:9b:41:82:ed:54:ae:9c:ab:58:4e:57:bc:a9:13:40:27:
c1:64:d0:c5:ef:3a:be:18:9e:c2:58:31:c4:7d:85:17:6a:dd:
2b:e1:c6:43:1d:08:8f:11:e4:e3:30:f4:cc:98:90:6b:62:7a:
23:39:93:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9bmzE5lroiQdER7H9PsCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTNhMmIzZmI4M2Q4NmM3ODA2Y2MwNjYwZDgyOTExOWQ5
Mzc1YjQwHhcNMjUxMTA0MTMwMTU3WhcNMjUxMTA1MTMwMTU3WjAzMTEwLwYDVQQD
EygwMzhjMTQ4Nzg1MDY5YzAyY2UzMWI0ZWVmNGEzOGE5ZTQ1ODRmNmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRPlHaqFX5I9oT9pq2NUTAe+zlQr
tshz5ZZDdcxYfax6zrAgUYiDapMjLrzQDMXJW/EXhBXRfV7arU2YnTrQKc86PYtP
FfMQW5sXaQAelhZtxxou1Xn8alo3OUjLwmijoVh3fZa7fitIKEqHyAI8mqtTMEQv
b3E5QZ1McfOAIgCLZJVUzAgyy5kvlqf+K7dNplMgApJpwpTrlz/r50qVRe1+weTG
YQ5yT8FkJFlUt6hDu3bIFIwDpMvwHLDezxb+bs0PIGOP5T1i8423yC5vNar0LSGw
UbTpi5ANXOCRZ2S8WVLFlVTZQjoThFWbe91ZVW9BjMeMuSQ29AmuKvKjkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOMFIeFBpwCzjG07vSjip5FhPbRMB8GA1UdIwQY
MBaAFLRTorP7g9hseAbMBmDYKRGdk3W0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iZjc0OGQtYzRjYS00ZmQxLWE1OWQt
NDA2MGYyMTFmM2MzLzEvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9iZjc0OGQtYzRjYS00ZmQxLWE1OWQtNDA2MGYyMTFmM2Mz
LzEvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGLrwqiL
LWO41KTGplceRP+Zw9MU3ZRrNpPjGxQDFMo0x62y65fNZHafanRG0zT/em9rwCMj
WNVtf186845VZsjHx24dHprF6zoxSKwNguCs/h9wqIBpukM3Rl/0lfXWd5FtMxG1
w6uquU3Xl2D+8raWywy/lEgAEuclMex/MWN9vYTqHv9OveAjBgwvODFbFO/Fl5BV
54byceZ69CzwpYDYINpbIg+cszWukqM/WkiBqmJG+NzYLaxLgyOhTilzx/c+riZj
UkGbQYLtVK6cq1hOV7ypE0AnwWTQxe86vhiewlgxxH2FF2rdK+HGQx0IjxHk4zD0
zJiQa2J6IzmTCA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:23 2025 by rpki-client