Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
File: tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft (raw, json)
Hash identifier: 7uoNf0zjaaBD0B6PEyJIQiY/8U4oKzVuOkcWJqfU5pc=
Subject key identifier: 03:AB:1D:B3:AC:9B:54:4C:C2:E0:CE:32:1E:91:28:6A:05:A9:10:F5
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial: 019A4D73EA30EC47AEB03FC15D3BAF56F0A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
Manifest number: 0E33
Signing time: Tue 04 Nov 2025 06:00:33 +0000
Manifest this update: Tue 04 Nov 2025 06:00:33 +0000
Manifest next update: Wed 05 Nov 2025 06:00:33 +0000
Files and hashes: 1: 9FStBrS0NlZ9f0JDPC2m90a8BCY.roa (hash: xw+KW2Ni2Cd+C3tg5Q5Vf8DrtdT917ZQWwgX4LJaEm4=)
2: NcymNU3Ex55jeE07rsjVQP17Yc4.roa (hash: rqRVyPcE0vuZ2ea448N6H2EJDC40DdbDXkISgXkK53E=)
3: XUHwJb1I3gkKMlf7v2dTxFe6360.roa (hash: Gm/rvLP3jZuTC48xJtdoJ5/c1V7BDKST3JSzW3p7S08=)
4: tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl (hash: vSrrz4lacBRsa7WmpFu832KfRS2/NNvqRN92RKfD5ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ea:30:ec:47:ae:b0:3f:c1:5d:3b:af:56:f0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Validity
Not Before: Nov 4 06:00:33 2025 GMT
Not After : Nov 5 06:00:33 2025 GMT
Subject: CN=03ab1db3ac9b544cc2e0ce321e91286a05a910f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:4a:47:7a:13:f3:34:73:30:27:d3:6d:40:
5e:c9:53:6c:68:21:1b:2e:70:63:7b:ce:46:13:6e:
b6:e9:0a:e7:cc:08:06:8a:bc:9d:ae:14:3f:eb:7b:
c9:66:d3:99:f2:93:8d:61:d1:90:0f:77:fa:a1:65:
3a:19:87:10:63:04:2b:17:fb:26:fd:d8:32:84:0f:
51:36:ba:b3:a5:2b:ca:1d:34:1d:70:b1:ab:08:70:
e4:f3:58:81:48:e6:cb:73:57:9e:81:f3:d5:28:4b:
df:cb:06:d8:bf:dd:55:9b:0a:14:4c:5d:3e:43:4e:
89:86:f9:32:02:51:c3:98:03:46:d3:aa:91:d7:52:
31:95:33:5d:dd:b0:69:84:c1:ec:46:6f:48:70:0a:
f5:19:b1:fa:f3:1b:71:89:40:5c:ab:ac:d7:57:9f:
98:b8:f5:33:3b:8c:bd:41:20:6b:02:89:81:94:b5:
29:0e:cb:bb:fe:26:74:59:a0:a9:3b:f9:b9:a9:2f:
e7:b3:72:64:76:c5:46:f9:7e:82:29:fb:28:e9:1e:
e0:20:d6:8f:96:ea:a9:e0:6e:aa:21:51:1d:cd:70:
dc:7e:8b:d7:ec:b3:0f:86:23:05:87:d0:23:19:82:
39:5c:b8:c0:29:4e:84:4a:14:32:3b:ce:c6:7f:bd:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AB:1D:B3:AC:9B:54:4C:C2:E0:CE:32:1E:91:28:6A:05:A9:10:F5
X509v3 Authority Key Identifier:
keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0f:01:80:bd:8b:46:96:5c:70:86:19:0a:32:58:7a:e5:5a:
b9:6f:6f:73:a6:ba:c1:00:97:d1:9d:e2:51:7c:86:af:44:fc:
09:b2:71:2e:5d:68:7c:8f:49:4e:5c:2d:e5:d8:cc:ce:2b:5f:
d7:bd:d2:e7:1f:d0:28:97:2b:bb:00:03:b9:f4:6e:10:17:6e:
5a:42:4e:45:c5:8c:19:8a:34:d6:6b:9d:3b:2e:cf:72:62:01:
42:85:3e:53:71:0d:c9:e9:84:46:c2:94:f8:39:3c:de:5a:11:
39:fc:de:02:38:8c:5b:77:29:9d:8e:e1:82:76:18:6f:7d:34:
35:70:a1:5e:01:d3:53:0d:59:87:e0:81:5f:06:89:ac:ee:b8:
f5:d0:7f:e1:77:0d:ea:9a:1c:3f:4a:68:90:f5:36:de:64:56:
9b:c2:e2:57:dd:73:e5:96:58:26:bb:cb:dd:3b:1a:e0:02:a2:
b3:1a:41:a2:4c:60:b4:73:c1:17:43:16:50:86:ab:e7:ab:3c:
25:f7:bf:d3:64:8c:47:c1:c2:5e:e4:89:da:9d:50:f9:f4:f3:
49:7d:0c:58:40:b4:04:45:0b:ef:30:a2:29:8f:9e:c9:06:b5:
7f:9c:99:13:09:58:48:d1:52:85:db:b0:d4:1c:77:0e:e0:09:
d7:e6:7d:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc+ow7EeusD/BXTuvVvCiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2JhMThkNWNlYjhlNzk0YzgxMzljZTAyYTc5MWI4NTAx
ODI1ZWYwHhcNMjUxMTA0MDYwMDMzWhcNMjUxMTA1MDYwMDMzWjAzMTEwLwYDVQQD
EygwM2FiMWRiM2FjOWI1NDRjYzJlMGNlMzIxZTkxMjg2YTA1YTkxMGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq51KR3oT8zRzMCfTbUBeyVNsaCEb
LnBje85GE2626QrnzAgGirydrhQ/63vJZtOZ8pONYdGQD3f6oWU6GYcQYwQrF/sm
/dgyhA9RNrqzpSvKHTQdcLGrCHDk81iBSObLc1eegfPVKEvfywbYv91VmwoUTF0+
Q06JhvkyAlHDmANG06qR11IxlTNd3bBphMHsRm9IcAr1GbH68xtxiUBcq6zXV5+Y
uPUzO4y9QSBrAomBlLUpDsu7/iZ0WaCpO/m5qS/ns3JkdsVG+X6CKfso6R7gINaP
luqp4G6qIVEdzXDcfovX7LMPhiMFh9AjGYI5XLjAKU6EShQyO87Gf71kPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOrHbOsm1RMwuDOMh6RKGoFqRD1MB8GA1UdIwQY
MBaAFLU7oY1c6455TIE5zgKnkbhQGCXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lMjUxMGQtZTU3My00NWQzLTlkMjAt
NzU0YjYwYzViNTY4LzEvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lMjUxMGQtZTU3My00NWQzLTlkMjAtNzU0YjYwYzViNTY4
LzEvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnA8BgL2L
RpZccIYZCjJYeuVauW9vc6a6wQCX0Z3iUXyGr0T8CbJxLl1ofI9JTlwt5djMzitf
173S5x/QKJcruwADufRuEBduWkJORcWMGYo01mudOy7PcmIBQoU+U3ENyemERsKU
+Dk83loROfzeAjiMW3cpnY7hgnYYb300NXChXgHTUw1Zh+CBXwaJrO649dB/4XcN
6pocP0pokPU23mRWm8LiV91z5ZZYJrvL3Tsa4AKisxpBokxgtHPBF0MWUIar56s8
Jfe/02SMR8HCXuSJ2p1Q+fTzSX0MWEC0BEUL7zCiKY+eyQa1f5yZEwlYSNFShduw
1Bx3DuAJ1+Z9CQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:45 2025 by rpki-client