Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
File: To25ZDiURsq8r3lBzRmDQsIzbdA.mft (raw, json)
Hash identifier: mNQHdZeKdOUwi/YI0K7YDPpEUxAD23Y3AeTU30b9Zuw=
Subject key identifier: 83:76:BC:8A:D9:C5:32:73:6B:95:E2:FB:C6:10:D3:6B:4B:DF:B6:E6
Authority key identifier: 4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
Certificate issuer: /CN=4e8db964389446cabcaf7941cd198342c2336dd0
Certificate serial: 019A5007433A105C81E974C6DB758BAD9E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
Manifest number: 08BF
Signing time: Tue 04 Nov 2025 18:00:44 +0000
Manifest this update: Tue 04 Nov 2025 18:00:44 +0000
Manifest next update: Wed 05 Nov 2025 18:00:44 +0000
Files and hashes: 1: To25ZDiURsq8r3lBzRmDQsIzbdA.crl (hash: imnDnxE8wEqDTu+/D+IqDzrv1n6yGu0iAbcDdDNiAAg=)
2: Z5QHoKQNr7K3ZZ1_pXiHs3_16g8.roa (hash: /CZOibzm07xlRo0dBVlbyqc4APuq7TkYKFvaBHtU91A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:43:3a:10:5c:81:e9:74:c6:db:75:8b:ad:9e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8db964389446cabcaf7941cd198342c2336dd0
Validity
Not Before: Nov 4 18:00:44 2025 GMT
Not After : Nov 5 18:00:44 2025 GMT
Subject: CN=8376bc8ad9c532736b95e2fbc610d36b4bdfb6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:c5:5a:53:03:b9:0c:74:41:0b:2a:3e:61:
08:4c:8d:9e:b0:81:9e:50:08:d7:1c:36:5e:03:e5:
f1:43:3f:52:64:4a:dd:72:7c:7d:25:76:de:fd:e9:
6b:74:cc:df:95:f9:9c:63:22:5f:1c:cf:fb:93:af:
1d:18:df:ec:5c:32:7b:87:77:65:a2:26:e0:3f:39:
b3:76:11:d0:2b:cc:11:46:b6:48:22:49:67:bc:e4:
98:86:77:64:9f:7d:85:e3:5f:47:7b:00:d5:8c:77:
ca:de:a7:bd:21:85:4d:de:7a:9a:4c:f2:55:e3:d5:
95:fd:db:ec:3e:f5:47:fd:56:fa:cb:5e:dc:8d:98:
ed:e4:e2:03:1a:09:c2:53:61:bf:56:1c:3e:58:89:
48:67:51:fb:fc:3f:fb:21:58:4e:a5:6d:b4:e8:55:
c8:ef:1a:5c:98:44:55:18:4e:38:c8:c3:3a:25:1c:
99:ae:cc:98:78:34:83:81:64:b8:5c:94:dd:d9:27:
eb:91:7d:a6:e1:df:f1:cb:4d:ff:c2:4c:e1:a7:39:
87:d0:e3:94:86:64:35:47:e7:0b:68:56:7d:91:07:
fe:25:c2:e3:39:e5:1b:7c:0b:9a:1b:27:e9:f1:d5:
64:19:65:73:50:25:18:5b:38:f3:b0:08:e1:57:76:
24:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:76:BC:8A:D9:C5:32:73:6B:95:E2:FB:C6:10:D3:6B:4B:DF:B6:E6
X509v3 Authority Key Identifier:
keyid:4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b8:66:f9:01:31:27:b4:7b:70:46:bd:f2:24:8d:62:dc:4a:
06:ae:3c:eb:7d:24:8a:e7:93:65:31:79:c3:89:7f:db:6f:d4:
