Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
File: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft (raw, json)
Hash identifier: D5GYyxbXluncxwxDxLCUhnxVG1eGJbTyXSm3O/88mDM=
Subject key identifier: 45:14:74:6F:A6:93:54:04:31:29:86:3B:DD:A1:20:2C:3B:01:A6:67
Authority key identifier: B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
Certificate issuer: /CN=b48184549e12e9934bffb7615bca3d0c25681360
Certificate serial: 019A503E0C6761343901526455B67A6CCAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 19:00:34 +0000
Manifest this update: Tue 04 Nov 2025 19:00:34 +0000
Manifest next update: Wed 05 Nov 2025 19:00:34 +0000
Files and hashes: 1: Pmrx9HZexDjQdROL1xOD1S-BjzQ.roa (hash: aBRM8zJUU2ZF0wAF5h20OpU3VGQ3W++oIRE8v06cZXM=)
2: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl (hash: AUsWS+ICpEZN4xom9mvk8nVwvh5fGCJmo8eKGdv2LLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:0c:67:61:34:39:01:52:64:55:b6:7a:6c:ca:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48184549e12e9934bffb7615bca3d0c25681360
Validity
Not Before: Nov 4 19:00:34 2025 GMT
Not After : Nov 5 19:00:34 2025 GMT
Subject: CN=4514746fa69354043129863bdda1202c3b01a667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:19:53:37:a5:45:51:18:c1:00:a9:62:23:50:
09:0c:51:04:9c:03:8a:23:3a:4e:bb:52:39:9e:9c:
42:10:aa:7f:b1:4d:ce:7f:f5:5e:25:53:e0:2c:fe:
96:c0:07:2a:3e:e1:f1:05:c3:eb:12:80:82:f9:c6:
a5:b8:c1:3b:2b:b0:21:39:a5:b7:d8:0a:7e:ee:04:
b3:78:51:39:6a:4f:a6:4d:ed:7d:7c:0e:c1:60:2c:
d9:71:fb:47:bd:12:59:7a:3e:c4:1a:dd:d0:b6:76:
69:20:06:d7:21:6d:33:f7:11:a6:2e:ba:4a:58:7c:
0a:bc:04:0f:0f:15:f9:9b:69:55:25:6a:cf:ff:39:
69:93:87:e0:a6:de:e5:2c:c1:48:f1:a5:31:b4:ae:
88:89:5a:53:62:9a:09:cb:8e:e8:80:df:bd:13:61:
b5:15:e6:0a:42:b4:2e:de:c5:60:17:23:d8:b0:02:
8d:96:ae:94:fd:95:55:75:31:e8:3a:74:ed:e5:85:
ec:cc:93:27:d6:12:20:6d:f7:42:e2:8a:a0:39:de:
dc:95:5e:c5:b6:b6:fd:7e:4e:ce:45:05:6a:f1:84:
a7:28:c8:2a:7a:e1:79:a9:56:ed:b8:09:eb:13:d3:
5d:fc:f1:64:c0:a1:27:ed:23:22:43:57:6d:21:d1:
0b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:14:74:6F:A6:93:54:04:31:29:86:3B:DD:A1:20:2C:3B:01:A6:67
X509v3 Authority Key Identifier:
keyid:B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f1:44:f4:cd:08:22:1c:e1:94:35:03:df:dd:e9:bb:f7:45:
11:80:34:51:12:83:d0:b1:0b:10:09:28:82:6b:78:f0:60:b2:
cf:b4:5c:0b:18:d9:44:10:2a:05:a2:4a:d3:99:d4:84:87:33:
2a:00:8b:11:04:12:b3:a0:1f:c6:08:58:db:65:e2:d9:ef:f1:
ba:12:c9:9d:01:76:69:1e:2a:7c:63:ed:d6:64:93:4f:d0:0f:
e7:f0:92:ea:7b:0f:74:05:d1:ec:a4:eb:e8:50:90:0c:12:96:
03:20:c1:bc:b8:9a:3c:f0:82:10:ad:ce:83:1d:04:d4:06:99:
e7:01:3e:a7:ee:5e:c0:4d:86:52:cc:4f:04:0d:76:95:55:72:
b3:47:c8:8b:9b:0c:1e:e3:44:ed:af:05:84:a9:e3:30:c3:1e:
18:8b:aa:f1:ec:2d:1d:9a:16:0d:15:c1:77:5a:bc:10:ea:c7:
09:f0:74:ca:9e:a2:ad:93:cd:49:92:72:ac:1b:6f:b2:b6:eb:
14:5b:29:62:19:aa:6e:ff:d8:f4:8a:f5:1d:b3:d0:ef:51:f9:
2d:b5:af:c1:3f:6f:44:af:79:8b:f6:12:b7:e0:09:9d:14:81:
df:7d:80:ae:99:26:2c:d4:4e:7b:66:ba:7f:b9:18:a9:38:1f:
23:be:6f:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPgxnYTQ5AVJkVbZ6bMrxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ODE4NDU0OWUxMmU5OTM0YmZmYjc2MTViY2EzZDBjMjU2
ODEzNjAwHhcNMjUxMTA0MTkwMDM0WhcNMjUxMTA1MTkwMDM0WjAzMTEwLwYDVQQD
Eyg0NTE0NzQ2ZmE2OTM1NDA0MzEyOTg2M2JkZGExMjAyYzNiMDFhNjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBlTN6VFURjBAKliI1AJDFEEnAOK
IzpOu1I5npxCEKp/sU3Of/VeJVPgLP6WwAcqPuHxBcPrEoCC+caluME7K7AhOaW3
2Ap+7gSzeFE5ak+mTe19fA7BYCzZcftHvRJZej7EGt3QtnZpIAbXIW0z9xGmLrpK
WHwKvAQPDxX5m2lVJWrP/zlpk4fgpt7lLMFI8aUxtK6IiVpTYpoJy47ogN+9E2G1
FeYKQrQu3sVgFyPYsAKNlq6U/ZVVdTHoOnTt5YXszJMn1hIgbfdC4oqgOd7clV7F
trb9fk7ORQVq8YSnKMgqeuF5qVbtuAnrE9Nd/PFkwKEn7SMiQ1dtIdELoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUUdG+mk1QEMSmGO92hICw7AaZnMB8GA1UdIwQY
MBaAFLSBhFSeEumTS/+3YVvKPQwlaBNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdElHRVZKNFM2Wk5MXzdkaFc4bzlEQ1ZvRTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mNjcxNzctNzhkNS00Mzg4LWEyMWEt
MjgyNjM2NTZjNmRlLzEvdElHRVZKNFM2Wk5MXzdkaFc4bzlEQ1ZvRTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mNjcxNzctNzhkNS00Mzg4LWEyMWEtMjgyNjM2NTZjNmRl
LzEvdElHRVZKNFM2Wk5MXzdkaFc4bzlEQ1ZvRTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/FE9M0I
IhzhlDUD393pu/dFEYA0URKD0LELEAkogmt48GCyz7RcCxjZRBAqBaJK05nUhIcz
KgCLEQQSs6AfxghY22Xi2e/xuhLJnQF2aR4qfGPt1mSTT9AP5/CS6nsPdAXR7KTr
6FCQDBKWAyDBvLiaPPCCEK3Ogx0E1AaZ5wE+p+5ewE2GUsxPBA12lVVys0fIi5sM
HuNE7a8FhKnjMMMeGIuq8ewtHZoWDRXBd1q8EOrHCfB0yp6irZPNSZJyrBtvsrbr
FFspYhmqbv/Y9Ir1HbPQ71H5LbWvwT9vRK95i/YSt+AJnRSB332ArpkmLNROe2a6
f7kYqTgfI75vyg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:41 2025 by rpki-client