Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
File: T51fuq92qApl4OksAgYeiVsrgRc.mft (raw, json)
Hash identifier: yCtCX1L+XkqvzjhL7oANneX5gLWlmDcH/uXUk2i6w6I=
Subject key identifier: 00:74:85:E8:AA:AB:1E:0E:15:AE:3D:A5:B6:8F:33:72:68:75:52:29
Authority key identifier: 4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
Certificate issuer: /CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Certificate serial: 019A4F2B859E019A2DE3ECFD2923341F9A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 14:00:43 +0000
Manifest this update: Tue 04 Nov 2025 14:00:43 +0000
Manifest next update: Wed 05 Nov 2025 14:00:43 +0000
Files and hashes: 1: T51fuq92qApl4OksAgYeiVsrgRc.crl (hash: etIX0L6wnNqt2YPxywtY5B+MKSsMCOyzPTnVXz/C9nw=)
2: oudSfHdCLiNB6U8UydMcb_Ovg84.roa (hash: LQDm0fv1Tzx1NMtk5XfrPEJuzKPUwQiMUZ87fbukA4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:85:9e:01:9a:2d:e3:ec:fd:29:23:34:1f:9a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Validity
Not Before: Nov 4 14:00:43 2025 GMT
Not After : Nov 5 14:00:43 2025 GMT
Subject: CN=007485e8aaab1e0e15ae3da5b68f337268755229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:af:1a:c5:4d:46:55:cc:3b:9b:60:5c:4b:
91:21:7c:a9:eb:8e:4d:21:8c:67:74:d6:e3:6d:27:
ed:83:a0:9e:f8:e4:4e:1e:00:9e:09:5c:34:10:de:
50:7d:5d:38:c0:a7:6b:26:bc:e0:de:81:af:0f:0b:
f3:b5:d8:31:8a:c0:d2:de:14:86:a8:de:b1:ed:76:
24:99:30:b8:bc:c8:fc:c7:1a:44:8b:15:5e:e3:f2:
58:72:94:42:84:7e:08:22:9f:af:b4:c7:68:62:69:
88:20:19:d3:32:f3:08:c3:93:6e:54:24:ab:32:45:
c1:4e:05:72:a6:81:45:ee:be:8f:74:98:06:7b:a6:
45:8b:59:33:5e:61:9f:af:20:1b:8a:87:22:c2:0d:
88:18:df:63:a0:bc:26:bf:fa:1e:4b:27:bd:3d:b7:
90:e2:15:44:ff:bf:12:72:80:ef:a8:3d:fc:84:67:
fd:53:9a:b6:00:e5:31:6b:84:7f:2a:6a:b2:20:a0:
32:ed:cc:59:d4:26:bd:34:e8:32:24:66:bd:3c:7d:
2c:32:ee:59:7a:a6:23:ec:4f:a9:5f:3f:20:0e:01:
d2:1e:8f:5f:32:c2:43:0b:28:cb:e3:42:d5:5a:45:
f8:e9:7e:26:ad:7c:e1:ca:b6:c6:3e:26:b3:cf:00:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:74:85:E8:AA:AB:1E:0E:15:AE:3D:A5:B6:8F:33:72:68:75:52:29
X509v3 Authority Key Identifier:
keyid:4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:b2:66:a2:f7:65:dc:32:4d:80:be:d8:67:21:a3:f8:1f:ac:
43:6d:0b:2f:4d:1f:81:e9:0b:53:ed:61:b7:5e:98:e9:a6:81:
57:87:8e:d6:0a:1e:57:24:47:5b:57:e0:99:0b:44:cc:7c:1f:
d9:f6:47:9e:3c:10:72:16:7a:40:df:eb:98:37:f1:3f:d9:1b:
ea:a9:e1:75:d0:45:9c:7b:3d:1d:bc:e4:83:3c:44:02:81:5c:
86:e2:45:80:66:37:a5:f9:57:b5:28:0e:35:9b:39:91:3f:3f:
3d:4e:ef:3c:8d:52:86:b8:34:bf:98:7d:14:6b:93:50:07:86:
9d:c6:51:7f:06:ec:34:56:1b:05:34:94:15:be:50:1b:66:a3:
fa:6f:a1:16:af:02:68:53:f2:42:80:e6:79:72:cf:93:1c:cf:
8e:32:5a:5c:c9:3d:b4:81:7a:aa:a8:30:07:75:08:99:f1:82:
a6:26:75:1e:2d:a1:e3:06:ff:46:81:7d:f2:28:09:fe:6e:1f:
c1:78:32:ce:a0:6a:f0:87:ce:61:7a:d1:8b:b0:bb:08:5c:b3:
b7:93:19:31:e0:62:8f:db:4b:80:1a:05:df:c0:a9:48:c9:24:
98:d8:5a:12:57:27:1a:fc:3a:1d:b0:4d:23:20:ae:71:48:1c:
de:35:0a:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK4WeAZot4+z9KSM0H5oXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOWQ1ZmJhYWY3NmE4MGE2NWUwZTkyYzAyMDYxZTg5NWIy
YjgxMTcwHhcNMjUxMTA0MTQwMDQzWhcNMjUxMTA1MTQwMDQzWjAzMTEwLwYDVQQD
EygwMDc0ODVlOGFhYWIxZTBlMTVhZTNkYTViNjhmMzM3MjY4NzU1MjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI+vGsVNRlXMO5tgXEuRIXyp645N
IYxndNbjbSftg6Ce+OROHgCeCVw0EN5QfV04wKdrJrzg3oGvDwvztdgxisDS3hSG
qN6x7XYkmTC4vMj8xxpEixVe4/JYcpRChH4IIp+vtMdoYmmIIBnTMvMIw5NuVCSr
MkXBTgVypoFF7r6PdJgGe6ZFi1kzXmGfryAbiociwg2IGN9joLwmv/oeSye9PbeQ
4hVE/78ScoDvqD38hGf9U5q2AOUxa4R/KmqyIKAy7cxZ1Ca9NOgyJGa9PH0sMu5Z
eqYj7E+pXz8gDgHSHo9fMsJDCyjL40LVWkX46X4mrXzhyrbGPiazzwDQlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAB0heiqqx4OFa49pbaPM3JodVIpMB8GA1UdIwQY
MBaAFE+dX7qvdqgKZeDpLAIGHolbK4EXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDUxZnVxOTJxQXBsNE9rc0FnWWVpVnNyZ1JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jNzA5MjgtY2VkZS00YjYyLTg5YTct
NjBmNmZhOTExMGUyLzEvVDUxZnVxOTJxQXBsNE9rc0FnWWVpVnNyZ1JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jNzA5MjgtY2VkZS00YjYyLTg5YTctNjBmNmZhOTExMGUy
LzEvVDUxZnVxOTJxQXBsNE9rc0FnWWVpVnNyZ1JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAybJmovdl
3DJNgL7YZyGj+B+sQ20LL00fgekLU+1ht16Y6aaBV4eO1goeVyRHW1fgmQtEzHwf
2fZHnjwQchZ6QN/rmDfxP9kb6qnhddBFnHs9HbzkgzxEAoFchuJFgGY3pflXtSgO
NZs5kT8/PU7vPI1Shrg0v5h9FGuTUAeGncZRfwbsNFYbBTSUFb5QG2aj+m+hFq8C
aFPyQoDmeXLPkxzPjjJaXMk9tIF6qqgwB3UImfGCpiZ1Hi2h4wb/RoF98igJ/m4f
wXgyzqBq8IfOYXrRi7C7CFyzt5MZMeBij9tLgBoF38CpSMkkmNhaElcnGvw6HbBN
IyCucUgc3jUK9w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:50 2025 by rpki-client