Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
File: T0d31JE06rdaecERgyrX7OcmcUU.mft (raw, json)
Hash identifier: 6AJ5SA0EOnYbHmnPpUOWSyCkyQlruqJ1N73HUUq5HFg=
Subject key identifier: F4:F0:0B:D9:F5:D9:C2:C6:D6:61:92:2D:EB:37:0D:39:BD:61:6F:7F
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial: 019A5006D6CC400304A7E7A2C8B79355EBC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
Manifest number: 067A
Signing time: Tue 04 Nov 2025 18:00:16 +0000
Manifest this update: Tue 04 Nov 2025 18:00:16 +0000
Manifest next update: Wed 05 Nov 2025 18:00:16 +0000
Files and hashes: 1: T0d31JE06rdaecERgyrX7OcmcUU.crl (hash: gjVEAlSmr4Dfb1UCuCNjMSCboqEoOTtbUqTlFgJT9UU=)
2: xBIT4PfyqTeMr9EZAxQSDFw_tsM.roa (hash: +1108t61ZAdcCTRierOezlIx1u0lJ4yi+OpdSaQwRQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:d6:cc:40:03:04:a7:e7:a2:c8:b7:93:55:eb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
Validity
Not Before: Nov 4 18:00:16 2025 GMT
Not After : Nov 5 18:00:16 2025 GMT
Subject: CN=f4f00bd9f5d9c2c6d661922deb370d39bd616f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:a5:44:17:e0:aa:f5:97:5e:a4:1b:39:0c:
fb:c5:d3:51:c0:28:c7:cc:c0:de:56:8b:57:a7:d3:
14:96:88:f1:13:63:bc:47:be:ac:06:08:94:82:15:
74:04:e6:52:6d:df:82:d2:76:fb:2c:25:35:7f:19:
c9:a4:ed:e0:c5:f8:30:e5:d5:48:4e:d4:dc:1b:03:
93:1d:2a:ea:46:bb:de:06:07:0a:d9:89:fb:a4:bd:
d1:a0:de:da:f6:40:63:52:a7:a5:2a:14:ca:c2:41:
34:86:7c:ff:01:7d:cc:11:f8:8f:9d:93:f5:ee:ba:
ca:b0:de:f7:76:2e:0c:a6:46:0e:03:0f:a3:59:eb:
78:df:cc:47:4b:b3:7c:e0:e2:72:9d:dd:6a:4e:0a:
c0:ed:a4:07:b5:e0:c5:b3:46:8e:33:49:fa:4b:04:
4b:20:80:f6:0e:e6:16:74:20:9e:d8:d8:67:5f:ff:
a4:fd:9e:88:aa:d7:f3:5e:be:df:6a:db:e9:5d:03:
74:81:9b:56:40:88:8f:a3:c5:f2:51:80:77:62:a3:
ab:00:9e:27:66:8b:de:52:c9:f8:54:5b:8a:b1:82:
59:00:65:7f:47:f4:e7:f4:c5:0e:af:25:ba:24:66:
6f:37:95:0c:e9:e8:f3:1c:e5:c7:c6:f4:e9:0b:dd:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F0:0B:D9:F5:D9:C2:C6:D6:61:92:2D:EB:37:0D:39:BD:61:6F:7F
X509v3 Authority Key Identifier:
keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d1:0c:ae:4c:a9:da:86:96:c7:8a:9b:f0:5c:d8:bb:7b:63:
b8:ea:31:5f:89:74:f9:5a:30:39:ff:af:64:0b:cb:d4:95:c6:
45:6c:3a:30:f9:8c:60:17:e2:4c:1a:b4:95:41:eb:2b:f7:84:
