Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft (raw, json)
Hash identifier: ZljeMWCJ7MT7T2jUAGbIy1XVjrzknfusLlp3hQwBLYA=
Subject key identifier: 49:7D:05:6E:6F:63:92:02:A5:22:F3:DC:AF:F6:EC:B4:1D:C1:83:F6
Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Certificate serial: 019A53E3BE697C7B8D99BEA01E6E1A3D09B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
Manifest number: 01E5
Signing time: Wed 05 Nov 2025 12:00:25 +0000
Manifest this update: Wed 05 Nov 2025 12:00:25 +0000
Manifest next update: Thu 06 Nov 2025 12:00:25 +0000
Files and hashes: 1: 54qil-gtsg-VmWMUKBbSoP89Sh4.roa (hash: +lFuYFZIeWq9AFirWvNO/gLe0U+wLrmb+nny8MFDRhE=)
2: TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl (hash: AUmTmskRVqz3ffZ4i1Qn/VXB1h4adem8NvamghRKroE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:be:69:7c:7b:8d:99:be:a0:1e:6e:1a:3d:09:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Validity
Not Before: Nov 5 12:00:25 2025 GMT
Not After : Nov 6 12:00:25 2025 GMT
Subject: CN=497d056e6f639202a522f3dcaff6ecb41dc183f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:28:87:b6:d0:b5:bd:3c:23:33:02:86:6d:
98:78:b5:d6:2d:10:49:96:72:09:ec:94:ce:33:cb:
0f:1e:a4:2d:fe:e5:4a:b4:43:ca:78:b0:6f:4b:e8:
a3:da:72:75:68:61:5d:d3:35:69:52:b6:37:f9:8d:
0a:7b:3c:b4:07:c9:af:55:3b:cc:b3:8c:8b:2a:1d:
41:46:25:a0:3f:fc:c1:57:9b:92:d3:f4:1c:c9:5b:
b7:1c:45:c3:49:ed:c7:14:75:a8:95:88:ff:c7:3d:
95:6e:c4:d5:a2:c9:69:2a:f5:b9:32:92:b6:34:c8:
b1:bc:be:b8:ad:42:56:e9:94:be:d9:3b:b6:18:68:
56:51:21:50:64:d8:6f:d0:16:74:81:45:de:3f:8a:
4d:fd:7e:d8:63:6d:70:73:21:45:45:7a:fe:c6:09:
25:ba:be:56:dc:0d:17:6a:44:34:43:10:bb:db:08:
08:6b:d7:76:23:dc:6c:e3:b5:64:12:4b:cd:53:58:
21:5b:ee:5a:ef:aa:5f:70:c7:86:f2:53:41:86:0f:
f1:be:8f:02:65:2f:bb:23:86:2e:35:15:14:cb:ea:
7e:12:3e:32:24:9e:ec:8f:59:76:8c:55:e4:6c:c6:
ca:cd:bb:0f:9c:71:8f:7a:f2:e9:2e:01:10:f7:63:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7D:05:6E:6F:63:92:02:A5:22:F3:DC:AF:F6:EC:B4:1D:C1:83:F6
X509v3 Authority Key Identifier:
keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:64:37:9b:74:7e:b5:fc:ab:58:53:fe:ed:f1:4c:e6:db:dd:
d1:59:2d:61:34:6d:39:56:c4:5a:f6:5a:60:ec:a7:5d:c1:6a:
3c:21:1e:35:39:18:e3:c6:ed:4e:12:9f:33:c2:6d:bc:04:cc:
5d:fa:8d:6a:53:b1:80:a9:bb:91:2d:38:31:20:1b:6b:31:ce:
9d:90:6d:29:61:c2:04:2e:ea:05:bf:6e:7e:5f:82:64:5a:31:
79:3f:62:51:6b:b4:22:94:f8:51:12:b7:60:db:5a:99:f2:9a:
be:81:53:a3:f2:c9:59:92:bc:e8:ac:90:ca:7a:d2:6b:9e:80:
8d:4a:8c:e3:6a:f4:0e:ab:c9:4c:2d:c4:b0:f0:bd:dd:c0:a4:
62:bb:9b:0c:fc:32:8b:5f:4d:af:05:e8:55:57:1c:2f:13:d4:
2f:f2:df:a3:1e:d1:3b:53:4b:71:8e:04:31:f9:cf:16:eb:4a:
e8:02:c7:36:24:b5:f7:90:13:a9:49:62:4e:ec:bb:19:a3:a6:
2c:e5:0d:7d:65:3b:bd:4c:84:9e:6d:fb:6f:fc:60:d7:a1:fe:
32:9d:cd:7e:0a:fc:e3:b2:d6:4c:39:56:dc:48:4a:03:32:f3:
cc:46:3d:6d:9f:97:bf:18:b8:a1:c5:89:d0:07:3b:54:31:2b:
cc:5c:d7:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT475pfHuNmb6gHm4aPQm3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzhhMzA2YTM3ZWU4N2JlYmZmNzIzNjU1M2UwZDNjYjY3
MmNkMTcwHhcNMjUxMTA1MTIwMDI1WhcNMjUxMTA2MTIwMDI1WjAzMTEwLwYDVQQD
Eyg0OTdkMDU2ZTZmNjM5MjAyYTUyMmYzZGNhZmY2ZWNiNDFkYzE4M2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfkoh7bQtb08IzMChm2YeLXWLRBJ
lnIJ7JTOM8sPHqQt/uVKtEPKeLBvS+ij2nJ1aGFd0zVpUrY3+Y0Kezy0B8mvVTvM
s4yLKh1BRiWgP/zBV5uS0/QcyVu3HEXDSe3HFHWolYj/xz2VbsTVoslpKvW5MpK2
NMixvL64rUJW6ZS+2Tu2GGhWUSFQZNhv0BZ0gUXeP4pN/X7YY21wcyFFRXr+xgkl
ur5W3A0XakQ0QxC72wgIa9d2I9xs47VkEkvNU1ghW+5a76pfcMeG8lNBhg/xvo8C
ZS+7I4YuNRUUy+p+Ej4yJJ7sj1l2jFXkbMbKzbsPnHGPevLpLgEQ92MviwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEl9BW5vY5ICpSLz3K/27LQdwYP2MB8GA1UdIwQY
MBaAFEw4owajfuh76/9yNlU+DTy2cs0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wOGNkOTMtMDg3Ni00M2ZkLTkyYzAt
Yjg2M2MwYTk4YjJkLzEvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8wOGNkOTMtMDg3Ni00M2ZkLTkyYzAtYjg2M2MwYTk4YjJk
LzEvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWQ3m3R+
tfyrWFP+7fFM5tvd0VktYTRtOVbEWvZaYOynXcFqPCEeNTkY48btThKfM8JtvATM
XfqNalOxgKm7kS04MSAbazHOnZBtKWHCBC7qBb9ufl+CZFoxeT9iUWu0IpT4URK3
YNtamfKavoFTo/LJWZK86KyQynrSa56AjUqM42r0DqvJTC3EsPC93cCkYrubDPwy
i19NrwXoVVccLxPUL/Lfox7RO1NLcY4EMfnPFutK6ALHNiS195ATqUliTuy7GaOm
LOUNfWU7vUyEnm37b/xg16H+Mp3Nfgr847LWTDlW3EhKAzLzzEY9bZ+Xvxi4ocWJ
0Ac7VDErzFzXNw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:06:56 2025 by rpki-client