Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
File: tMBDnHlVURAtbx5M620cUvvF6j8.mft (raw, json)
Hash identifier: l0BEk/zNi8QR+FIjVjGXi1U/LpfZkO5dp8vM9zCUG68=
Subject key identifier: 2B:43:25:30:BA:B0:98:43:14:FB:19:55:98:72:93:94:D2:23:8C:AC
Authority key identifier: B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
Certificate issuer: /CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Certificate serial: 0199FC58AAA4F9AC1E642C099BCB055C871F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:33 +0000
Manifest this update: Sun 19 Oct 2025 12:01:33 +0000
Manifest next update: Mon 20 Oct 2025 12:01:33 +0000
Files and hashes: 1: n5jiYoIoGZQqwQOVrCfprt-PApk.roa (hash: MrCF/3iJ71+/LWf1gBDblDTWmF567DIjZvwBvhh1aT0=)
2: tMBDnHlVURAtbx5M620cUvvF6j8.crl (hash: HMWi+fgvZUK0th+P09ZfWs7iUlsAkYzYUYbHBBY2v9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:aa:a4:f9:ac:1e:64:2c:09:9b:cb:05:5c:87:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Validity
Not Before: Oct 19 12:01:33 2025 GMT
Not After : Oct 20 12:01:33 2025 GMT
Subject: CN=2b432530bab0984314fb195598729394d2238cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:5d:86:8e:14:32:74:1b:62:61:2b:ca:3d:
e4:d0:d8:83:52:bf:4b:25:f3:6d:c6:65:74:33:30:
8a:50:32:b7:30:d6:ec:0c:74:02:bb:94:1b:a7:aa:
5c:2b:29:63:05:d1:1b:44:ee:24:7e:01:33:43:65:
a1:15:dc:e5:a6:64:da:78:ea:3a:59:a0:18:b1:61:
2a:3d:cd:e7:f5:01:0c:9f:e3:f2:d7:ab:11:9a:3e:
16:39:aa:54:95:dc:04:0a:13:bd:4a:b2:34:2a:50:
d2:6d:fd:9c:b9:04:04:ff:a8:38:d1:59:93:91:d0:
fa:8f:4a:b1:36:ca:7a:be:6f:58:df:e6:63:64:be:
da:dd:d6:d1:60:f1:ff:ea:0a:85:a3:1c:e0:07:d7:
87:83:ce:f0:dc:9c:04:12:ca:41:21:a1:18:31:2e:
2f:11:0a:e3:a1:56:57:ba:24:4a:7d:55:7b:a9:40:
9d:56:b3:71:b9:55:9c:f4:c0:3d:ec:d7:10:87:ad:
dc:d0:88:10:b0:f9:71:a0:d2:ca:55:e4:d3:97:b7:
93:26:74:a8:dc:8a:bd:49:44:b3:e6:e0:3c:59:68:
5e:32:d3:f3:36:85:a0:42:29:99:bd:57:23:14:7b:
05:8c:9f:07:07:73:22:59:77:c8:08:7a:23:58:36:
d2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:43:25:30:BA:B0:98:43:14:FB:19:55:98:72:93:94:D2:23:8C:AC
X509v3 Authority Key Identifier:
keyid:B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b7:f5:4b:1d:f1:c9:4c:fe:2c:36:e9:bf:ea:61:35:3a:6c:
68:f1:a8:bf:67:4a:a9:9c:c8:aa:77:2c:dd:32:a0:13:0d:0e:
fc:0b:47:21:77:e4:d8:df:7d:09:5b:d0:29:ea:85:25:fb:c5:
a2:fb:33:1d:10:06:68:21:e6:f4:83:b0:64:86:94:6b:10:a5:
28:89:7c:e7:da:fb:7e:24:8c:dc:20:e0:73:6b:ff:04:9d:8f:
fe:b8:71:22:b0:c9:85:df:c0:98:e6:e5:5a:08:c9:55:b9:19:
ef:1b:18:07:67:ce:31:c8:fb:ae:3d:d3:6a:ed:5d:66:b1:f9:
87:3d:57:6e:43:20:03:8d:af:95:af:b0:b0:1a:5c:02:1c:53:
f9:42:2b:b9:5a:39:52:8f:9b:8e:77:8b:79:5e:b2:99:15:3c:
fa:5c:1a:f3:61:68:ed:c2:a8:a5:49:2c:0a:17:56:43:bb:8b:
ed:25:d6:c5:ab:e2:8c:55:12:be:39:9f:5a:4e:d9:c6:a8:62:
fa:fd:ee:e9:33:1c:aa:cb:0c:1f:72:36:16:80:c8:b6:68:e6:
ce:98:14:58:06:ba:b5:71:56:c9:2b:67:d0:29:cd:b8:9e:a5:
36:8c:23:42:c4:33:1b:0b:bc:d8:9d:fb:35:e9:90:0c:ca:5d:
33:15:5c:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WKqk+aweZCwJm8sFXIcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YzA0MzljNzk1NTUxMTAyZDZmMWU0Y2ViNmQxYzUyZmJj
NWVhM2YwHhcNMjUxMDE5MTIwMTMzWhcNMjUxMDIwMTIwMTMzWjAzMTEwLwYDVQQD
EygyYjQzMjUzMGJhYjA5ODQzMTRmYjE5NTU5ODcyOTM5NGQyMjM4Y2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL1dho4UMnQbYmEryj3k0NiDUr9L
JfNtxmV0MzCKUDK3MNbsDHQCu5Qbp6pcKyljBdEbRO4kfgEzQ2WhFdzlpmTaeOo6
WaAYsWEqPc3n9QEMn+Py16sRmj4WOapUldwEChO9SrI0KlDSbf2cuQQE/6g40VmT
kdD6j0qxNsp6vm9Y3+ZjZL7a3dbRYPH/6gqFoxzgB9eHg87w3JwEEspBIaEYMS4v
EQrjoVZXuiRKfVV7qUCdVrNxuVWc9MA97NcQh63c0IgQsPlxoNLKVeTTl7eTJnSo
3Iq9SUSz5uA8WWheMtPzNoWgQimZvVcjFHsFjJ8HB3MiWXfICHojWDbSiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtDJTC6sJhDFPsZVZhyk5TSI4ysMB8GA1UdIwQY
MBaAFLTAQ5x5VVEQLW8eTOttHFL7xeo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE1CRG5IbFZVUkF0Yng1TTYyMGNVdnZGNmo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NmJhMDItZjk3MC00ODY5LWJlMjct
ZThlZGU1YTJmODc1LzEvdE1CRG5IbFZVUkF0Yng1TTYyMGNVdnZGNmo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84NmJhMDItZjk3MC00ODY5LWJlMjctZThlZGU1YTJmODc1
LzEvdE1CRG5IbFZVUkF0Yng1TTYyMGNVdnZGNmo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7f1Sx3x
yUz+LDbpv+phNTpsaPGov2dKqZzIqncs3TKgEw0O/AtHIXfk2N99CVvQKeqFJfvF
ovszHRAGaCHm9IOwZIaUaxClKIl859r7fiSM3CDgc2v/BJ2P/rhxIrDJhd/AmObl
WgjJVbkZ7xsYB2fOMcj7rj3Tau1dZrH5hz1XbkMgA42vla+wsBpcAhxT+UIruVo5
Uo+bjneLeV6ymRU8+lwa82Fo7cKopUksChdWQ7uL7SXWxavijFUSvjmfWk7Zxqhi
+v3u6TMcqssMH3I2FoDItmjmzpgUWAa6tXFWyStn0CnNuJ6lNowjQsQzGwu82J37
NemQDMpdMxVcAQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:50 2025 by rpki-client