Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
File: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft (raw, json)
Hash identifier: 7EJT12edXdM/OirdzrhFlHm7ufxbTmbOYWIalrr9tzs=
Subject key identifier: 17:1C:70:99:EE:D0:19:09:78:1B:7A:EF:43:00:59:8C:B8:9B:D0:ED
Authority key identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
Certificate issuer: /CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Certificate serial: 019A51BE691971D83CDFA37F65116224DB31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
Manifest number: 0DF4
Signing time: Wed 05 Nov 2025 02:00:24 +0000
Manifest this update: Wed 05 Nov 2025 02:00:24 +0000
Manifest next update: Thu 06 Nov 2025 02:00:24 +0000
Files and hashes: 1: 4f1jI7-qAw-Fm-OtnESqUBoebm0.roa (hash: Yj15262IImuG/zvO4RGd+KynWz9BG4CJpl9H3lrssA0=)
2: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl (hash: vJ/qk5ehNyEVAnN6PzzTQBdIl6Zktafak++deAUFOiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:69:19:71:d8:3c:df:a3:7f:65:11:62:24:db:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Validity
Not Before: Nov 5 02:00:24 2025 GMT
Not After : Nov 6 02:00:24 2025 GMT
Subject: CN=171c7099eed01909781b7aef4300598cb89bd0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:ea:e0:74:f7:de:62:5f:60:7f:17:26:30:
c9:49:7d:22:e1:06:11:8e:4b:14:54:7d:79:f1:43:
01:f8:50:f3:a2:45:ee:be:32:ba:07:cf:f1:ae:f9:
9d:c0:ee:40:58:14:3c:07:41:2f:9e:7a:d6:79:4e:
22:4f:cb:0b:b6:56:b4:8f:2a:69:6d:a6:ad:10:c7:
c3:93:cc:45:10:27:7d:d6:55:44:01:d2:56:ac:65:
34:ea:27:43:98:f1:29:ea:17:bc:59:e5:71:e9:00:
55:4f:f1:86:cd:30:08:97:d3:72:88:32:73:55:f3:
c6:50:d5:78:31:0c:e8:bc:d7:c0:85:fe:48:7f:ed:
34:3c:6c:d1:dc:62:08:b2:db:60:94:df:98:d1:7b:
3d:6d:dc:d7:87:3c:8e:2f:27:23:3d:a5:e6:43:f8:
b8:b2:88:f2:ee:fb:26:d2:fb:99:a2:ec:fb:37:b3:
1d:b7:2c:89:3a:6d:ee:46:4b:11:8c:88:cd:10:5f:
9e:52:91:be:ea:31:89:ff:89:e3:86:0d:08:32:ae:
85:f9:5a:e6:f5:ed:03:95:f5:dc:16:a2:cd:83:d1:
92:96:9f:42:ad:4e:3b:a4:69:14:e0:63:f4:08:07:
46:1c:ab:3b:46:2f:7c:c9:8d:89:c5:db:92:88:48:
8e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1C:70:99:EE:D0:19:09:78:1B:7A:EF:43:00:59:8C:B8:9B:D0:ED
X509v3 Authority Key Identifier:
keyid:4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c0:35:ec:f3:d0:30:19:61:f4:85:47:43:40:93:08:8e:c9:
c2:8d:6b:34:0a:9b:b5:16:3c:67:6b:d0:80:85:39:f3:58:77:
1e:e8:50:1a:ce:e8:d4:ef:48:ab:d8:96:cd:48:32:88:7c:14:
bd:77:e0:22:c3:90:8e:73:0a:b7:7a:4b:68:49:5f:3b:cc:1c:
32:2d:4f:88:80:11:10:4c:91:c0:ea:02:82:7d:01:ea:71:8c:
31:5f:56:d6:68:28:52:43:b1:d2:4f:39:c6:6a:7a:e9:43:f7:
70:30:73:ba:f9:83:be:f9:66:b1:5c:c8:56:ee:14:34:07:72:
ea:98:bf:95:f9:63:06:ff:e2:35:a3:f8:76:66:6e:27:45:70:
f9:4e:a3:8f:9a:7c:ac:d4:b6:d5:da:37:c2:aa:75:90:e6:84:
91:53:6a:72:0b:2c:b9:85:8a:cf:c8:27:16:37:74:31:a8:74:
4a:4e:15:b0:2c:1c:75:89:97:ec:0d:4e:9a:6c:19:6c:08:62:
95:bf:2a:c1:88:5b:b2:f0:7b:d2:20:7d:e0:70:d2:dc:ab:88:
24:43:ef:67:c5:8c:5f:d3:ef:09:b9:6c:ff:c6:01:c2:f9:ca:
c0:d2:e5:d2:16:56:c0:e9:8b:54:0c:24:f4:4f:e8:f6:0c:b0:
f6:5c:7b:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvmkZcdg836N/ZRFiJNsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYmUzMWI2YmVkYzUxZjJhYTJlYzBhNjQ1M2YyZTQzNWU4
MDhmYjUwHhcNMjUxMTA1MDIwMDI0WhcNMjUxMTA2MDIwMDI0WjAzMTEwLwYDVQQD
EygxNzFjNzA5OWVlZDAxOTA5NzgxYjdhZWY0MzAwNTk4Y2I4OWJkMGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo/q4HT33mJfYH8XJjDJSX0i4QYR
jksUVH158UMB+FDzokXuvjK6B8/xrvmdwO5AWBQ8B0EvnnrWeU4iT8sLtla0jypp
baatEMfDk8xFECd91lVEAdJWrGU06idDmPEp6he8WeVx6QBVT/GGzTAIl9NyiDJz
VfPGUNV4MQzovNfAhf5If+00PGzR3GIIsttglN+Y0Xs9bdzXhzyOLycjPaXmQ/i4
sojy7vsm0vuZouz7N7MdtyyJOm3uRksRjIjNEF+eUpG+6jGJ/4njhg0IMq6F+Vrm
9e0DlfXcFqLNg9GSlp9CrU47pGkU4GP0CAdGHKs7Ri98yY2JxduSiEiOrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcccJnu0BkJeBt670MAWYy4m9DtMB8GA1UdIwQY
MBaAFE2+Mba+3FHyqi7ApkU/LkNegI+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAt
ZmJkNDZkOWNhMzcyLzEvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAtZmJkNDZkOWNhMzcy
LzEvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMA17PPQ
MBlh9IVHQ0CTCI7Jwo1rNAqbtRY8Z2vQgIU581h3HuhQGs7o1O9Iq9iWzUgyiHwU
vXfgIsOQjnMKt3pLaElfO8wcMi1PiIAREEyRwOoCgn0B6nGMMV9W1mgoUkOx0k85
xmp66UP3cDBzuvmDvvlmsVzIVu4UNAdy6pi/lfljBv/iNaP4dmZuJ0Vw+U6jj5p8
rNS21do3wqp1kOaEkVNqcgssuYWKz8gnFjd0Mah0Sk4VsCwcdYmX7A1OmmwZbAhi
lb8qwYhbsvB70iB94HDS3KuIJEPvZ8WMX9PvCbls/8YBwvnKwNLl0hZWwOmLVAwk
9E/o9gyw9lx7fA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:31:02 2025 by rpki-client