Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
File: tE-FORdNAL-ov95JBD9IXDpYdSU.mft (raw, json)
Hash identifier: CdTQP96txfRCL3DT3NmkmJmO9PMJtzTN0Zc9S0DEXYc=
Subject key identifier: 23:2D:EB:0A:54:6D:B9:FE:19:4D:A1:BF:82:91:37:3C:59:7E:03:BB
Authority key identifier: B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
Certificate issuer: /CN=b44f8539174d00bfa8bfde49043f485c3a587525
Certificate serial: 019A50E2F6757B3B4ED3010AD7AE29AED190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 22:00:42 +0000
Manifest this update: Tue 04 Nov 2025 22:00:42 +0000
Manifest next update: Wed 05 Nov 2025 22:00:42 +0000
Files and hashes: 1: tE-FORdNAL-ov95JBD9IXDpYdSU.crl (hash: bXLS5s7bnadLiuAI/+us5Cvhr35+kaz35LWox8hdghY=)
2: xUV-1OBQ9tZ_Xv0-wwfyT7s6w0s.roa (hash: kyqwYkE6bzY0EYwjT0bnHVarYHy1IZctjgwIpdkE7zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:f6:75:7b:3b:4e:d3:01:0a:d7:ae:29:ae:d1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b44f8539174d00bfa8bfde49043f485c3a587525
Validity
Not Before: Nov 4 22:00:42 2025 GMT
Not After : Nov 5 22:00:42 2025 GMT
Subject: CN=232deb0a546db9fe194da1bf8291373c597e03bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:84:9c:ec:18:fc:a5:f0:d9:d0:a8:12:c1:75:
27:0d:c1:4d:f2:f6:bf:58:07:bc:8b:7c:94:cc:c2:
5e:70:7d:42:4a:e6:ef:e2:d2:94:c4:7f:7c:0a:97:
d2:c3:71:33:90:9d:42:0a:b0:7d:e3:f1:c5:cb:74:
ac:bd:25:d5:31:50:a7:c8:70:43:22:4d:22:c4:8b:
87:92:19:fb:9d:f7:f6:02:3e:7c:75:89:8d:68:28:
83:fe:13:94:c0:2c:fe:05:71:bb:a6:48:ca:b6:fc:
31:10:d2:c3:34:c1:d3:8e:30:4b:77:80:2b:f3:35:
30:93:c6:05:3d:4c:ef:94:33:6b:1b:5e:cc:87:20:
72:66:97:2c:a0:c8:b7:d5:e8:75:44:0a:04:ff:44:
fb:e8:cd:2d:13:72:65:af:8f:40:d4:c1:02:5b:27:
70:45:48:3f:ff:f7:ed:41:04:7c:cd:59:07:d7:2b:
ee:51:af:6d:ff:70:c5:59:b2:1a:cd:c8:05:7d:24:
cb:27:91:63:80:30:d0:e2:99:f6:f3:66:40:96:a5:
33:35:49:16:0b:cc:fd:25:52:f6:e2:62:25:8b:c2:
9c:51:3f:04:bd:bf:00:7d:7e:fb:48:4f:a1:7b:13:
a6:fa:9a:07:3d:32:64:d9:ab:e1:2f:f5:87:f3:4f:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2D:EB:0A:54:6D:B9:FE:19:4D:A1:BF:82:91:37:3C:59:7E:03:BB
X509v3 Authority Key Identifier:
keyid:B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c2:5d:58:ed:eb:60:37:32:6a:4a:86:47:53:4a:11:11:27:
4c:b3:44:4a:f7:51:7a:fd:d9:23:01:7c:fe:cc:93:4d:29:9e:
9c:69:19:28:df:94:37:27:68:be:6d:b4:07:02:0d:7f:46:b3:
82:9c:ae:25:46:c0:22:f7:c7:b2:19:cb:b6:cc:88:89:4d:dd:
5d:e4:c6:06:63:4c:0b:07:b4:db:55:4d:25:c8:69:90:7f:c0:
f2:f2:e5:20:68:91:ea:68:7d:77:db:0e:0b:71:a2:49:32:64:
5c:32:0b:f9:02:26:f2:22:83:3a:9a:90:5f:9a:0f:17:5a:50:
3f:af:f0:fa:ce:98:cc:e3:d1:8e:d9:55:6f:1c:ea:a9:04:34:
9a:e6:fb:63:89:53:e3:f4:2e:7b:ab:f3:ef:33:8b:a3:a7:2e:
63:24:ce:09:e9:07:eb:2b:3a:c8:06:93:be:d5:67:5b:34:12:
4f:06:81:e5:ca:ba:cd:d2:59:f0:5c:c3:38:a3:c4:5b:72:b4:
98:e5:87:e9:43:0b:cc:c6:b8:bd:a9:63:47:97:e4:f3:67:8b:
9d:94:94:90:f2:44:65:9d:ed:99:12:69:c6:03:31:7b:2d:58:
8e:db:a9:36:d1:45:6e:49:de:0e:63:b5:10:b4:c5:04:20:ba:
ce:72:a0:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4vZ1eztO0wEK164prtGQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NGY4NTM5MTc0ZDAwYmZhOGJmZGU0OTA0M2Y0ODVjM2E1
ODc1MjUwHhcNMjUxMTA0MjIwMDQyWhcNMjUxMTA1MjIwMDQyWjAzMTEwLwYDVQQD
EygyMzJkZWIwYTU0NmRiOWZlMTk0ZGExYmY4MjkxMzczYzU5N2UwM2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYSc7Bj8pfDZ0KgSwXUnDcFN8va/
WAe8i3yUzMJecH1CSubv4tKUxH98CpfSw3EzkJ1CCrB94/HFy3SsvSXVMVCnyHBD
Ik0ixIuHkhn7nff2Aj58dYmNaCiD/hOUwCz+BXG7pkjKtvwxENLDNMHTjjBLd4Ar
8zUwk8YFPUzvlDNrG17MhyByZpcsoMi31eh1RAoE/0T76M0tE3Jlr49A1MECWydw
RUg///ftQQR8zVkH1yvuUa9t/3DFWbIazcgFfSTLJ5FjgDDQ4pn282ZAlqUzNUkW
C8z9JVL24mIli8KcUT8Evb8AfX77SE+hexOm+poHPTJk2avhL/WH80/ZMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMt6wpUbbn+GU2hv4KRNzxZfgO7MB8GA1UdIwQY
MBaAFLRPhTkXTQC/qL/eSQQ/SFw6WHUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEUtRk9SZE5BTC1vdjk1SkJEOUlYRHBZZFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mNzU1OTYtNzc5MC00MzJjLTg4Y2Qt
MzMzZTUzY2ZhMDIxLzEvdEUtRk9SZE5BTC1vdjk1SkJEOUlYRHBZZFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9mNzU1OTYtNzc5MC00MzJjLTg4Y2QtMzMzZTUzY2ZhMDIx
LzEvdEUtRk9SZE5BTC1vdjk1SkJEOUlYRHBZZFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsJdWO3r
YDcyakqGR1NKEREnTLNESvdRev3ZIwF8/syTTSmenGkZKN+UNydovm20BwINf0az
gpyuJUbAIvfHshnLtsyIiU3dXeTGBmNMCwe021VNJchpkH/A8vLlIGiR6mh9d9sO
C3GiSTJkXDIL+QIm8iKDOpqQX5oPF1pQP6/w+s6YzOPRjtlVbxzqqQQ0mub7Y4lT
4/Que6vz7zOLo6cuYyTOCekH6ys6yAaTvtVnWzQSTwaB5cq6zdJZ8FzDOKPEW3K0
mOWH6UMLzMa4valjR5fk82eLnZSUkPJEZZ3tmRJpxgMxey1YjtupNtFFbkneDmO1
ELTFBCC6znKgFw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:24 2025 by rpki-client