Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
File: pT2P6iKY_zVCptwIkLEIySIYNjU.mft (raw, json)
Hash identifier: vYdpCyYkwYHyRKhFh3Fe7Br5Mb1cbLmj3alkc413nKk=
Subject key identifier: FA:7A:30:7A:C6:A4:20:69:59:E3:C9:40:A1:1E:46:39:E4:12:43:4D
Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
Certificate issuer: /CN=a53d8fea2298ff3542a6dc0890b108c922183635
Certificate serial: 019A4EF5C3AA1988E879A0CE7BAC37AEEE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
Manifest number: 0F56
Signing time: Tue 04 Nov 2025 13:02:00 +0000
Manifest this update: Tue 04 Nov 2025 13:02:00 +0000
Manifest next update: Wed 05 Nov 2025 13:02:00 +0000
Files and hashes: 1: LIngfuzVyfR9OxY7cIj5Eo9UJhU.roa (hash: I7nX5ROvffTNGyuWZrNpPLtJJE4OFOAqh82VhWKzBDY=)
2: pT2P6iKY_zVCptwIkLEIySIYNjU.crl (hash: hgPwxIi72rAGOs5+aVVVC8UAd5IBbL3P/kvRjHqIpjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c3:aa:19:88:e8:79:a0:ce:7b:ac:37:ae:ee:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635
Validity
Not Before: Nov 4 13:02:00 2025 GMT
Not After : Nov 5 13:02:00 2025 GMT
Subject: CN=fa7a307ac6a4206959e3c940a11e4639e412434d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:2e:be:a8:6c:c3:9e:2e:b6:1c:4c:a2:2b:
8e:97:9c:5e:b6:b8:17:82:3b:bb:7b:c8:f1:7d:61:
c3:1f:52:f7:d2:56:65:47:fb:f8:e8:2d:09:ca:8e:
2d:a7:68:c4:0a:45:6e:a0:d9:e1:64:2e:05:cb:63:
d3:d0:38:04:6a:7f:8b:74:18:28:2f:fd:2b:e1:ee:
c0:4b:f3:5e:b8:59:2c:d0:7e:60:c5:fc:e3:ab:d2:
da:5a:b6:eb:32:81:83:47:f4:a0:84:88:1d:a5:3e:
7e:df:ba:19:a1:d2:38:14:27:07:38:a7:4c:96:7b:
e8:91:17:af:1b:ef:d4:74:09:6c:48:f7:a4:1e:76:
05:dc:2c:b4:28:b2:a6:cf:2a:e2:8f:98:6d:86:ce:
c2:eb:db:5e:df:15:3e:ce:7d:5f:ac:e4:e0:10:64:
2c:29:a3:cd:74:ef:1d:32:ce:30:78:83:52:54:bd:
42:94:a4:8c:8f:6f:d6:5f:70:d9:b5:6a:23:7d:66:
b8:47:e9:3f:11:2e:bd:7f:bf:83:15:bf:02:5d:4b:
5d:8e:64:5c:d2:0b:35:c9:fe:25:a1:00:08:7f:81:
f3:33:84:44:f3:ba:ed:45:c9:46:6b:c8:8a:31:b7:
6e:31:6b:50:89:b3:53:55:47:d3:85:cb:92:a4:d2:
dd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7A:30:7A:C6:A4:20:69:59:E3:C9:40:A1:1E:46:39:E4:12:43:4D
X509v3 Authority Key Identifier:
keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f9:5e:86:40:bf:c1:71:ae:85:ab:54:59:77:a3:fa:1a:1b:
a6:a7:40:bd:5b:e7:87:53:e5:26:25:c0:dc:7d:a3:0a:a6:aa:
af:4f:83:5f:c3:af:8a:c7:61:fc:9a:fd:92:ba:3c:2f:65:78:
07:4f:c6:a7:21:6f:9e:78:11:52:ea:58:40:80:84:90:a5:29:
f5:e4:32:d2:33:11:b9:0a:57:0c:f0:2d:5f:6a:fd:0b:e3:c3:
3b:ee:04:8b:be:b5:66:b4:d3:99:a8:45:8f:aa:02:c6:02:4e:
24:c0:9e:bc:29:af:4f:64:52:4a:89:d1:b3:10:a5:fe:4f:7e:
1a:36:9b:bb:e7:22:1c:78:9c:73:b8:08:1d:c7:6c:c1:a7:6c:
4f:08:24:9d:10:79:9a:ea:0d:f7:27:b8:53:1c:ef:c8:07:92:
df:24:5f:74:2c:93:e0:ef:10:82:9f:f7:2a:fb:f3:90:cd:bb:
a1:41:97:14:9f:89:78:56:aa:e8:e6:6d:04:04:99:53:8a:6a:
40:fb:df:06:82:d0:7a:a8:c6:38:48:f1:4b:18:39:7d:5d:1a:
ce:be:8c:b4:5f:a6:13:ac:9e:7e:86:99:84:b1:f0:0f:a4:2f:
1b:bf:df:1a:89:7e:e5:ed:41:e0:0a:65:48:6a:ce:5a:c2:07:
c4:1e:86:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9cOqGYjoeaDOe6w3ru43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1M2Q4ZmVhMjI5OGZmMzU0MmE2ZGMwODkwYjEwOGM5MjIx
ODM2MzUwHhcNMjUxMTA0MTMwMjAwWhcNMjUxMTA1MTMwMjAwWjAzMTEwLwYDVQQD
EyhmYTdhMzA3YWM2YTQyMDY5NTllM2M5NDBhMTFlNDYzOWU0MTI0MzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnUuvqhsw54uthxMoiuOl5xetrgX
gju7e8jxfWHDH1L30lZlR/v46C0Jyo4tp2jECkVuoNnhZC4Fy2PT0DgEan+LdBgo
L/0r4e7AS/NeuFks0H5gxfzjq9LaWrbrMoGDR/SghIgdpT5+37oZodI4FCcHOKdM
lnvokRevG+/UdAlsSPekHnYF3Cy0KLKmzyrij5hths7C69te3xU+zn1frOTgEGQs
KaPNdO8dMs4weINSVL1ClKSMj2/WX3DZtWojfWa4R+k/ES69f7+DFb8CXUtdjmRc
0gs1yf4loQAIf4HzM4RE87rtRclGa8iKMbduMWtQibNTVUfThcuSpNLdZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPp6MHrGpCBpWePJQKEeRjnkEkNNMB8GA1UdIwQY
MBaAFKU9j+oimP81QqbcCJCxCMkiGDY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iYTNiYTMtOTUxZS00MjgwLWFmOTgt
Y2Q4MjQyNzhjY2U4LzEvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9iYTNiYTMtOTUxZS00MjgwLWFmOTgtY2Q4MjQyNzhjY2U4
LzEvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvlehkC/
wXGuhatUWXej+hobpqdAvVvnh1PlJiXA3H2jCqaqr0+DX8Ovisdh/Jr9kro8L2V4
B0/GpyFvnngRUupYQICEkKUp9eQy0jMRuQpXDPAtX2r9C+PDO+4Ei761ZrTTmahF
j6oCxgJOJMCevCmvT2RSSonRsxCl/k9+Gjabu+ciHHicc7gIHcdswadsTwgknRB5
muoN9ye4UxzvyAeS3yRfdCyT4O8Qgp/3KvvzkM27oUGXFJ+JeFaq6OZtBASZU4pq
QPvfBoLQeqjGOEjxSxg5fV0azr6MtF+mE6yefoaZhLHwD6QvG7/fGol+5e1B4Apl
SGrOWsIHxB6GAA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:02 2025 by rpki-client