Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File: TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier: oRBMHEGSQc79XVqNijWGyuuX6Z3ndaGRqTBGckCI+s8=
Subject key identifier: 38:5C:A7:1F:51:8C:62:C2:28:98:C1:8C:CB:97:5E:41:97:2E:F5:80
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 019A4F999374BEB2D9395EB44A7912985869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 16:00:55 +0000
Manifest this update: Tue 04 Nov 2025 16:00:55 +0000
Manifest next update: Wed 05 Nov 2025 16:00:55 +0000
Files and hashes: 1: LHdFFtkhND-G29Bb5TNwX3ZX6HI.roa (hash: 5JCuzcczihsYGo60q4ytQ60HO2vUMA1Wb8XrWH6WiqE=)
2: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: xexG4aGdfwWQf+VUi3/Bof8/+TLufOVgea/vbllx5u8=)
3: VYrJyKdSTfJ9aOSPJMCRhItn6O0.roa (hash: EVl6QPoQm24Wnsg0W0HBnWjfCtTCiCv6xfCekdHCwzI=)
4: XGm_swis7gPqLxLCw4_WpqKe8Ac.roa (hash: HuoRGpzlvzmJtj6Rn/56OaSHzb/3wfWOGTlv62srzB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:93:74:be:b2:d9:39:5e:b4:4a:79:12:98:58:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Nov 4 16:00:55 2025 GMT
Not After : Nov 5 16:00:55 2025 GMT
Subject: CN=385ca71f518c62c22898c18ccb975e41972ef580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:a6:ba:29:6f:f3:47:02:86:c0:eb:b2:ad:
81:3c:73:0e:d8:6a:07:9a:7a:f6:80:3b:8a:1a:fe:
e8:6c:2e:2b:46:bd:cd:87:64:25:26:42:13:4d:a9:
fe:89:62:7d:bf:d1:64:68:fd:99:65:1a:99:d8:5c:
29:2b:da:09:3f:b6:b5:71:b0:57:a8:28:06:16:74:
4b:11:b8:af:30:ac:68:c6:9e:50:b8:c4:5a:c8:79:
b8:c7:46:93:80:07:90:ea:a9:6a:96:e1:8a:78:55:
15:c5:eb:1c:3b:c0:f9:84:58:dd:df:c6:6c:41:d3:
f1:89:7b:cb:88:67:3c:f1:fd:74:df:6a:82:86:7d:
db:a7:19:58:f2:e7:69:3e:03:e9:a1:f6:24:59:80:
83:47:a9:44:25:99:8f:3e:a3:2d:8d:ba:a7:a4:bc:
71:ca:d7:7a:ef:6f:5e:b1:1d:1a:9f:86:a8:bf:91:
6e:25:88:b1:cb:49:b2:89:24:ec:71:7d:4d:c7:4b:
f1:6e:c1:e5:cd:e4:82:4e:7f:63:67:6e:1d:a2:1b:
d1:7d:fe:c9:0f:be:49:82:70:3a:44:5d:66:d1:22:
7a:55:55:d2:69:25:23:82:50:cd:5c:52:5d:09:82:
e3:01:9f:f4:ea:ea:c6:9d:e5:b0:60:77:c8:e6:ae:
26:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5C:A7:1F:51:8C:62:C2:28:98:C1:8C:CB:97:5E:41:97:2E:F5:80
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:67:b0:c7:3e:02:e0:c7:67:bb:58:5b:0f:a9:ed:3c:61:9e:
55:22:fe:f2:d3:1f:20:44:ac:68:fe:2d:8d:ba:22:4e:d5:f9:
06:aa:1f:6e:20:9a:ee:8a:08:0a:0c:76:89:45:50:ec:9f:30:
68:36:34:13:68:58:fe:14:8a:d1:ee:b2:8f:d5:5c:a6:2f:2d:
85:18:59:6e:8c:4d:5c:de:c2:0b:ad:98:ed:58:07:a4:75:59:
c9:9c:a0:b1:52:a0:7e:d2:2e:bb:10:f6:af:aa:f8:4b:08:a3:
33:ca:82:dd:13:a5:c6:8f:4a:25:3f:b6:56:23:e5:9f:fa:17:
8f:11:f9:cb:2d:0c:b1:57:7f:16:b1:c4:0c:2c:22:2b:7a:29:
af:e5:01:3e:f3:93:9d:e9:6b:a1:20:a6:e6:82:3a:15:8b:58:
2a:c4:fb:0f:6e:68:94:ba:ce:ea:6a:ec:86:ad:80:a7:a6:a7:
33:23:8e:7e:8e:3b:ce:c2:dc:a1:c6:ba:ee:03:65:2f:11:a5:
80:bc:9c:24:0e:2c:83:cb:70:4e:98:a4:29:28:71:5d:86:56:
b4:d9:ab:2b:6d:a8:a8:72:fa:ab:8a:52:d2:54:69:d0:19:20:
ba:47:41:20:bd:3f:cc:37:bb:69:3c:3e:ee:5d:4b:12:05:22:
6e:5a:29:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmZN0vrLZOV60SnkSmFhpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2M2MDQ5NWIyYTM0ZDg5MjExY2MxYzc5NTI0ZWFiNjFi
YTE2NTYwHhcNMjUxMTA0MTYwMDU1WhcNMjUxMTA1MTYwMDU1WjAzMTEwLwYDVQQD
EygzODVjYTcxZjUxOGM2MmMyMjg5OGMxOGNjYjk3NWU0MTk3MmVmNTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhimuilv80cChsDrsq2BPHMO2GoH
mnr2gDuKGv7obC4rRr3Nh2QlJkITTan+iWJ9v9FkaP2ZZRqZ2FwpK9oJP7a1cbBX
qCgGFnRLEbivMKxoxp5QuMRayHm4x0aTgAeQ6qlqluGKeFUVxescO8D5hFjd38Zs
QdPxiXvLiGc88f1032qChn3bpxlY8udpPgPpofYkWYCDR6lEJZmPPqMtjbqnpLxx
ytd6729esR0an4aov5FuJYixy0myiSTscX1Nx0vxbsHlzeSCTn9jZ24dohvRff7J
D75JgnA6RF1m0SJ6VVXSaSUjglDNXFJdCYLjAZ/06urGneWwYHfI5q4mKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhcpx9RjGLCKJjBjMuXXkGXLvWAMB8GA1UdIwQY
MBaAFEzMYElbKjTYkhHMHHlSTqthuhZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUt
Njk4MDlkOGI5YzIwLzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUtNjk4MDlkOGI5YzIw
LzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2ewxz4C
4Mdnu1hbD6ntPGGeVSL+8tMfIESsaP4tjboiTtX5BqofbiCa7ooICgx2iUVQ7J8w
aDY0E2hY/hSK0e6yj9Vcpi8thRhZboxNXN7CC62Y7VgHpHVZyZygsVKgftIuuxD2
r6r4SwijM8qC3ROlxo9KJT+2ViPln/oXjxH5yy0MsVd/FrHEDCwiK3opr+UBPvOT
nelroSCm5oI6FYtYKsT7D25olLrO6mrshq2Ap6anMyOOfo47zsLcoca67gNlLxGl
gLycJA4sg8twTpikKShxXYZWtNmrK22oqHL6q4pS0lRp0BkgukdBIL0/zDe7aTw+
7l1LEgUiblopDA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:29 2025 by rpki-client