a1:bd:cb:5a:49:1c:fb:cb:8f:02:ba:98:fb:2a:28:57:ff:39:
db:d4:ab:8b:35:17:1f:23:10:f8:58:fe:e3:1d:8e:20:bd:da:
ad:7a:75:d0:d0:ff:d4:31:45:ef:19:29:35:d7:6a:b3:34:7f:
13:8c:d4:28:67:83:4b:f3:c0:04:35:96:df:56:45:8b:d8:7a:
16:b6:96:d1:86:c7:d4:81:46:2f:fc:fa:59:4e:c5:bf:6c:25:
3b:39:c7:b5:10:9d:63:7d:7a:6e:90:47:31:0f:08:d9:e6:b5:
ce:0a:75:2a:51:23:52:4d:e9:44:2d:b3:59:90:68:fd:8a:b7:
1e:ea:23:21:6a:0a:76:c0:0f:74:24:93:7b:92:a5:ad:d3:1a:
c2:c5:d3:8f:6c:c0:da:7c:a7:37:0b:10:b8:27:f6:ee:8b:f7:
33:c0:a1:4f:71:97:42:1b:a5:cb:ea:27:98:51:3a:ac:63:3b:
5f:a2:38:b2:ba:cc:ad:ba:b0:7c:ae:54:82:ab:b4:45:0e:d3:
a0:e7:20:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBtbMQAMEp+eiyLeTVevJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNDc3N2Q0OTEzNGVhYjc1YTc5YzExMTgzMmFkN2VjZTcy
NjcxNDUwHhcNMjUxMTA0MTgwMDE2WhcNMjUxMTA1MTgwMDE2WjAzMTEwLwYDVQQD
EyhmNGYwMGJkOWY1ZDljMmM2ZDY2MTkyMmRlYjM3MGQzOWJkNjE2ZjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPClRBfgqvWXXqQbOQz7xdNRwCjH
zMDeVotXp9MUlojxE2O8R76sBgiUghV0BOZSbd+C0nb7LCU1fxnJpO3gxfgw5dVI
TtTcGwOTHSrqRrveBgcK2Yn7pL3RoN7a9kBjUqelKhTKwkE0hnz/AX3MEfiPnZP1
7rrKsN73di4MpkYOAw+jWet438xHS7N84OJynd1qTgrA7aQHteDFs0aOM0n6SwRL
IID2DuYWdCCe2NhnX/+k/Z6IqtfzXr7fatvpXQN0gZtWQIiPo8XyUYB3YqOrAJ4n
ZoveUsn4VFuKsYJZAGV/R/Tn9MUOryW6JGZvN5UM6ejzHOXHxvTpC93wKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTwC9n12cLG1mGSLes3DTm9YW9/MB8GA1UdIwQY
MBaAFE9Hd9SRNOq3WnnBEYMq1+znJnFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDBkMzFKRTA2cmRhZWNFUmd5clg3T2NtY1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZDBhODEtNjRiOS00Y2VjLWJhZDgt
OGVjMWJmOWZkYTJiLzEvVDBkMzFKRTA2cmRhZWNFUmd5clg3T2NtY1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jZDBhODEtNjRiOS00Y2VjLWJhZDgtOGVjMWJmOWZkYTJi
LzEvVDBkMzFKRTA2cmRhZWNFUmd5clg3T2NtY1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNEMrkyp
2oaWx4qb8FzYu3tjuOoxX4l0+VowOf+vZAvL1JXGRWw6MPmMYBfiTBq0lUHrK/eE
ob3LWkkc+8uPArqY+yooV/8529SrizUXHyMQ+Fj+4x2OIL3arXp10ND/1DFF7xkp
NddqszR/E4zUKGeDS/PABDWW31ZFi9h6FraW0YbH1IFGL/z6WU7Fv2wlOznHtRCd
Y316bpBHMQ8I2ea1zgp1KlEjUk3pRC2zWZBo/Yq3HuojIWoKdsAPdCSTe5KlrdMa
wsXTj2zA2nynNwsQuCf27ov3M8ChT3GXQhuly+onmFE6rGM7X6I4srrMrbqwfK5U
gqu0RQ7ToOcg3Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:19 2025 by rpki-client