Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier: CCTfiz0lCRPX988FvwSqdQoIy8WAc4aoP3fxRbj3xMk=
Subject key identifier: 0A:F3:15:C4:BB:A6:59:FF:07:39:4E:0A:89:DE:16:5D:8C:40:44:83
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 019A4DAACFE408CAAD21F8841221285114AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number: 0735
Signing time: Tue 04 Nov 2025 07:00:31 +0000
Manifest this update: Tue 04 Nov 2025 07:00:31 +0000
Manifest next update: Wed 05 Nov 2025 07:00:31 +0000
Files and hashes: 1: CvcmVd2qiQMCtgnMEuQp7Q5S4Vg.roa (hash: 6oEqjna8oaHJiSK9+x9VxezwWYrKn62GKKSEaLSxdDU=)
2: UKY-oSMIFmmicltNFFzSJHvvmLM.roa (hash: cA262Na30QfQdhfhBPxJOrAeDIB1dyAnD2XIGiuSUOI=)
3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: 0QhedSIEdI/KAIeC25Emi2ea/cA9DR2mfsnRxHqECQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:cf:e4:08:ca:ad:21:f8:84:12:21:28:51:14:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Nov 4 07:00:31 2025 GMT
Not After : Nov 5 07:00:31 2025 GMT
Subject: CN=0af315c4bba659ff07394e0a89de165d8c404483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:96:70:0a:3c:d3:43:c7:64:e6:75:e0:79:d5:
7c:58:e6:5b:1c:37:60:bb:a4:37:9d:8c:ac:b3:39:
e2:3a:01:87:15:03:90:c8:45:15:9e:ea:4e:28:ec:
0b:42:3a:84:cb:e8:5b:cc:b4:28:31:b4:0f:16:a2:
15:44:14:a0:64:15:cf:dd:86:76:7b:7c:5e:a4:12:
fd:d1:fc:9d:46:6f:ed:04:ac:51:4f:c8:7a:46:e2:
c7:c3:22:16:ea:53:be:10:bc:54:4d:6c:8e:10:84:
08:9a:29:91:a5:e1:68:f0:94:8a:53:6e:df:bf:10:
25:b1:c9:3a:28:b4:c7:a6:06:61:5d:a2:7e:3a:ed:
7e:f6:b6:8e:e0:e7:14:08:1e:8f:7c:8e:6a:93:d5:
4c:57:d9:3b:46:37:c8:79:55:eb:72:0f:fa:8f:a2:
fe:58:cf:b6:fb:78:52:f4:50:51:7a:69:10:39:4b:
42:7d:b6:21:33:59:6a:c3:33:40:aa:cb:21:27:68:
43:91:94:8c:ce:e2:98:e6:76:a3:04:9b:26:dc:a0:
56:0a:1a:4b:a7:d6:03:6a:3a:ad:75:83:73:49:47:
29:cc:a4:7e:83:0d:03:9f:b2:12:a9:21:6a:de:d7:
48:35:09:ab:fd:72:44:70:34:ac:9a:9d:9f:6d:f0:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F3:15:C4:BB:A6:59:FF:07:39:4E:0A:89:DE:16:5D:8C:40:44:83
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:40:5e:b4:e7:32:4f:14:1a:84:00:6d:e3:eb:02:e4:60:e6:
98:b7:59:a0:8c:4f:db:76:87:cb:4b:56:8d:f2:2d:53:57:33:
02:1b:ba:4b:18:4b:0b:5f:ff:a8:29:13:67:ee:3f:49:02:e9:
f5:57:ba:83:bd:48:c6:a4:fc:64:08:88:64:2a:67:5f:2d:f8:
4a:e8:96:cc:2a:ab:09:3e:a7:6e:c7:16:da:47:5a:78:42:d1:
7c:40:15:eb:6f:bb:cb:c3:ab:58:f2:37:fe:2e:e7:b9:30:1c:
bf:fd:04:90:f0:46:b1:1d:08:27:cf:18:0b:77:4b:df:12:c9:
60:f3:69:40:13:d5:bf:28:3a:ce:87:21:4e:6a:5e:99:3e:10:
15:ea:fc:2c:35:dc:23:aa:b3:ee:71:72:43:0e:d5:ae:14:48:
23:bb:a5:c6:bf:dd:c8:7c:49:7e:5d:80:3d:3c:3c:d6:e2:d0:
ca:09:94:a5:40:3f:a8:f7:17:29:32:04:57:8f:d8:58:df:fb:
7f:50:75:96:af:87:9f:cc:79:53:a9:cf:92:d9:68:9a:a6:bb:
fd:07:0c:a7:b2:f3:d1:7f:26:d8:8f:03:7e:fb:56:b6:1f:08:
d0:52:5a:c6:e9:49:8c:5a:a2:ac:f4:88:c4:1d:38:eb:e6:56:
24:df:1d:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqs/kCMqtIfiEEiEoURSvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OThjOTdiMTRjMzc0YTUyODMzZGI2YTQwMDdiNTRiNDY2
MmM1YTkwHhcNMjUxMTA0MDcwMDMxWhcNMjUxMTA1MDcwMDMxWjAzMTEwLwYDVQQD
EygwYWYzMTVjNGJiYTY1OWZmMDczOTRlMGE4OWRlMTY1ZDhjNDA0NDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pZwCjzTQ8dk5nXgedV8WOZbHDdg
u6Q3nYysszniOgGHFQOQyEUVnupOKOwLQjqEy+hbzLQoMbQPFqIVRBSgZBXP3YZ2
e3xepBL90fydRm/tBKxRT8h6RuLHwyIW6lO+ELxUTWyOEIQImimRpeFo8JSKU27f
vxAlsck6KLTHpgZhXaJ+Ou1+9raO4OcUCB6PfI5qk9VMV9k7RjfIeVXrcg/6j6L+
WM+2+3hS9FBRemkQOUtCfbYhM1lqwzNAqsshJ2hDkZSMzuKY5najBJsm3KBWChpL
p9YDajqtdYNzSUcpzKR+gw0Dn7ISqSFq3tdINQmr/XJEcDSsmp2fbfD2VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArzFcS7pln/BzlOConeFl2MQESDMB8GA1UdIwQY
MBaAFLSYyXsUw3SlKDPbakAHtUtGYsWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzct
ODY1NDI2NjQ1N2M2LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzctODY1NDI2NjQ1N2M2
LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0BetOcy
TxQahABt4+sC5GDmmLdZoIxP23aHy0tWjfItU1czAhu6SxhLC1//qCkTZ+4/SQLp
9Ve6g71IxqT8ZAiIZCpnXy34SuiWzCqrCT6nbscW2kdaeELRfEAV62+7y8OrWPI3
/i7nuTAcv/0EkPBGsR0IJ88YC3dL3xLJYPNpQBPVvyg6zochTmpemT4QFer8LDXc
I6qz7nFyQw7VrhRII7ulxr/dyHxJfl2APTw81uLQygmUpUA/qPcXKTIEV4/YWN/7
f1B1lq+Hn8x5U6nPktlomqa7/QcMp7Lz0X8m2I8DfvtWth8I0FJaxulJjFqirPSI
xB046+ZWJN8dzw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:26 2025 by rpki-client