Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json)
Hash identifier: gJmgDnDkRAiL7aZ98pL3KqKWBlojnMCmRqOMhOjdtLc=
Subject key identifier: B6:50:12:CD:68:79:90:83:37:16:F3:C7:58:59:D3:B4:45:CD:5E:BB
Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Certificate serial: 0199FEB4A2A50055802455D34F0B951BE95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 23:01:14 +0000
Manifest this update: Sun 19 Oct 2025 23:01:14 +0000
Manifest next update: Mon 20 Oct 2025 23:01:14 +0000
Files and hashes: 1: 4yLFcyM54Hv8nF5ON-TIrD-1oYQ.roa (hash: hE+OT4FiIcXi0TRuDiRDYqpuBeR4hhUYci4sdFCd/CY=)
2: jKEy0LJLh7AqTPNLnCDWho1dIJ0.roa (hash: BKRsVG5h+FxIv9YJSObhtgL9EqcN1BIPxpc/4d7NHx4=)
3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: gggtQYnaTZxyZlvaY/IBflvoTVHY1l+rc8oD/3/Lrb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:a2:a5:00:55:80:24:55:d3:4f:0b:95:1b:e9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Validity
Not Before: Oct 19 23:01:14 2025 GMT
Not After : Oct 20 23:01:14 2025 GMT
Subject: CN=b65012cd687990833716f3c75859d3b445cd5ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:51:ea:0c:dc:2c:bf:54:09:aa:c7:7a:cc:
a1:f1:04:fe:84:d9:db:4d:d5:1f:b9:e8:cb:92:b4:
8a:62:e8:60:ec:31:c8:1c:b6:67:4f:f2:9e:f0:55:
92:e5:6d:78:4e:ab:16:0a:9b:75:a7:9b:95:ed:b7:
e0:54:fc:07:57:58:7c:e0:0d:e7:8d:68:2f:52:92:
d3:db:d8:17:28:49:f6:ed:d8:ec:dd:b0:ff:3b:1d:
00:2d:08:b0:ae:ec:eb:56:6a:db:ae:3d:f9:b0:50:
27:ba:38:8e:88:24:03:0b:f8:11:37:4b:a4:99:07:
b6:0a:1e:f0:db:fd:17:04:cc:83:7d:0e:33:ae:58:
d2:e0:84:f3:9f:1b:e8:84:03:04:24:27:5c:57:89:
fd:11:ff:94:1d:f0:dc:1a:d8:04:90:54:53:c5:48:
3d:1f:26:ee:c9:2f:02:b5:f0:a7:dd:ff:f5:4a:5c:
39:ea:41:d1:09:9e:fb:d8:e2:52:80:2c:6c:df:78:
dc:dd:82:41:c1:b3:a5:3a:d6:06:47:81:d9:8c:55:
31:59:65:2f:7c:68:50:95:76:7f:96:30:d5:f1:b4:
ab:d2:b8:13:e7:9e:f7:5f:0c:70:73:47:b7:35:62:
bf:dc:06:d9:90:64:d5:58:26:8b:8f:7b:63:9b:e0:
0c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:50:12:CD:68:79:90:83:37:16:F3:C7:58:59:D3:B4:45:CD:5E:BB
X509v3 Authority Key Identifier:
keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:88:97:f6:bb:ca:26:c2:32:a9:0c:2a:b5:70:6c:e2:f5:a9:
3a:b9:6e:5d:03:2f:f0:29:f4:b6:a4:f5:96:7a:b2:92:6a:c1:
f5:99:a7:2a:5d:46:f6:cb:2d:b3:62:d6:6e:01:10:1b:79:19:
d1:12:2e:b5:cf:13:0b:cd:ba:e4:00:05:42:c6:2e:c9:9a:bc:
f4:6c:a5:0d:12:32:ed:4e:26:0d:7a:77:8a:b0:62:57:e8:05:
d0:be:59:5b:bd:6b:fb:71:7a:7b:a9:fc:40:65:98:ef:35:7e:
c3:ae:89:ed:27:10:a3:92:02:4d:68:b5:ab:0b:37:b0:16:86:
94:14:8f:6a:27:7a:6c:1c:44:4a:7d:71:3a:b0:27:19:6a:b8:
9f:1b:f8:b2:fe:6c:12:d6:46:d7:0c:93:21:2c:63:3f:b8:6c:
c1:87:9a:f5:16:68:05:30:d0:3c:6a:cf:04:a2:0a:67:e4:27:
7c:23:29:2c:ff:d8:24:b5:94:72:76:4a:25:42:a0:03:71:87:
1c:bb:a0:a2:9a:12:1b:b5:1b:3d:89:f8:14:ff:95:5f:0a:3a:
ef:bd:21:2a:15:6e:cc:4b:7e:3a:5c:94:f2:aa:a0:da:d6:8c:
83:16:5f:2a:3e:a2:95:f9:f4:cb:9d:4b:7a:be:00:ed:0a:3c:
e6:bb:0b:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tKKlAFWAJFXTTwuVG+lfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ZmFlYzRiOGQ5OTJkZDZiOWNkODlhODQ4OWQzYzNhNjUy
YWVjZDIwHhcNMjUxMDE5MjMwMTE0WhcNMjUxMDIwMjMwMTE0WjAzMTEwLwYDVQQD
EyhiNjUwMTJjZDY4Nzk5MDgzMzcxNmYzYzc1ODU5ZDNiNDQ1Y2Q1ZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxdR6gzcLL9UCarHesyh8QT+hNnb
TdUfuejLkrSKYuhg7DHIHLZnT/Ke8FWS5W14TqsWCpt1p5uV7bfgVPwHV1h84A3n
jWgvUpLT29gXKEn27djs3bD/Ox0ALQiwruzrVmrbrj35sFAnujiOiCQDC/gRN0uk
mQe2Ch7w2/0XBMyDfQ4zrljS4ITznxvohAMEJCdcV4n9Ef+UHfDcGtgEkFRTxUg9
HybuyS8CtfCn3f/1Slw56kHRCZ772OJSgCxs33jc3YJBwbOlOtYGR4HZjFUxWWUv
fGhQlXZ/ljDV8bSr0rgT5573Xwxwc0e3NWK/3AbZkGTVWCaLj3tjm+AMiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZQEs1oeZCDNxbzx1hZ07RFzV67MB8GA1UdIwQY
MBaAFLX67EuNmS3Wuc2JqEidPDplKuzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGZyc1M0MlpMZGE1elltb1NKMDhPbVVxN05JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82OGMyOTYtNjliMi00MDcwLTlmZjkt
NDI0M2RlY2FkMzYwLzEvdGZyc1M0MlpMZGE1elltb1NKMDhPbVVxN05JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS82OGMyOTYtNjliMi00MDcwLTlmZjktNDI0M2RlY2FkMzYw
LzEvdGZyc1M0MlpMZGE1elltb1NKMDhPbVVxN05JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYiX9rvK
JsIyqQwqtXBs4vWpOrluXQMv8Cn0tqT1lnqykmrB9ZmnKl1G9ssts2LWbgEQG3kZ
0RIutc8TC8265AAFQsYuyZq89GylDRIy7U4mDXp3irBiV+gF0L5ZW71r+3F6e6n8
QGWY7zV+w66J7ScQo5ICTWi1qws3sBaGlBSPaid6bBxESn1xOrAnGWq4nxv4sv5s
EtZG1wyTISxjP7hswYea9RZoBTDQPGrPBKIKZ+QnfCMpLP/YJLWUcnZKJUKgA3GH
HLugopoSG7UbPYn4FP+VXwo6770hKhVuzEt+OlyU8qqg2taMgxZfKj6ilfn0y51L
er4A7Qo85rsLHw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:17:27 2025 by rpki-client