Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
File: t9yTan9rpQeCJPgBc2_esNroqfs.mft (raw, json)
Hash identifier: AeE1fWihl0+otKVMlsvY9oBRKIEbJKLPok5vMImORNA=
Subject key identifier: D6:A5:0C:AD:24:A2:98:B3:2F:3A:D8:7D:01:DB:CD:75:64:89:0B:E7
Authority key identifier: B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
Certificate issuer: /CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Certificate serial: 019A50E33ACD0AD65A885CCF53E39D2A2158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 22:01:00 +0000
Manifest this update: Tue 04 Nov 2025 22:01:00 +0000
Manifest next update: Wed 05 Nov 2025 22:01:00 +0000
Files and hashes: 1: O8AFVnBt1m_KBZSzBdlAy6IskOk.roa (hash: drC0SH2uIRu+wIVyTkJpGVnxmbNSIHA06selPLS2xnY=)
2: svoR0cRb1Ihebi7quN7_XQpdL7U.roa (hash: FPcptyRdxs/x9VdKGmFyX9w4ws1CV2SbTs2IXTvhgNs=)
3: t9yTan9rpQeCJPgBc2_esNroqfs.crl (hash: 9RV1SXD+wEJvUvkjk/KZ7zP0wfbWHOvDA8/waCQ0ILE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:3a:cd:0a:d6:5a:88:5c:cf:53:e3:9d:2a:21:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Validity
Not Before: Nov 4 22:01:00 2025 GMT
Not After : Nov 5 22:01:00 2025 GMT
Subject: CN=d6a50cad24a298b32f3ad87d01dbcd7564890be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:42:a1:0b:0e:1d:5f:a5:98:e5:68:e4:56:
9c:0e:7f:9c:74:91:5c:4f:46:f4:04:5a:5a:f6:33:
ac:8d:75:30:01:74:8a:50:ba:c5:b1:35:e6:8d:87:
0c:d9:71:1a:11:f1:e8:03:5f:60:51:ab:4a:28:ba:
42:6f:33:d8:fe:43:bd:03:cb:bc:51:51:63:2f:62:
03:35:6f:07:c2:81:b0:7d:e4:89:d7:d8:55:a6:39:
12:84:8b:7b:c1:c8:f4:41:dc:17:74:57:d4:a5:37:
0a:44:30:9b:7b:65:95:69:41:a8:04:67:6e:b4:38:
a8:a7:5e:11:5a:ac:23:64:1e:b3:d6:a6:38:9e:a6:
51:da:7e:ab:cb:ad:78:0e:02:65:85:e3:cb:82:10:
ea:04:02:b2:0d:75:a8:c6:10:06:6f:f2:34:2c:c0:
b2:1e:3d:9e:b3:a2:d6:5e:7f:f1:ad:7f:4b:f5:37:
4c:fd:a7:06:f9:07:03:0a:d0:29:91:00:fa:0c:e0:
ab:c5:59:54:64:dd:5b:76:fc:a3:3f:48:bc:b8:74:
61:cc:33:b1:8b:75:59:9b:25:73:46:be:e9:6c:86:
b2:81:c2:7d:ff:54:d8:c7:b5:37:81:5b:60:6e:e4:
5f:c4:9d:64:fc:ae:a0:c8:4e:c4:35:ab:1e:fe:a9:
5b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A5:0C:AD:24:A2:98:B3:2F:3A:D8:7D:01:DB:CD:75:64:89:0B:E7
X509v3 Authority Key Identifier:
keyid:B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cb:bc:b2:95:f2:7c:70:88:ad:18:56:2f:55:2d:b6:a6:da:
31:57:65:0c:b4:fa:d7:15:96:5d:3c:40:91:86:9d:82:81:59:
73:36:d7:1c:d5:d4:fd:5b:14:bf:f5:51:eb:25:68:95:62:5c:
ac:2c:39:1c:6e:2f:54:70:a6:86:a9:c8:bb:64:b4:ab:6d:12:
a6:8d:ce:87:20:ac:71:36:18:19:8c:96:0b:95:c4:03:c8:a4:
41:fd:45:d2:b4:9e:46:e7:b5:12:02:6e:d9:0b:c0:33:a0:af:
89:f9:9a:e6:e9:48:fa:e3:78:22:98:83:c0:fa:64:29:25:3f:
10:20:e3:c4:83:58:43:f6:95:be:14:ff:8d:c2:36:d9:bc:f6:
e2:da:2c:63:98:fc:bd:1f:1e:d8:e0:e3:7f:83:a3:a5:6d:f7:
c5:d2:32:b0:e3:ba:94:7f:20:61:aa:1e:2e:a0:30:61:54:f3:
f9:d6:bd:49:23:50:5f:43:a6:93:1c:b6:2d:97:49:e0:41:19:
dc:6b:ab:1f:28:36:d7:4b:59:83:2f:60:f2:22:f1:e6:bb:84:
cc:a9:55:10:22:f0:3c:34:2a:f3:77:3b:d0:8c:b6:50:95:d2:
fa:68:c0:e8:b5:56:a9:7c:5e:d6:6d:37:25:9f:fd:77:70:47:
d7:51:c1:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4zrNCtZaiFzPU+OdKiFYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ZGM5MzZhN2Y2YmE1MDc4MjI0ZjgwMTczNmZkZWIwZGFl
OGE5ZmIwHhcNMjUxMTA0MjIwMTAwWhcNMjUxMTA1MjIwMTAwWjAzMTEwLwYDVQQD
EyhkNmE1MGNhZDI0YTI5OGIzMmYzYWQ4N2QwMWRiY2Q3NTY0ODkwYmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph9CoQsOHV+lmOVo5FacDn+cdJFc
T0b0BFpa9jOsjXUwAXSKULrFsTXmjYcM2XEaEfHoA19gUatKKLpCbzPY/kO9A8u8
UVFjL2IDNW8HwoGwfeSJ19hVpjkShIt7wcj0QdwXdFfUpTcKRDCbe2WVaUGoBGdu
tDiop14RWqwjZB6z1qY4nqZR2n6ry614DgJlhePLghDqBAKyDXWoxhAGb/I0LMCy
Hj2es6LWXn/xrX9L9TdM/acG+QcDCtApkQD6DOCrxVlUZN1bdvyjP0i8uHRhzDOx
i3VZmyVzRr7pbIaygcJ9/1TYx7U3gVtgbuRfxJ1k/K6gyE7ENase/qlbSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNalDK0kopizLzrYfQHbzXVkiQvnMB8GA1UdIwQY
MBaAFLfck2p/a6UHgiT4AXNv3rDa6Kn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YjE2MmMtNGUzNS00MDYxLTgxYmUt
NzlkNDI4ODJjOGMwLzEvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84YjE2MmMtNGUzNS00MDYxLTgxYmUtNzlkNDI4ODJjOGMw
LzEvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn8u8spXy
fHCIrRhWL1UttqbaMVdlDLT61xWWXTxAkYadgoFZczbXHNXU/VsUv/VR6yVolWJc
rCw5HG4vVHCmhqnIu2S0q20Spo3OhyCscTYYGYyWC5XEA8ikQf1F0rSeRue1EgJu
2QvAM6Cvifma5ulI+uN4IpiDwPpkKSU/ECDjxINYQ/aVvhT/jcI22bz24tosY5j8
vR8e2ODjf4OjpW33xdIysOO6lH8gYaoeLqAwYVTz+da9SSNQX0Omkxy2LZdJ4EEZ
3GurHyg210tZgy9g8iLx5ruEzKlVECLwPDQq83c70Iy2UJXS+mjA6LVWqXxe1m03
JZ/9d3BH11HBnA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:25 2025 by rpki-client