Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
File: tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft (raw, json)
Hash identifier: GwT0LWOZjnShSjGArqtjboI1rTlwHq1mwm6RN7CYl/4=
Subject key identifier: F9:EE:F2:FC:4F:4F:1C:CF:52:5E:C8:03:59:73:28:6F:2D:65:B7:9C
Authority key identifier: B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64
Certificate issuer: /CN=b473167913af73e4f6374170c4f945f8b0dd7d64
Certificate serial: 019A4E18919970913C021698D215E98A383A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
Manifest number: 0D71
Signing time: Tue 04 Nov 2025 09:00:24 +0000
Manifest this update: Tue 04 Nov 2025 09:00:24 +0000
Manifest next update: Wed 05 Nov 2025 09:00:24 +0000
Files and hashes: 1: J0ZgfR5U6lkaUqXFqkaevK5zE7Y.roa (hash: /1drMWi8WHeYZMzayKCKRAt2zHYV3mIjXjepj/lhD8k=)
2: tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl (hash: BQHN35NO0QrHvfJPAeAWvbZG7iU2OYB2Fi0uCjoEW10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:91:99:70:91:3c:02:16:98:d2:15:e9:8a:38:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b473167913af73e4f6374170c4f945f8b0dd7d64
Validity
Not Before: Nov 4 09:00:24 2025 GMT
Not After : Nov 5 09:00:24 2025 GMT
Subject: CN=f9eef2fc4f4f1ccf525ec8035973286f2d65b79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:66:68:22:37:a9:ff:71:d1:dd:ba:d0:c6:
4c:3c:40:8c:29:ee:3a:b7:3f:89:71:71:05:82:da:
c9:e9:b2:a2:4f:1a:bd:91:15:11:ba:31:d3:e1:a9:
1f:74:75:01:4b:80:8e:f6:37:cd:ee:93:19:3f:00:
c6:4d:55:9a:1f:cc:22:36:c8:67:f5:47:84:75:ce:
59:a1:0c:c5:71:ad:aa:84:09:1f:31:4d:58:34:13:
01:30:b5:54:f2:18:22:4f:8d:57:2e:fd:ab:66:1a:
03:87:67:15:c6:1b:d0:a2:fd:12:c6:de:7f:f1:43:
14:86:d1:86:cf:a3:cc:b0:e7:9a:03:13:14:bb:d3:
4c:94:0e:19:ba:7e:8b:34:65:fe:94:32:13:e6:5c:
ac:ec:fe:8f:96:27:6c:84:de:fb:05:50:a8:c4:0b:
a6:94:bf:94:08:34:07:92:b2:37:84:96:62:fa:20:
75:92:3b:e8:21:7c:b1:e9:60:b0:0e:a5:83:61:c4:
22:f4:79:d9:b6:6b:83:f2:8b:59:e4:f3:ec:a7:c6:
98:91:22:ed:ca:e2:b4:11:7c:66:52:26:0b:ca:5e:
40:98:39:6a:4d:0f:97:ab:9c:b0:d9:52:75:2a:79:
2d:74:24:4c:91:4d:13:dd:92:f5:1b:ae:ad:50:e6:
97:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EE:F2:FC:4F:4F:1C:CF:52:5E:C8:03:59:73:28:6F:2D:65:B7:9C
X509v3 Authority Key Identifier:
keyid:B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:01:c4:df:e5:32:3a:b5:de:96:e6:67:1e:45:2f:1a:64:b9:
