Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
File: TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft (raw, json)
Hash identifier: x/V0eD3dnMSzUxYCEdZCjdkn1J0rnomA2qJWJw8LhhI=
Subject key identifier: 55:A6:20:FC:3E:6F:B8:C3:4B:30:DC:C6:19:48:2E:42:31:2D:F2:80
Authority key identifier: 4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
Certificate issuer: /CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Certificate serial: 019A4EF597A29819A810DD29A826E5C9C529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
Manifest number: 0854
Signing time: Tue 04 Nov 2025 13:01:49 +0000
Manifest this update: Tue 04 Nov 2025 13:01:49 +0000
Manifest next update: Wed 05 Nov 2025 13:01:49 +0000
Files and hashes: 1: GQnwoz9GTo0_6aViyidBMz0OXtQ.roa (hash: nHXXJO9fTVBgm0+nbMIO/zyd2MM+aOqt/Y2KW6tLr74=)
2: TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl (hash: sz8momx+YfM4rwnYps9pQTgKG+jrTAuXa/R419ygMls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:97:a2:98:19:a8:10:dd:29:a8:26:e5:c9:c5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Validity
Not Before: Nov 4 13:01:49 2025 GMT
Not After : Nov 5 13:01:49 2025 GMT
Subject: CN=55a620fc3e6fb8c34b30dcc619482e42312df280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:93:e0:cd:96:6e:cd:28:50:3d:35:47:6b:
d9:9e:b7:27:c6:ea:cb:4e:c4:99:32:af:d1:5e:07:
04:0c:f1:56:9e:2b:75:4f:23:0c:92:4d:7c:0a:4f:
62:49:d9:d4:df:9c:a7:a7:c2:e8:44:35:75:06:51:
75:5f:3d:b0:2f:54:6b:35:e3:ca:7b:79:93:9a:5b:
40:4f:b6:d1:ee:66:c5:5b:ed:81:4d:7c:4b:6b:15:
c4:87:d9:92:1d:f8:8c:32:07:2b:ca:75:4f:1c:09:
1c:e4:4b:aa:cc:12:28:b6:a4:50:d6:b4:5f:76:11:
0c:ed:4c:b1:cf:88:62:cf:ef:8e:6b:37:c2:8d:e1:
b9:4d:62:84:f2:9d:0c:d0:45:0e:0b:7c:d3:6d:ad:
fa:fa:72:c1:83:f7:93:63:7c:a8:7e:75:69:92:3a:
07:7a:a6:5b:76:8b:21:d9:73:54:ce:07:62:d8:1b:
fe:b4:9a:97:22:cf:28:8f:7d:36:4c:59:08:d5:16:
68:0e:fa:70:6f:d8:67:91:d1:53:20:8c:e3:e1:e8:
ab:6f:a0:a7:c8:d1:e7:d6:98:68:a2:a4:32:3d:10:
e8:90:b9:10:f1:96:55:6f:e5:e8:4d:9c:cc:e8:fd:
75:af:21:fa:f9:a2:2d:39:9e:25:4f:a2:62:43:c1:
aa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A6:20:FC:3E:6F:B8:C3:4B:30:DC:C6:19:48:2E:42:31:2D:F2:80
X509v3 Authority Key Identifier:
keyid:4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:66:8a:cf:e1:cb:cb:c5:11:63:69:7a:d6:52:eb:3e:27:c2:
a1:7d:ac:57:d4:52:a7:8e:4f:b3:bd:6d:11:20:84:f8:46:d3:
03:c9:b4:29:b0:6b:b4:6d:15:bf:08:9d:9f:6a:5a:1f:8d:f0:
26:7d:8d:b9:41:b0:93:63:97:60:b6:f8:b2:50:8e:41:ba:9f:
14:80:e2:79:11:52:a0:e6:49:ec:66:f4:ba:c7:b6:f9:04:22:
d0:a1:73:92:a1:94:0f:9c:0d:af:d3:13:10:62:3a:78:49:56:
73:aa:03:90:e3:b3:fb:2d:42:91:8c:e0:96:55:c9:e9:fa:7a:
ed:61:d8:9f:2b:fb:90:38:d4:cc:08:78:98:9e:4a:48:84:22:
57:fa:2d:11:5c:b4:78:03:73:e2:18:b5:a1:72:b1:6b:49:7f:
12:19:df:66:e2:41:8c:49:11:00:bd:1c:e1:c4:5f:11:1a:88:
5c:da:2e:6b:b5:9d:0f:f3:2b:8d:e0:bb:6e:b5:0d:11:3f:46:
c9:6d:e9:1f:c8:70:7b:21:d3:e8:db:41:b9:81:b4:f7:82:9f:
a3:cd:ca:54:73:32:a9:c0:33:90:4b:43:a1:b6:20:62:85:a5:
b7:8e:e8:30:fe:8c:43:6f:b1:54:8c:0d:29:cb:39:08:11:95:
b6:1c:b0:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9ZeimBmoEN0pqCblycUpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNGYyMDZmZGNjYWI4M2RkZmUxOWU4OTZlOTE2M2Q3YTlh
ZDQ3NzkwHhcNMjUxMTA0MTMwMTQ5WhcNMjUxMTA1MTMwMTQ5WjAzMTEwLwYDVQQD
Eyg1NWE2MjBmYzNlNmZiOGMzNGIzMGRjYzYxOTQ4MmU0MjMxMmRmMjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGiT4M2Wbs0oUD01R2vZnrcnxurL
TsSZMq/RXgcEDPFWnit1TyMMkk18Ck9iSdnU35ynp8LoRDV1BlF1Xz2wL1RrNePK
e3mTmltAT7bR7mbFW+2BTXxLaxXEh9mSHfiMMgcrynVPHAkc5EuqzBIotqRQ1rRf
dhEM7Uyxz4hiz++OazfCjeG5TWKE8p0M0EUOC3zTba36+nLBg/eTY3yofnVpkjoH
eqZbdosh2XNUzgdi2Bv+tJqXIs8oj302TFkI1RZoDvpwb9hnkdFTIIzj4eirb6Cn
yNHn1phooqQyPRDokLkQ8ZZVb+XoTZzM6P11ryH6+aItOZ4lT6JiQ8GqhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWmIPw+b7jDSzDcxhlILkIxLfKAMB8GA1UdIwQY
MBaAFExPIG/cyrg93+GeiW6RY9eprUd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEU4Z2I5ekt1RDNmNFo2SmJwRmoxNm10UjNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jMjliYWMtNmNmOC00Yjg3LWE4ZTIt
YWQ1NDkzMWMyNGIzLzEvVEU4Z2I5ekt1RDNmNFo2SmJwRmoxNm10UjNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jMjliYWMtNmNmOC00Yjg3LWE4ZTItYWQ1NDkzMWMyNGIz
LzEvVEU4Z2I5ekt1RDNmNFo2SmJwRmoxNm10UjNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWaKz+HL
y8URY2l61lLrPifCoX2sV9RSp45Ps71tESCE+EbTA8m0KbBrtG0Vvwidn2paH43w
Jn2NuUGwk2OXYLb4slCOQbqfFIDieRFSoOZJ7Gb0use2+QQi0KFzkqGUD5wNr9MT
EGI6eElWc6oDkOOz+y1CkYzgllXJ6fp67WHYnyv7kDjUzAh4mJ5KSIQiV/otEVy0
eANz4hi1oXKxa0l/EhnfZuJBjEkRAL0c4cRfERqIXNoua7WdD/MrjeC7brUNET9G
yW3pH8hweyHT6NtBuYG094Kfo83KVHMyqcAzkEtDobYgYoWlt47oMP6MQ2+xVIwN
Kcs5CBGVthywQg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:29:35 2025 by rpki-client