02:43:9d:1f:82:98:7e:36:dd:5e:34:6a:68:43:bc:5f:eb:8a:
66:9c:15:5b:27:0d:f6:a3:35:9b:6d:2f:59:27:b9:5f:9a:02:
8f:0c:35:77:36:e8:d3:c2:91:20:5a:4c:0e:38:97:64:dd:a9:
e0:a4:8d:bb:f7:60:42:b6:62:d0:17:63:16:a1:ef:8d:9e:e8:
ce:70:35:c5:67:a6:ec:7a:ca:b9:32:f7:24:5c:32:2f:52:b3:
2c:c7:5b:a6:b7:47:38:84:ff:88:2c:e4:8c:fb:0e:e5:d2:ce:
58:2e:be:b7:9f:55:bd:0d:d9:7e:20:b3:fd:7d:48:6f:e0:d4:
08:d3:c0:01:b8:96:42:de:f2:a5:56:61:ee:aa:c2:64:47:b0:
68:b6:c6:58:53:b3:18:b3:01:5f:f2:38:af:6c:85:9e:6d:f1:
e8:28:23:77:33:5a:ae:17:fe:98:8e:99:8a:28:ea:47:ea:6a:
f3:00:c3:9c:46:50:8b:34:ea:d7:da:04:fb:3c:df:d7:a5:01:
da:e7:96:78:c0:31:f6:15:66:2e:8a:ea:ac:5d:32:ab:93:80:
68:8d:f6:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB0M6EFyB6XTG23WLrZ5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlOGRiOTY0Mzg5NDQ2Y2FiY2FmNzk0MWNkMTk4MzQyYzIz
MzZkZDAwHhcNMjUxMTA0MTgwMDQ0WhcNMjUxMTA1MTgwMDQ0WjAzMTEwLwYDVQQD
Eyg4Mzc2YmM4YWQ5YzUzMjczNmI5NWUyZmJjNjEwZDM2YjRiZGZiNmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUPFWlMDuQx0QQsqPmEITI2esIGe
UAjXHDZeA+XxQz9SZErdcnx9JXbe/elrdMzflfmcYyJfHM/7k68dGN/sXDJ7h3dl
oibgPzmzdhHQK8wRRrZIIklnvOSYhndkn32F419HewDVjHfK3qe9IYVN3nqaTPJV
49WV/dvsPvVH/Vb6y17cjZjt5OIDGgnCU2G/Vhw+WIlIZ1H7/D/7IVhOpW206FXI
7xpcmERVGE44yMM6JRyZrsyYeDSDgWS4XJTd2SfrkX2m4d/xy03/wkzhpzmH0OOU
hmQ1R+cLaFZ9kQf+JcLjOeUbfAuaGyfp8dVkGWVzUCUYWzjzsAjhV3Yk6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIN2vIrZxTJza5Xi+8YQ02tL37bmMB8GA1UdIwQY
MBaAFE6NuWQ4lEbKvK95Qc0Zg0LCM23QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG8yNVpEaVVSc3E4cjNsQnpSbURRc0l6YmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iMzk2MWMtM2Y2OC00NWMxLWEwNGUt
OTU0NjliZjA5MzQwLzEvVG8yNVpEaVVSc3E4cjNsQnpSbURRc0l6YmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9iMzk2MWMtM2Y2OC00NWMxLWEwNGUtOTU0NjliZjA5MzQw
LzEvVG8yNVpEaVVSc3E4cjNsQnpSbURRc0l6YmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbhm+QEx
J7R7cEa98iSNYtxKBq48630kiueTZTF5w4l/22/UAkOdH4KYfjbdXjRqaEO8X+uK
ZpwVWycN9qM1m20vWSe5X5oCjww1dzbo08KRIFpMDjiXZN2p4KSNu/dgQrZi0Bdj
FqHvjZ7oznA1xWem7HrKuTL3JFwyL1KzLMdbprdHOIT/iCzkjPsO5dLOWC6+t59V
vQ3ZfiCz/X1Ib+DUCNPAAbiWQt7ypVZh7qrCZEewaLbGWFOzGLMBX/I4r2yFnm3x
6CgjdzNarhf+mI6ZiijqR+pq8wDDnEZQizTq19oE+zzf16UB2ueWeMAx9hVmLorq
rF0yq5OAaI32kA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:14 2025 by rpki-client