b3:06:19:c3:a5:2a:4b:40:51:1a:05:97:9d:2e:1e:1e:bd:8c:
9d:40:86:b1:b8:8b:8e:2e:2c:fd:4d:a1:21:40:be:32:3c:19:
27:18:14:94:5c:ce:5a:50:2d:e7:9d:ad:6a:0d:d1:f5:6c:e8:
5d:63:fc:56:50:04:e8:d9:25:5d:cb:5d:32:9e:74:16:1c:e2:
32:e1:7b:be:57:6d:3d:05:d0:4f:5a:90:39:85:5b:31:5c:f3:
7d:14:7e:d7:8c:50:1c:f0:3b:bd:b7:50:2f:66:c7:71:d5:f8:
d6:a6:c1:62:5a:7a:40:bb:fa:d7:b9:ed:aa:2d:e4:7a:1c:82:
aa:f2:f8:71:f3:72:e9:36:ea:19:77:56:ba:70:e7:4c:9d:df:
52:00:05:3b:f7:da:7d:37:a7:d6:33:a8:76:09:f8:99:17:4c:
4f:f2:16:bb:96:c6:2b:4c:c5:b2:71:65:d8:9c:46:a0:58:be:
33:34:5e:34:be:04:e9:fc:97:88:40:b8:17:e8:e5:5e:39:04:
29:61:26:38:dd:8b:d0:29:13:71:bd:4a:df:b3:c4:08:61:09:
98:13:27:d1:00:db:2f:df:5f:3a:05:6e:fb:37:cb:fa:0b:ef:
d6:e5:1c:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGJGZcJE8AhaY0hXpijg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NzMxNjc5MTNhZjczZTRmNjM3NDE3MGM0Zjk0NWY4YjBk
ZDdkNjQwHhcNMjUxMTA0MDkwMDI0WhcNMjUxMTA1MDkwMDI0WjAzMTEwLwYDVQQD
EyhmOWVlZjJmYzRmNGYxY2NmNTI1ZWM4MDM1OTczMjg2ZjJkNjViNzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+pmaCI3qf9x0d260MZMPECMKe46
tz+JcXEFgtrJ6bKiTxq9kRURujHT4akfdHUBS4CO9jfN7pMZPwDGTVWaH8wiNshn
9UeEdc5ZoQzFca2qhAkfMU1YNBMBMLVU8hgiT41XLv2rZhoDh2cVxhvQov0Sxt5/
8UMUhtGGz6PMsOeaAxMUu9NMlA4Zun6LNGX+lDIT5lys7P6PlidshN77BVCoxAum
lL+UCDQHkrI3hJZi+iB1kjvoIXyx6WCwDqWDYcQi9HnZtmuD8otZ5PPsp8aYkSLt
yuK0EXxmUiYLyl5AmDlqTQ+Xq5yw2VJ1KnktdCRMkU0T3ZL1G66tUOaX2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnu8vxPTxzPUl7IA1lzKG8tZbecMB8GA1UdIwQY
MBaAFLRzFnkTr3Pk9jdBcMT5Rfiw3X1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEhNV2VST3ZjLVQyTjBGd3hQbEYtTERkZldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lNTZkNDEtNWJiOC00YTkxLWE0ZjAt
Zjg2ZGNhYWQ4YzQ5LzEvdEhNV2VST3ZjLVQyTjBGd3hQbEYtTERkZldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9lNTZkNDEtNWJiOC00YTkxLWE0ZjAtZjg2ZGNhYWQ4YzQ5
LzEvdEhNV2VST3ZjLVQyTjBGd3hQbEYtTERkZldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAHE3+Uy
OrXeluZnHkUvGmS5swYZw6UqS0BRGgWXnS4eHr2MnUCGsbiLji4s/U2hIUC+MjwZ
JxgUlFzOWlAt552tag3R9WzoXWP8VlAE6NklXctdMp50FhziMuF7vldtPQXQT1qQ
OYVbMVzzfRR+14xQHPA7vbdQL2bHcdX41qbBYlp6QLv617ntqi3kehyCqvL4cfNy
6TbqGXdWunDnTJ3fUgAFO/fafTen1jOodgn4mRdMT/IWu5bGK0zFsnFl2JxGoFi+
MzReNL4E6fyXiEC4F+jlXjkEKWEmON2L0CkTcb1K37PECGEJmBMn0QDbL99fOgVu
+zfL+gvv1uUcbQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:36 2025 by rpki-client