Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: j8dMwTfTn/Yt+vjz7HYx+Ym6GLcevsNFDKfWDxJX3hw=
Subject key identifier: 76:37:AA:DE:8D:49:AB:B3:6F:2D:6E:38:C7:F8:BC:8A:D5:B2:10:FF
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 0199FBEB2448D7917E5DBF5CBB042DAE0B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 07B9
Signing time: Sun 19 Oct 2025 10:01:55 +0000
Manifest this update: Sun 19 Oct 2025 10:01:55 +0000
Manifest next update: Mon 20 Oct 2025 10:01:55 +0000
Files and hashes: 1: G4FFwIyiIU29W95QZk9-MWiLljM.roa (hash: iDaSzS67wgh1om9NMNs4mTJZEfMH7AGf6ifeuTsPDRg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: hFcuS01tPjVURzGCKm7HguymXpJQize2rOwzGlaY9Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:24:48:d7:91:7e:5d:bf:5c:bb:04:2d:ae:0b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Oct 19 10:01:55 2025 GMT
Not After : Oct 20 10:01:55 2025 GMT
Subject: CN=7637aade8d49abb36f2d6e38c7f8bc8ad5b210ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fe:7c:d8:50:ee:75:fe:55:b1:2a:d2:92:d5:
4a:e1:1c:58:ed:06:33:e2:5c:8f:95:36:9c:df:cc:
7b:73:fa:c8:87:49:ec:16:a3:3d:ed:7e:66:56:31:
5a:9b:5e:47:7b:b5:78:3a:75:ee:be:aa:e3:e9:62:
2b:6e:f0:35:14:56:32:bf:97:48:7f:20:ea:4f:a2:
8f:00:53:38:48:49:18:4f:3a:2f:f4:ac:c0:5f:a5:
2d:2b:d0:f4:8d:e8:07:a0:1e:97:25:35:17:0a:78:
cf:63:65:3a:f4:ef:33:9b:66:4f:73:1f:2a:6a:35:
c2:2f:aa:26:af:52:60:14:59:60:5c:a3:28:59:c1:
6b:b7:88:36:d8:08:c7:1e:ea:ee:6e:99:a8:a6:1c:
8e:87:aa:6f:e2:1f:08:70:7a:d7:07:f4:81:5c:38:
a4:d6:a4:69:07:61:3e:52:58:42:b1:0f:be:1e:15:
c0:ee:5a:cd:79:11:cb:fb:e6:46:d8:9e:cf:da:d5:
9b:3c:8b:b0:c8:05:15:87:87:c7:84:fa:42:74:70:
77:6a:b2:0f:60:d5:ae:ca:9a:9a:bf:9a:17:4d:c1:
69:d3:33:0d:71:c7:c4:4e:d2:4b:6d:29:4e:e9:3b:
13:c4:22:88:2e:55:a7:ce:82:32:de:92:eb:b3:36:
90:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:37:AA:DE:8D:49:AB:B3:6F:2D:6E:38:C7:F8:BC:8A:D5:B2:10:FF
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a7:ee:b3:8d:df:60:20:53:23:92:7a:b5:a4:2e:43:ed:37:
bb:28:4d:5e:6b:ef:3e:8b:8c:4c:49:3d:77:45:31:81:82:bc:
2a:b3:4b:85:3e:0c:80:d5:e9:33:9d:3e:73:6f:5a:63:67:37:
d0:0e:c3:b0:0d:8a:f6:b9:ba:f7:05:08:23:7f:91:73:26:38:
54:85:36:68:7c:ab:bd:91:81:d9:0a:a5:d7:a1:5c:b7:2b:72:
b7:31:5b:60:46:e4:aa:0d:9a:9f:7a:cb:32:d7:15:ff:b0:83:
95:03:c9:8b:5a:58:cf:19:96:bd:d1:02:60:a4:9b:30:95:71:
7e:ae:d4:55:09:50:15:f3:4c:4a:04:2f:63:60:14:5a:ce:9b:
86:0d:33:18:a2:53:5e:68:71:2d:d5:e9:15:f6:f5:c9:87:e3:
62:9b:11:a0:c7:a7:27:a0:18:c9:c7:4b:3b:ca:83:26:92:0c:
0c:ac:39:56:4a:5c:70:65:85:e5:43:dd:05:e4:2e:5a:49:fa:
bf:e4:19:e5:3d:c9:e0:aa:bc:bf:b8:19:0e:56:f2:01:ca:32:
4e:e2:4c:8e:33:13:52:2c:21:1b:28:c6:b2:85:ff:d3:39:31:
f1:18:94:84:65:ca:f5:e8:db:e4:2a:a2:9c:0d:ea:1e:83:42:
c9:ab:28:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76yRI15F+Xb9cuwQtrguWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTNhMmIzZmI4M2Q4NmM3ODA2Y2MwNjYwZDgyOTExOWQ5
Mzc1YjQwHhcNMjUxMDE5MTAwMTU1WhcNMjUxMDIwMTAwMTU1WjAzMTEwLwYDVQQD
Eyg3NjM3YWFkZThkNDlhYmIzNmYyZDZlMzhjN2Y4YmM4YWQ1YjIxMGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5P582FDudf5VsSrSktVK4RxY7QYz
4lyPlTac38x7c/rIh0nsFqM97X5mVjFam15He7V4OnXuvqrj6WIrbvA1FFYyv5dI
fyDqT6KPAFM4SEkYTzov9KzAX6UtK9D0jegHoB6XJTUXCnjPY2U69O8zm2ZPcx8q
ajXCL6omr1JgFFlgXKMoWcFrt4g22AjHHurubpmophyOh6pv4h8IcHrXB/SBXDik
1qRpB2E+UlhCsQ++HhXA7lrNeRHL++ZG2J7P2tWbPIuwyAUVh4fHhPpCdHB3arIP
YNWuypqav5oXTcFp0zMNccfETtJLbSlO6TsTxCKILlWnzoIy3pLrszaQEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHY3qt6NSauzby1uOMf4vIrVshD/MB8GA1UdIwQY
MBaAFLRTorP7g9hseAbMBmDYKRGdk3W0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iZjc0OGQtYzRjYS00ZmQxLWE1OWQt
NDA2MGYyMTFmM2MzLzEvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9iZjc0OGQtYzRjYS00ZmQxLWE1OWQtNDA2MGYyMTFmM2Mz
LzEvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6fus43f
YCBTI5J6taQuQ+03uyhNXmvvPouMTEk9d0UxgYK8KrNLhT4MgNXpM50+c29aY2c3
0A7DsA2K9rm69wUII3+RcyY4VIU2aHyrvZGB2Qql16FctytytzFbYEbkqg2an3rL
MtcV/7CDlQPJi1pYzxmWvdECYKSbMJVxfq7UVQlQFfNMSgQvY2AUWs6bhg0zGKJT
XmhxLdXpFfb1yYfjYpsRoMenJ6AYycdLO8qDJpIMDKw5VkpccGWF5UPdBeQuWkn6
v+QZ5T3J4Kq8v7gZDlbyAcoyTuJMjjMTUiwhGyjGsoX/0zkx8RiUhGXK9ejb5Cqi
nA3qHoNCyasoDA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:54 2025 by rpki-client