Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
File: tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json)
Hash identifier: uMwfJWQ+Q5/vS88PTLqLpHswPGCBJaEB/0IDoPq+oHQ=
Subject key identifier: 71:7B:07:B6:8E:B8:C0:4B:C2:79:0D:62:87:F2:4C:3F:F1:4C:6B:2A
Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
Certificate issuer: /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Certificate serial: 0199FCC6CA1FFFCBF5836ED454489D0D24DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
Manifest number: 0208
Signing time: Sun 19 Oct 2025 14:01:49 +0000
Manifest this update: Sun 19 Oct 2025 14:01:49 +0000
Manifest next update: Mon 20 Oct 2025 14:01:49 +0000
Files and hashes: 1: 0NGpBZClfqdkwT-g1SQX2TG7Voo.roa (hash: SbCdNlkd4RVvBhJ9C9nlFY+4pjkHAYs+BVh1BZ1ld+c=)
2: FrJWtoZemJx4JKpSKfeY_d7A8KU.roa (hash: mn6H512YQAxp8Xgyg/tGQdGcCEfihV9UXWWT70uzA50=)
3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: S0vLNA19w8XRVCrVLD8SwrOrvvruEL67d5q6ux2LQPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ca:1f:ff:cb:f5:83:6e:d4:54:48:9d:0d:24:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Validity
Not Before: Oct 19 14:01:49 2025 GMT
Not After : Oct 20 14:01:49 2025 GMT
Subject: CN=717b07b68eb8c04bc2790d6287f24c3ff14c6b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:c6:13:b1:70:1c:60:b1:86:c5:f5:c8:0c:
0d:dc:2e:80:9a:4d:d0:e2:9b:9b:66:f9:d6:76:e7:
0e:1a:fd:c9:8d:4d:b4:17:f2:bc:2a:3e:4c:de:0b:
59:9d:31:d1:c1:87:b9:0b:b5:db:1d:7d:89:78:57:
05:ff:e1:4c:90:6d:9f:c9:c8:67:92:ca:07:82:58:
10:34:db:f3:69:13:a4:00:28:8f:8e:53:8f:b3:6f:
55:e5:ca:f6:5d:37:91:c7:48:08:5e:d9:fb:8c:b1:
4f:c7:81:44:ce:9b:8c:31:81:cd:74:93:36:0c:f5:
40:6b:3f:5e:90:08:f3:df:c3:9d:fc:e6:59:c7:80:
76:36:9f:09:3e:1b:21:72:77:2c:78:7e:4d:2b:4d:
ec:0a:94:0e:23:60:20:35:c9:0e:af:b5:f1:ed:21:
27:de:d6:71:cb:2c:29:03:e2:0d:79:ae:9a:a3:dd:
64:f7:15:58:bf:b8:5e:7c:ce:03:2a:26:cf:d9:e9:
7d:14:2b:45:ca:15:f2:87:2b:91:22:ff:7b:70:dd:
a2:03:ea:95:ec:77:b7:bf:d6:18:f4:2b:97:7e:1a:
30:ad:8a:f2:27:20:e2:c3:0a:b7:0d:d0:14:ec:d0:
66:e1:55:8a:4e:f8:c8:07:91:d3:b5:f1:14:4c:2e:
80:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7B:07:B6:8E:B8:C0:4B:C2:79:0D:62:87:F2:4C:3F:F1:4C:6B:2A
X509v3 Authority Key Identifier:
keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:aa:9e:3f:f6:4f:a2:03:29:44:1d:7a:bd:37:eb:d4:e8:6e:
dc:d0:3e:4e:e9:45:ff:92:01:fd:84:41:0b:68:80:89:19:fd:
dc:ff:30:3f:5d:bc:86:5c:35:00:78:68:5d:ae:73:62:c2:6e:
6e:2c:6d:8f:c8:8d:6b:c2:bc:fa:50:19:f4:7c:7b:47:cf:67:
dc:e4:b6:c4:11:85:32:ef:32:8e:9c:8f:9f:e2:16:29:0b:83:
d8:be:b1:88:cf:6e:55:d4:5d:a3:d6:52:d7:1e:65:a5:94:6a:
da:35:d5:9f:3f:9b:13:30:f1:6b:7c:7a:41:ca:a8:61:24:66:
f3:e3:05:bb:27:5e:17:4f:c7:7b:c4:21:36:7c:08:46:f8:39:
81:63:d2:e4:e2:3d:96:b9:52:fe:31:50:88:25:5f:41:c1:3a:
85:65:4f:52:3c:88:7b:21:bd:19:70:7c:0b:7c:8d:3e:8f:a2:
99:b0:e8:3b:d7:5d:d9:e7:1c:13:a5:a4:62:2d:4b:d5:57:ef:
15:0b:3f:26:0c:07:b4:fa:44:7a:ee:f9:92:b2:b7:27:4a:aa:
4c:77:5d:7d:f7:34:64:f3:ce:1f:be:c7:e7:5e:58:61:6e:53:
1c:7c:34:37:8a:26:5f:e6:26:0d:9a:33:60:ee:ed:cb:65:bf:
1e:2e:96:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xsof/8v1g27UVEidDSTaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NzY1NzdkMjAwODVjNGMyMmZjODAxMWM4ZDFhOTNmNjMy
MTFjMGYwHhcNMjUxMDE5MTQwMTQ5WhcNMjUxMDIwMTQwMTQ5WjAzMTEwLwYDVQQD
Eyg3MTdiMDdiNjhlYjhjMDRiYzI3OTBkNjI4N2YyNGMzZmYxNGM2YjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy//GE7FwHGCxhsX1yAwN3C6Amk3Q
4pubZvnWducOGv3JjU20F/K8Kj5M3gtZnTHRwYe5C7XbHX2JeFcF/+FMkG2fychn
ksoHglgQNNvzaROkACiPjlOPs29V5cr2XTeRx0gIXtn7jLFPx4FEzpuMMYHNdJM2
DPVAaz9ekAjz38Od/OZZx4B2Np8JPhshcncseH5NK03sCpQOI2AgNckOr7Xx7SEn
3tZxyywpA+INea6ao91k9xVYv7hefM4DKibP2el9FCtFyhXyhyuRIv97cN2iA+qV
7He3v9YY9CuXfhowrYryJyDiwwq3DdAU7NBm4VWKTvjIB5HTtfEUTC6AKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHF7B7aOuMBLwnkNYofyTD/xTGsqMB8GA1UdIwQY
MBaAFLV2V30gCFxMIvyAEcjRqT9jIRwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xNTE3MDUtMGIwYy00OGJmLWE0MGUt
YjdjYTFmZTZjMTg0LzEvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xNTE3MDUtMGIwYy00OGJmLWE0MGUtYjdjYTFmZTZjMTg0
LzEvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6qeP/ZP
ogMpRB16vTfr1Ohu3NA+TulF/5IB/YRBC2iAiRn93P8wP128hlw1AHhoXa5zYsJu
bixtj8iNa8K8+lAZ9Hx7R89n3OS2xBGFMu8yjpyPn+IWKQuD2L6xiM9uVdRdo9ZS
1x5lpZRq2jXVnz+bEzDxa3x6QcqoYSRm8+MFuydeF0/He8QhNnwIRvg5gWPS5OI9
lrlS/jFQiCVfQcE6hWVPUjyIeyG9GXB8C3yNPo+imbDoO9dd2eccE6WkYi1L1Vfv
FQs/JgwHtPpEeu75krK3J0qqTHddffc0ZPPOH77H515YYW5THHw0N4omX+YmDZoz
YO7ty2W/Hi6WBg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:49 2025 by rpki-client