Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
File: tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft (raw, json)
Hash identifier: u5l5DhVVNFiPLi3V7vVFXXCALQ8m8MFvkFHxRkjnG+Q=
Subject key identifier: 63:3A:39:40:BF:41:65:6C:29:A4:4A:8F:B5:67:4D:20:36:27:C0:71
Authority key identifier: B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A
Certificate issuer: /CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
Certificate serial: 019A4E5005A86A35D88EE22623E508AF3F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 10:00:58 +0000
Manifest this update: Tue 04 Nov 2025 10:00:58 +0000
Manifest next update: Wed 05 Nov 2025 10:00:58 +0000
Files and hashes: 1: R61HPMD68kIaSjuhapTR2hk_o_k.roa (hash: eWM7uVRHKJ0h/TzbbEISOsoLOvqx2gFtMEnPl7A/Y18=)
2: tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl (hash: 28j8KjFN0iPcJl+G6e0VVaOjQKYv/x1WJGFXm+CGT50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:05:a8:6a:35:d8:8e:e2:26:23:e5:08:af:3f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
Validity
Not Before: Nov 4 10:00:58 2025 GMT
Not After : Nov 5 10:00:58 2025 GMT
Subject: CN=633a3940bf41656c29a44a8fb5674d203627c071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:86:0f:5f:5b:bf:b8:a2:02:04:57:62:4d:
a1:e0:1a:af:98:ba:ae:23:49:c5:e7:21:d5:d9:57:
15:dd:04:f7:74:70:1a:83:73:fd:44:b4:7e:d8:35:
b8:bf:9c:0f:b6:06:22:71:eb:81:3f:89:77:ec:4b:
f2:79:d3:be:9d:30:c3:ae:98:49:b7:7f:6e:23:00:
d4:81:b7:df:e5:27:a4:4c:92:c6:9f:d6:95:84:dc:
c5:d8:5b:60:2e:6b:ab:b8:ed:92:c6:34:51:10:3a:
2c:19:7e:a6:b5:2e:81:2c:76:8a:d3:c6:40:ae:03:
5f:fa:b0:90:35:82:8d:df:03:b9:f4:03:99:2f:5b:
06:65:b0:8b:95:bd:5c:fe:f0:f0:77:fc:2b:ca:42:
b1:ab:c4:d3:7d:8f:e1:24:81:96:88:2b:48:d7:74:
6a:48:19:52:6e:c9:d8:29:cc:0d:3f:84:a4:82:4c:
22:9f:95:18:f8:4e:6d:09:4f:96:9b:36:59:d6:41:
1f:cf:f1:f1:9d:33:d4:94:b9:18:82:82:36:cc:c9:
89:9c:2d:1f:9c:a8:8e:33:6c:e3:d9:bc:b5:14:e0:
0b:e1:fd:a9:4a:2a:be:fb:b9:41:5a:4d:db:a3:13:
f4:17:3d:f5:b8:64:3b:3e:20:2d:61:82:49:c0:cb:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3A:39:40:BF:41:65:6C:29:A4:4A:8F:B5:67:4D:20:36:27:C0:71
X509v3 Authority Key Identifier:
keyid:B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:aa:d6:9f:ab:d3:05:3c:85:95:8a:3e:da:4a:ba:ba:aa:96:
d8:af:54:36:e9:45:a6:20:a0:34:10:22:b1:70:d0:13:7d:5e:
c9:29:97:c3:92:64:3b:8c:3b:14:c7:da:5e:03:5d:00:43:1f:
e9:7d:42:d6:00:44:aa:be:9e:21:8d:91:c6:57:41:3b:ce:a8:
af:6a:be:0c:b0:8a:32:36:8a:5c:3c:93:f7:21:61:9c:54:16:
e8:83:db:bf:5d:f1:8f:ee:ec:96:dd:8a:92:4b:dd:eb:c1:a3:
47:83:a8:84:08:30:fa:78:8e:34:3b:9c:c6:07:46:8e:f4:27:
b9:8b:7a:e2:54:92:1a:4f:50:d1:f1:26:4d:c5:cf:19:9c:6e:
e6:64:d1:f0:6b:cb:1a:b4:95:28:14:20:ef:cc:1c:08:2c:e7:
1a:da:8f:f4:47:29:83:d3:0a:8b:a1:7b:d4:fb:bb:db:3f:80:
62:f0:23:9f:c2:cd:2d:37:29:f0:b4:69:d0:be:0e:8b:7c:cd:
f2:01:a5:65:12:eb:e8:3d:56:0c:09:e6:8f:14:51:1d:d1:ce:
b1:a7:60:b3:bd:c5:1e:eb:14:d1:37:9f:98:11:b0:2a:5a:da:
23:f5:1c:e6:12:e3:dc:6c:74:1f:09:61:7f:64:8b:31:ab:0c:
48:cf:89:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOUAWoajXYjuImI+UIrz9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MDIzYzhjNTE4ZmE0MjlmZmNhMjU5NzdiNmE4Zjg0M2Y4
ZjBjNGEwHhcNMjUxMTA0MTAwMDU4WhcNMjUxMTA1MTAwMDU4WjAzMTEwLwYDVQQD
Eyg2MzNhMzk0MGJmNDE2NTZjMjlhNDRhOGZiNTY3NGQyMDM2MjdjMDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTmGD19bv7iiAgRXYk2h4BqvmLqu
I0nF5yHV2VcV3QT3dHAag3P9RLR+2DW4v5wPtgYiceuBP4l37EvyedO+nTDDrphJ
t39uIwDUgbff5SekTJLGn9aVhNzF2FtgLmuruO2SxjRREDosGX6mtS6BLHaK08ZA
rgNf+rCQNYKN3wO59AOZL1sGZbCLlb1c/vDwd/wrykKxq8TTfY/hJIGWiCtI13Rq
SBlSbsnYKcwNP4Skgkwin5UY+E5tCU+WmzZZ1kEfz/HxnTPUlLkYgoI2zMmJnC0f
nKiOM2zj2by1FOAL4f2pSiq++7lBWk3boxP0Fz31uGQ7PiAtYYJJwMtwgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGM6OUC/QWVsKaRKj7VnTSA2J8BxMB8GA1UdIwQY
MBaAFLQCPIxRj6Qp/8oll3tqj4Q/jwxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEFJOGpGR1BwQ25feWlXWGUycVBoRC1QREVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81MmY1YWQtODUwZC00YTdlLTk5NDYt
M2I3NDVkZDhlMjFlLzEvdEFJOGpGR1BwQ25feWlXWGUycVBoRC1QREVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81MmY1YWQtODUwZC00YTdlLTk5NDYtM2I3NDVkZDhlMjFl
LzEvdEFJOGpGR1BwQ25feWlXWGUycVBoRC1QREVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqrWn6vT
BTyFlYo+2kq6uqqW2K9UNulFpiCgNBAisXDQE31eySmXw5JkO4w7FMfaXgNdAEMf
6X1C1gBEqr6eIY2RxldBO86or2q+DLCKMjaKXDyT9yFhnFQW6IPbv13xj+7slt2K
kkvd68GjR4OohAgw+niONDucxgdGjvQnuYt64lSSGk9Q0fEmTcXPGZxu5mTR8GvL
GrSVKBQg78wcCCznGtqP9Ecpg9MKi6F71Pu72z+AYvAjn8LNLTcp8LRp0L4Oi3zN
8gGlZRLr6D1WDAnmjxRRHdHOsadgs73FHusU0TefmBGwKlraI/Uc5hLj3Gx0Hwlh
f2SLMasMSM+JBA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:52 2025 by rpki-client