Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
File: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft (raw, json)
Hash identifier: h4Ebxo0JAsFSnbkcn6o3tBe2f9OUc8Ew3TfwyFH3n58=
Subject key identifier: 23:32:23:29:D9:C0:94:E0:A0:D7:D8:66:3E:C1:7B:01:DF:02:0F:E4
Authority key identifier: 4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
Certificate issuer: /CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Certificate serial: 0199FE10220BEA52172B7C15D8D9ED79C974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
Manifest number: 16BE
Signing time: Sun 19 Oct 2025 20:01:34 +0000
Manifest this update: Sun 19 Oct 2025 20:01:34 +0000
Manifest next update: Mon 20 Oct 2025 20:01:34 +0000
Files and hashes: 1: PHU8bveJ4V86SqIQTMnWW43DqBE.roa (hash: 3OhBnf8f8HGM5ArwPPNt9UU72cQZdAdKTbSA4Z11k2Y=)
2: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl (hash: QJyFkh8Jq/dwFanTbUkudJr7ZsfiqUXp6xUjblCifRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:22:0b:ea:52:17:2b:7c:15:d8:d9:ed:79:c9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Validity
Not Before: Oct 19 20:01:34 2025 GMT
Not After : Oct 20 20:01:34 2025 GMT
Subject: CN=23322329d9c094e0a0d7d8663ec17b01df020fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:80:df:ca:7a:44:0d:b7:2f:49:a8:20:cf:
5a:a6:0e:e0:4a:30:e7:1c:51:cd:1f:f1:f9:5b:25:
79:ca:67:d4:94:4d:16:71:8a:2b:d9:15:1e:17:fd:
be:b5:8e:44:67:4f:3e:48:db:29:7b:82:7f:db:c4:
29:9c:78:b8:45:6e:20:a4:9b:f4:cf:06:69:92:17:
47:70:ef:3c:89:a5:bd:45:a4:e0:3f:ac:0b:5d:4b:
2c:1f:0d:ea:d0:87:6e:07:6e:74:d9:84:69:8c:9c:
8c:d6:96:65:7f:fb:6a:84:aa:3b:fc:c9:50:c3:81:
f1:90:52:4a:89:6a:57:35:9b:00:0e:84:aa:ef:58:
fa:5b:a6:54:10:23:4e:96:0d:04:91:71:f5:e2:46:
97:b3:d0:29:31:6d:51:7d:31:8e:80:7a:9f:2f:dc:
1a:3f:9d:2d:23:56:d2:8d:14:82:93:6b:bf:a8:0e:
de:7a:d0:c1:96:1e:a4:52:ff:4b:12:1a:cb:b5:85:
a3:8e:08:ad:f6:32:a7:19:8f:c8:4d:20:78:e3:55:
0e:20:0a:64:54:55:42:e8:40:90:59:da:03:66:c8:
41:9d:72:aa:fe:11:0c:7a:be:10:90:49:1e:50:f2:
80:27:b1:33:24:f6:a0:92:7e:15:58:5b:87:97:36:
01:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:32:23:29:D9:C0:94:E0:A0:D7:D8:66:3E:C1:7B:01:DF:02:0F:E4
X509v3 Authority Key Identifier:
keyid:4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8a:fe:f9:35:7a:a7:4c:48:80:51:ba:c5:2b:d5:43:72:c1:
d3:f9:7e:f4:01:96:e7:2c:4e:37:bf:73:46:2c:da:1e:7b:1a:
2b:6e:2d:57:c9:d6:b6:81:71:b4:bf:50:e2:4c:63:8b:7d:37:
5e:4b:1a:7d:c6:37:54:d6:34:4e:48:0d:c8:37:03:a1:dc:b1:
5f:94:5c:2f:41:b7:ee:e5:de:10:f0:7f:6f:78:59:02:8c:18:
80:b7:53:ad:7f:52:77:34:bc:27:d2:b7:e3:68:d9:87:d6:99:
ea:bd:1f:1c:a4:86:4a:00:2b:68:cb:17:0a:ff:f0:d8:b3:96:
4b:20:37:11:0c:80:8e:c8:50:5d:a7:aa:f1:d0:f2:79:ad:ec:
00:ea:97:7a:96:48:26:f5:ef:1a:e9:7f:70:f1:d8:95:2a:b2:
27:40:39:b6:a4:2f:b9:de:da:90:11:b2:58:5a:11:98:39:14:
0c:69:b3:67:7e:09:4b:1d:f3:85:d5:50:ad:3e:9e:a3:8d:44:
9b:2a:72:ee:3c:28:be:f3:36:06:68:00:d2:fb:f0:83:65:72:
8b:5f:41:f7:65:65:b7:8d:2f:1a:a0:9c:dc:cc:64:f7:ed:cd:
83:37:19:bb:09:e0:80:07:24:50:a3:a6:ed:5a:2c:d1:d2:09:
4d:18:bf:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+ECIL6lIXK3wV2Nntecl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOWQ2YzU1YmUxYmU4YTg0YWQyZGZkNWE3ZmZhNTg0OGY1
NGQ0MDkwHhcNMjUxMDE5MjAwMTM0WhcNMjUxMDIwMjAwMTM0WjAzMTEwLwYDVQQD
EygyMzMyMjMyOWQ5YzA5NGUwYTBkN2Q4NjYzZWMxN2IwMWRmMDIwZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKmA38p6RA23L0moIM9apg7gSjDn
HFHNH/H5WyV5ymfUlE0WcYor2RUeF/2+tY5EZ08+SNspe4J/28QpnHi4RW4gpJv0
zwZpkhdHcO88iaW9RaTgP6wLXUssHw3q0IduB2502YRpjJyM1pZlf/tqhKo7/MlQ
w4HxkFJKiWpXNZsADoSq71j6W6ZUECNOlg0EkXH14kaXs9ApMW1RfTGOgHqfL9wa
P50tI1bSjRSCk2u/qA7eetDBlh6kUv9LEhrLtYWjjgit9jKnGY/ITSB441UOIApk
VFVC6ECQWdoDZshBnXKq/hEMer4QkEkeUPKAJ7EzJPagkn4VWFuHlzYBBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMyIynZwJTgoNfYZj7BewHfAg/kMB8GA1UdIwQY
MBaAFEydbFW+G+ioStLf1af/pYSPVNQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEoxc1ZiNGI2S2hLMHRfVnBfLWxoSTlVMUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zZTc3NWQtYjExNy00MGRkLWFlNmEt
MmQ1MDJlOTU2YzA0LzEvVEoxc1ZiNGI2S2hLMHRfVnBfLWxoSTlVMUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zZTc3NWQtYjExNy00MGRkLWFlNmEtMmQ1MDJlOTU2YzA0
LzEvVEoxc1ZiNGI2S2hLMHRfVnBfLWxoSTlVMUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIr++TV6
p0xIgFG6xSvVQ3LB0/l+9AGW5yxON79zRizaHnsaK24tV8nWtoFxtL9Q4kxji303
XksafcY3VNY0TkgNyDcDodyxX5RcL0G37uXeEPB/b3hZAowYgLdTrX9SdzS8J9K3
42jZh9aZ6r0fHKSGSgAraMsXCv/w2LOWSyA3EQyAjshQXaeq8dDyea3sAOqXepZI
JvXvGul/cPHYlSqyJ0A5tqQvud7akBGyWFoRmDkUDGmzZ34JSx3zhdVQrT6eo41E
mypy7jwovvM2BmgA0vvwg2Vyi19B92Vlt40vGqCc3Mxk9+3NgzcZuwnggAckUKOm
7Vos0dIJTRi/UA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:39:27 2025 by rpki-client