Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
File: TyESy_bcyN00ROTs7ShEVzEPcNI.mft (raw, json)
Hash identifier: riU7wdjreXCCOgq99gtTu41LnA6EMKattRdQmUVeglw=
Subject key identifier: 49:56:0C:63:54:EA:99:6C:C2:F2:F8:73:D4:43:5D:14:6B:AF:0D:B3
Authority key identifier: 4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
Certificate issuer: /CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Certificate serial: 019A4E19032D66B2BE2880FD65A30F037FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
Manifest number: 0C3A
Signing time: Tue 04 Nov 2025 09:00:53 +0000
Manifest this update: Tue 04 Nov 2025 09:00:53 +0000
Manifest next update: Wed 05 Nov 2025 09:00:53 +0000
Files and hashes: 1: TyESy_bcyN00ROTs7ShEVzEPcNI.crl (hash: Sw2N9lI+TktXacvk8GYqVMwaKR1h6LCOz13NYgvBoHM=)
2: zMi5Kc-tpOMXc_ZTzrnudYI3V1w.roa (hash: gNyfXx018kULloOwGFLfmzefXCbqCOiY4gpRitRdbz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:03:2d:66:b2:be:28:80:fd:65:a3:0f:03:7f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Validity
Not Before: Nov 4 09:00:53 2025 GMT
Not After : Nov 5 09:00:53 2025 GMT
Subject: CN=49560c6354ea996cc2f2f873d4435d146baf0db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:78:9d:20:cb:a9:6e:ba:b8:8c:77:d0:1f:
a7:80:1b:e2:8a:94:04:66:25:d4:99:2c:1c:03:6c:
2a:18:c8:b2:fc:88:20:9f:05:16:1e:34:dc:ff:e0:
b9:af:f4:09:81:11:6b:7d:c7:0b:8b:4e:88:17:b3:
a2:ad:29:2d:7f:c4:d3:8c:3d:ad:90:39:57:0f:28:
de:4d:ed:15:40:65:6a:b0:e0:e2:25:f4:a5:94:10:
cd:79:05:c7:d9:a1:94:d0:23:90:e1:63:e5:d6:fe:
be:e9:42:e2:f9:13:52:15:e2:41:92:5d:99:c2:e4:
89:9c:09:76:ca:a2:51:cd:9f:ea:78:ee:26:b3:5f:
ae:8f:2e:5d:9a:0f:c4:e3:1f:a3:39:f5:5c:97:18:
fa:0e:96:0b:95:43:68:3e:09:b7:93:4e:51:9e:21:
5a:38:6e:69:10:25:69:3d:69:76:8d:2c:77:86:fe:
37:bd:c1:93:d1:da:8a:04:6b:79:cb:0b:f0:4a:20:
29:05:00:3d:e8:02:85:a1:1b:fd:98:7c:6b:d1:52:
ef:51:a9:3e:f5:72:19:ed:0b:b4:2c:6d:77:1c:4f:
d5:fb:82:4e:2f:71:84:d2:11:7e:10:1c:3d:bc:74:
a5:45:cc:3f:e2:55:1f:32:ff:9b:ca:15:3b:6d:b8:
31:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:56:0C:63:54:EA:99:6C:C2:F2:F8:73:D4:43:5D:14:6B:AF:0D:B3
X509v3 Authority Key Identifier:
keyid:4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:24:7d:9c:79:05:ee:52:0e:84:8f:37:de:72:85:5b:5c:55:
01:55:70:2a:27:d2:31:9c:05:df:a5:77:c6:e8:7e:71:1f:e4:
