Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: Hnhx7Z9jqo4bW6v3d7l0vQ2Gbgu6lQb1vuCtnUvC/G8=
Subject key identifier: 2C:CC:ED:70:EF:F8:1A:70:5C:E5:86:2C:3A:3F:D8:A5:AE:02:95:5A
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 019A4D3D19B09940E21F2C9F5FB001134E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0BC2
Signing time: Tue 04 Nov 2025 05:00:41 +0000
Manifest this update: Tue 04 Nov 2025 05:00:41 +0000
Manifest next update: Wed 05 Nov 2025 05:00:41 +0000
Files and hashes: 1: E8fqlMMExB61QIsEKMENcZNpWcs.roa (hash: BmnUAt4AevLzEKuzLNe+ibP+z5vcZguaEireBbRJdHM=)
2: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: /7QrITc32ytdMylqUeceQK0UuKe96J4uPRUfHcNy1JE=)
3: gXlhbbxVLQVqCMGvhejieNdtoBY.roa (hash: 8u7C6SqKmEB/oIEa7cYGrPkrur0B3bFj0WV0Kh36+qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:19:b0:99:40:e2:1f:2c:9f:5f:b0:01:13:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Nov 4 05:00:41 2025 GMT
Not After : Nov 5 05:00:41 2025 GMT
Subject: CN=2ccced70eff81a705ce5862c3a3fd8a5ae02955a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:da:6d:4b:5d:ea:97:cc:39:75:71:8c:d9:
d0:14:5a:51:f7:a7:e5:6d:15:f1:86:c0:72:16:97:
32:52:ea:2d:c0:71:2d:c1:7e:77:78:80:71:a3:54:
20:81:8e:7f:a4:11:aa:b8:0a:ff:78:0e:7a:47:62:
12:61:a7:3a:ae:8b:61:d7:46:d1:cb:4e:cf:6b:5a:
d3:e3:b1:dd:3a:77:58:f8:85:33:53:8e:97:1e:68:
14:36:21:b0:96:84:db:58:7a:15:48:f9:be:73:5b:
ae:2e:77:94:c7:b4:02:98:06:ff:cc:db:a0:a8:6b:
ad:aa:52:46:6f:2d:c4:9b:60:9a:24:10:0b:60:73:
61:77:e7:83:59:54:a3:18:93:89:c4:a8:94:65:fa:
25:0e:f5:5a:25:55:f9:eb:ec:7f:c0:9a:6d:61:1e:
35:d5:bd:c2:f3:8d:95:a7:95:25:96:03:37:30:96:
04:c4:79:33:4b:4f:cb:b1:57:4a:83:c9:8a:96:be:
c2:41:eb:2c:ac:d2:11:59:92:c2:12:b5:d7:0f:51:
6f:3a:89:d1:af:df:0a:f2:3d:bd:e5:f1:a8:52:c7:
9b:f5:0f:8c:d4:39:b9:a8:e2:36:7d:e2:21:e7:ba:
a9:6a:71:02:60:6b:88:f6:03:e2:39:68:19:20:c3:
4c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CC:ED:70:EF:F8:1A:70:5C:E5:86:2C:3A:3F:D8:A5:AE:02:95:5A
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:91:e3:e5:c1:4f:69:4b:fa:cb:2e:12:e0:c3:ba:e7:b0:c8:
cc:b0:8a:57:f5:f2:7f:3b:41:d6:ca:b0:5c:43:40:81:32:88:
26:5c:1e:28:8f:6f:d0:53:53:dd:2c:09:6d:af:6a:4e:a6:67:
01:cf:bb:4a:00:a3:50:67:c7:c4:de:50:55:ca:98:f9:bf:34:
3d:51:12:5c:f8:8d:ca:6b:a2:c0:e0:31:aa:24:ea:f1:b8:38:
43:24:97:d6:96:43:f5:7c:c9:4a:11:cc:ac:cd:26:7c:3b:bf:
30:35:ba:f5:37:ae:e1:92:82:71:b0:4d:f3:c5:b4:7d:3e:0f:
b3:88:1b:15:41:c1:36:aa:95:ca:40:4b:29:48:2e:bc:9a:2a:
a6:7e:a1:ec:dd:40:13:67:71:4b:6b:b7:bc:f1:ff:1f:65:66:
fd:3b:59:36:36:e4:04:f3:37:e3:c6:76:17:8f:7d:b6:2f:09:
ab:a7:66:07:fb:83:3a:2d:72:a1:9f:0d:cc:ec:af:f1:0e:97:
e6:b9:ff:59:7f:07:7b:2a:6e:d7:57:33:26:87:36:67:9d:0e:
15:b2:90:df:29:8f:d1:c5:3f:0d:44:e1:f5:b9:1c:4d:a2:86:
f1:99:70:cf:7c:d7:5c:af:33:4c:19:9b:ce:36:fc:b1:76:43:
66:df:17:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPRmwmUDiHyyfX7ABE06AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMjNlMmVkYjMyMWUxYThhNWNlOWVlM2UyZDk1YWE0MGYw
ZGU4YTAwHhcNMjUxMTA0MDUwMDQxWhcNMjUxMTA1MDUwMDQxWjAzMTEwLwYDVQQD
EygyY2NjZWQ3MGVmZjgxYTcwNWNlNTg2MmMzYTNmZDhhNWFlMDI5NTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDrabUtd6pfMOXVxjNnQFFpR96fl
bRXxhsByFpcyUuotwHEtwX53eIBxo1QggY5/pBGquAr/eA56R2ISYac6roth10bR
y07Pa1rT47HdOndY+IUzU46XHmgUNiGwloTbWHoVSPm+c1uuLneUx7QCmAb/zNug
qGutqlJGby3Em2CaJBALYHNhd+eDWVSjGJOJxKiUZfolDvVaJVX56+x/wJptYR41
1b3C842Vp5UllgM3MJYExHkzS0/LsVdKg8mKlr7CQessrNIRWZLCErXXD1FvOonR
r98K8j295fGoUseb9Q+M1Dm5qOI2feIh57qpanECYGuI9gPiOWgZIMNMLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzM7XDv+BpwXOWGLDo/2KWuApVaMB8GA1UdIwQY
MBaAFE0j4u2zIeGopc6e4+LZWqQPDeigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEt
NTM4NTA5ZjNhNzg5LzEvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEtNTM4NTA5ZjNhNzg5
LzEvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5Hj5cFP
aUv6yy4S4MO657DIzLCKV/XyfztB1sqwXENAgTKIJlweKI9v0FNT3SwJba9qTqZn
Ac+7SgCjUGfHxN5QVcqY+b80PVESXPiNymuiwOAxqiTq8bg4QySX1pZD9XzJShHM
rM0mfDu/MDW69Teu4ZKCcbBN88W0fT4Ps4gbFUHBNqqVykBLKUguvJoqpn6h7N1A
E2dxS2u3vPH/H2Vm/TtZNjbkBPM348Z2F499ti8Jq6dmB/uDOi1yoZ8NzOyv8Q6X
5rn/WX8Heypu11czJoc2Z50OFbKQ3ymP0cU/DUTh9bkcTaKG8Zlwz3zXXK8zTBmb
zjb8sXZDZt8Xlw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:45 2025 by rpki-client