Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
File: T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json)
Hash identifier: ytjTyRhbYEW9tGFaYPNq0On/jcszlrYobftS6H/G+54=
Subject key identifier: 6C:01:C6:A8:12:0B:34:54:03:6F:84:B9:F1:AB:88:B3:D6:50:3A:B2
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial: 019A4D077CB798726FF7F6B1EF439E222D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
Manifest number: 14DA
Signing time: Tue 04 Nov 2025 04:02:07 +0000
Manifest this update: Tue 04 Nov 2025 04:02:07 +0000
Manifest next update: Wed 05 Nov 2025 04:02:07 +0000
Files and hashes: 1: K_MyGvHR4IdSBZBjdPl8MukbNFk.roa (hash: HrMHQD3uVG8sdR811mtsQpZxidNNmctDC5Taskmcc7A=)
2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: WO0hZM8eMgTIHYi9xTA3cqEja3IWrxeJmMxMkqdjbMc=)
3: qt5f6XAHUjkOK9CEjEv3rd6845Q.roa (hash: JhK1mHuSEOx5aV2MrmFZp4Cs5i5KltcCemHPpXmD5pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:7c:b7:98:72:6f:f7:f6:b1:ef:43:9e:22:2d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Validity
Not Before: Nov 4 04:02:07 2025 GMT
Not After : Nov 5 04:02:07 2025 GMT
Subject: CN=6c01c6a8120b3454036f84b9f1ab88b3d6503ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:c0:19:45:0d:18:03:f3:4e:b9:94:5b:7c:
1e:92:8c:eb:fe:bc:ee:01:9f:a4:36:ba:30:7b:ab:
7b:d5:af:77:5f:aa:52:a9:15:e2:72:d4:3d:71:5b:
51:27:10:ac:dd:5b:13:b6:f4:83:28:92:63:c0:97:
69:59:79:13:6b:5b:c8:a3:74:7f:d9:49:f4:7e:85:
b1:12:9b:cd:3b:33:9a:1c:05:96:28:18:ba:0b:49:
9c:df:c8:f1:86:50:9a:00:fa:cc:c9:20:2f:b2:05:
9c:50:69:e9:91:f6:1e:1a:1f:54:66:b7:dc:9e:20:
34:42:0f:c8:a3:a3:f6:ca:54:04:8e:73:a4:17:b4:
ea:6d:40:5b:22:0c:98:d3:44:2f:90:c1:9c:0c:66:
3c:a1:46:5f:35:61:17:9f:fe:59:89:e4:59:e1:d1:
98:4a:fd:b6:04:a2:cb:66:a0:d1:01:34:f7:58:a8:
0b:3c:3c:0f:4f:59:bd:7f:88:de:ab:4f:d4:56:a6:
87:da:3d:13:5a:29:23:f3:20:f0:0f:fe:25:01:79:
75:a4:3e:fa:41:89:2e:3d:00:39:66:87:50:7e:42:
cd:f9:b2:ed:01:78:4b:6a:73:dc:d2:d4:27:39:09:
f6:88:0e:d0:3e:1d:79:08:b5:a8:92:d4:d0:7d:e8:
ad:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:01:C6:A8:12:0B:34:54:03:6F:84:B9:F1:AB:88:B3:D6:50:3A:B2
X509v3 Authority Key Identifier:
keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:98:23:a8:65:29:c0:95:df:bc:f5:88:d0:2b:5b:6e:21:5d:
c3:a3:b2:7c:a9:c0:65:ba:04:fe:c1:9b:7e:f0:7c:1c:dd:cf:
56:03:79:3a:5d:9d:51:43:b8:4d:a5:ee:1f:94:95:dd:73:cd:
d4:f0:b6:e4:2e:a1:e9:ef:67:81:55:46:dd:df:95:67:51:f4:
d2:cd:6f:18:d7:54:80:bf:41:ed:88:c2:bd:f2:19:5e:2f:77:
3e:6e:7c:00:fe:2f:df:9b:40:81:15:e5:3f:44:08:ae:70:e6:
98:f0:a1:0b:04:b3:a1:cb:a0:07:a7:52:e6:7f:d0:88:7d:40:
59:06:94:4f:a2:4e:3c:35:3f:69:b9:a7:d1:2c:b8:0d:9f:bc:
91:4c:bd:5f:50:56:43:56:eb:69:68:14:f5:27:07:e1:f2:7d:
72:26:0a:14:f1:79:5d:41:38:5c:78:e5:53:ff:36:6e:56:75:
c7:9f:5c:29:f1:22:1e:87:7b:da:2f:3a:d3:df:05:b1:c7:2c:
c8:c6:c1:53:8a:82:4a:1f:c9:a2:8c:87:5a:16:b6:8b:70:38:
1a:d2:a4:3f:4b:2f:73:38:3a:f8:20:2a:41:a6:1f:a4:63:2b:
48:56:df:8c:74:81:f9:7d:20:c0:17:7f:2e:f7:9d:97:9e:74:
c1:42:01:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNB3y3mHJv9/ax70OeIi1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmN2Q4ODUzOTNiMzJiNWVlZTNhMGJmNDMzOGUwZmFhZWYz
Yzc1M2MwHhcNMjUxMTA0MDQwMjA3WhcNMjUxMTA1MDQwMjA3WjAzMTEwLwYDVQQD
Eyg2YzAxYzZhODEyMGIzNDU0MDM2Zjg0YjlmMWFiODhiM2Q2NTAzYWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/TAGUUNGAPzTrmUW3wekozr/rzu
AZ+kNrowe6t71a93X6pSqRXictQ9cVtRJxCs3VsTtvSDKJJjwJdpWXkTa1vIo3R/
2Un0foWxEpvNOzOaHAWWKBi6C0mc38jxhlCaAPrMySAvsgWcUGnpkfYeGh9UZrfc
niA0Qg/Io6P2ylQEjnOkF7TqbUBbIgyY00QvkMGcDGY8oUZfNWEXn/5ZieRZ4dGY
Sv22BKLLZqDRATT3WKgLPDwPT1m9f4jeq0/UVqaH2j0TWikj8yDwD/4lAXl1pD76
QYkuPQA5ZodQfkLN+bLtAXhLanPc0tQnOQn2iA7QPh15CLWoktTQfeitswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwBxqgSCzRUA2+EufGriLPWUDqyMB8GA1UdIwQY
MBaAFE99iFOTsyte7joL9DOOD6rvPHU8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEt
YjE4ZGFjMmQyNTliLzEvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEtYjE4ZGFjMmQyNTli
LzEvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5gjqGUp
wJXfvPWI0CtbbiFdw6OyfKnAZboE/sGbfvB8HN3PVgN5Ol2dUUO4TaXuH5SV3XPN
1PC25C6h6e9ngVVG3d+VZ1H00s1vGNdUgL9B7YjCvfIZXi93Pm58AP4v35tAgRXl
P0QIrnDmmPChCwSzocugB6dS5n/QiH1AWQaUT6JOPDU/abmn0Sy4DZ+8kUy9X1BW
Q1braWgU9ScH4fJ9ciYKFPF5XUE4XHjlU/82blZ1x59cKfEiHod72i86098Fsccs
yMbBU4qCSh/JooyHWha2i3A4GtKkP0svczg6+CAqQaYfpGMrSFbfjHSB+X0gwBd/
Lvedl550wUIB6Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:19 2025 by rpki-client