14:3b:38:21:82:8d:45:f6:45:33:85:3e:17:71:00:9e:60:de:
03:92:1f:40:95:1d:88:75:47:8f:78:60:5c:eb:56:80:46:67:
e2:d8:e3:df:09:71:96:f1:a2:01:42:fb:6d:9c:ee:48:a2:1a:
c7:9e:1b:71:f0:cf:3e:4c:c0:55:7b:ad:cb:19:d5:6b:1b:58:
cd:7d:b0:1e:1c:c6:45:a6:16:ec:0f:cf:78:af:67:d1:42:a1:
4d:1a:60:a8:71:f3:44:fb:5d:fe:c9:62:d6:cb:e2:ee:62:fd:
27:e8:e3:d4:8c:43:cf:88:5d:a1:9c:43:9f:a5:f3:26:ee:6a:
21:34:a3:e4:f9:f1:ad:44:e4:8f:1f:80:49:58:f9:53:79:98:
29:ae:2b:91:1c:db:98:9d:40:6d:75:a2:6f:c8:c8:1b:63:43:
99:51:61:01:d5:62:30:8f:8c:b4:af:9c:c5:27:8d:e1:44:49:
c9:12:f0:ab:00:02:6f:ec:d8:87:40:21:77:71:75:46:dc:c0:
c5:41:b4:08:31:14:7e:2d:cc:e6:4e:b4:8b:5d:21:7f:7e:ad:
a6:01:45:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGQMtZrK+KID9ZaMPA3+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMjExMmNiZjZkY2M4ZGQzNDQ0ZTRlY2VkMjg0NDU3MzEw
ZjcwZDIwHhcNMjUxMTA0MDkwMDUzWhcNMjUxMTA1MDkwMDUzWjAzMTEwLwYDVQQD
Eyg0OTU2MGM2MzU0ZWE5OTZjYzJmMmY4NzNkNDQzNWQxNDZiYWYwZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ94nSDLqW66uIx30B+ngBviipQE
ZiXUmSwcA2wqGMiy/IggnwUWHjTc/+C5r/QJgRFrfccLi06IF7OirSktf8TTjD2t
kDlXDyjeTe0VQGVqsODiJfSllBDNeQXH2aGU0COQ4WPl1v6+6ULi+RNSFeJBkl2Z
wuSJnAl2yqJRzZ/qeO4ms1+ujy5dmg/E4x+jOfVclxj6DpYLlUNoPgm3k05RniFa
OG5pECVpPWl2jSx3hv43vcGT0dqKBGt5ywvwSiApBQA96AKFoRv9mHxr0VLvUak+
9XIZ7Qu0LG13HE/V+4JOL3GE0hF+EBw9vHSlRcw/4lUfMv+byhU7bbgx5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElWDGNU6plswvL4c9RDXRRrrw2zMB8GA1UdIwQY
MBaAFE8hEsv23MjdNETk7O0oRFcxD3DSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHlFU3lfYmN5TjAwUk9UczdTaEVWekVQY05JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9lMDgwYjYtNGUwOS00MmQ4LWI5MWMt
YjI3OThjMWEwMzI3LzEvVHlFU3lfYmN5TjAwUk9UczdTaEVWekVQY05JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9lMDgwYjYtNGUwOS00MmQ4LWI5MWMtYjI3OThjMWEwMzI3
LzEvVHlFU3lfYmN5TjAwUk9UczdTaEVWekVQY05JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyR9nHkF
7lIOhI833nKFW1xVAVVwKifSMZwF36V3xuh+cR/kFDs4IYKNRfZFM4U+F3EAnmDe
A5IfQJUdiHVHj3hgXOtWgEZn4tjj3wlxlvGiAUL7bZzuSKIax54bcfDPPkzAVXut
yxnVaxtYzX2wHhzGRaYW7A/PeK9n0UKhTRpgqHHzRPtd/sli1svi7mL9J+jj1IxD
z4hdoZxDn6XzJu5qITSj5PnxrUTkjx+ASVj5U3mYKa4rkRzbmJ1AbXWib8jIG2ND
mVFhAdViMI+MtK+cxSeN4URJyRLwqwACb+zYh0Ahd3F1RtzAxUG0CDEUfi3M5k60
i10hf36tpgFFwg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:00 2025 by rpki-client