Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: sdPjKb0yKmEduo0M+t3z5VHlBz5Z83BFnSxK4Wqz3hw=
Subject key identifier: D5:A4:DF:CD:3E:93:0D:E8:1E:82:AD:A6:9C:5C:38:C0:33:30:92:B9
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 0199FBEAF5190C243EA4E288DF66DD08FA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:01:43 +0000
Manifest this update: Sun 19 Oct 2025 10:01:43 +0000
Manifest next update: Mon 20 Oct 2025 10:01:43 +0000
Files and hashes: 1: 0WgKhjREJrZPp5eivCc5Ledwy08.roa (hash: g1cMz695Vu5b1v4C7JspTc1yMqOrx6XRuND1g3o80ZU=)
2: c4XFDsuP3oiOPuoN5dW6Mp7swps.roa (hash: RShjOJ6yyL7rh4X46zYbqRc79tC1/dWZp0uZXHk88jM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: ImSjFbTFtLvFusGc3ffmA/c0TX4j3VPXSD20vogy2ng=)
4: x8qy1V86ggKXIYJ47lPp7-bEQ08.roa (hash: Tid2ObTc99hFnnGIy0KhVlQV4ZEsaX9AQcsvz/R/sw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f5:19:0c:24:3e:a4:e2:88:df:66:dd:08:fa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Oct 19 10:01:43 2025 GMT
Not After : Oct 20 10:01:43 2025 GMT
Subject: CN=d5a4dfcd3e930de81e82ada69c5c38c0333092b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6e:dd:a2:7e:b2:54:a8:88:77:99:c3:92:c7:
2a:9d:ee:fd:29:92:f5:05:fb:46:dc:b3:4d:91:93:
f1:92:da:4c:2c:0e:d2:2c:b4:9d:95:08:4b:5d:ec:
ab:45:8a:63:24:6d:17:ad:13:d2:f1:39:71:f2:c8:
81:d9:57:87:01:08:16:49:a2:c7:ed:b2:c2:86:dd:
28:eb:65:a8:bb:31:ea:33:bc:97:59:6f:0b:6b:2f:
04:16:6b:84:99:18:e8:98:1a:77:0f:01:02:94:42:
5b:4b:e0:c4:0c:f0:68:35:04:ca:d2:fc:23:ad:8a:
7a:2a:51:d1:33:aa:a1:5b:7a:55:5b:b5:44:7d:d5:
1e:6c:96:6c:d7:28:aa:95:b1:28:03:cc:2c:b0:1b:
5d:8c:1e:55:b1:97:46:22:65:9e:a6:b0:77:a2:b4:
6c:28:d6:22:db:ac:5b:ab:d0:3f:e3:0c:f2:d1:b0:
87:22:dc:ff:98:80:26:2e:ba:fe:72:97:ac:d7:71:
db:29:66:5b:c3:9d:63:75:a5:f8:31:6b:68:5c:b7:
ee:cc:22:8f:23:7b:f0:57:9e:90:16:9f:4f:1c:c5:
67:40:ff:73:59:f0:62:6c:22:ce:cf:04:aa:35:e6:
d0:03:96:57:cb:be:fc:58:19:b2:bf:57:c6:08:c3:
0d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A4:DF:CD:3E:93:0D:E8:1E:82:AD:A6:9C:5C:38:C0:33:30:92:B9
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7d:87:e1:0a:eb:0e:52:cc:45:d7:0e:ce:88:e8:f4:da:e1:
4a:19:7d:95:57:3f:dc:7e:1b:2f:3a:9b:34:6e:6a:75:1b:3b:
5e:2c:df:74:00:13:1a:0b:34:39:c7:82:e2:e9:8f:22:99:a8:
6e:de:60:31:ac:3b:12:d9:ad:f8:59:d3:22:af:cb:9d:c3:17:
8f:7d:45:f9:df:54:9d:9e:6a:f6:2a:32:85:aa:47:b7:a3:df:
c7:e1:0f:09:9e:79:be:92:a7:ca:b1:0c:d8:fc:b0:7a:e4:2d:
56:62:28:08:f2:a7:63:bd:55:fb:7b:4e:07:79:3d:c1:1e:4f:
e9:f7:94:46:5f:b5:ea:33:c3:d0:ee:2a:96:4d:21:54:51:e3:
30:89:e7:5d:79:1e:5a:7a:bb:3a:e6:c5:67:12:d7:ff:8c:22:
bb:47:0e:b4:5d:db:66:b2:a4:00:d8:dc:dd:86:ea:de:18:43:
10:16:06:20:ce:87:e3:60:02:13:b6:db:d4:dd:d9:66:73:1f:
da:df:8d:ef:95:e6:9f:cf:0d:02:85:5d:b7:fe:33:e9:d2:14:
ee:aa:d4:08:5a:7d:dc:e3:34:61:91:64:be:ef:44:d6:58:1c:
79:a7:e0:60:76:17:0f:d7:52:85:73:04:30:94:63:f1:f6:2a:
04:64:be:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76vUZDCQ+pOKI32bdCPpBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZWM2YzBhNWViZWM1ODE3ZDkxYjkxZTc5YTZiYzYxMzJl
YjlkMmMwHhcNMjUxMDE5MTAwMTQzWhcNMjUxMDIwMTAwMTQzWjAzMTEwLwYDVQQD
EyhkNWE0ZGZjZDNlOTMwZGU4MWU4MmFkYTY5YzVjMzhjMDMzMzA5MmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA527don6yVKiId5nDkscqne79KZL1
BftG3LNNkZPxktpMLA7SLLSdlQhLXeyrRYpjJG0XrRPS8Tlx8siB2VeHAQgWSaLH
7bLCht0o62WouzHqM7yXWW8Lay8EFmuEmRjomBp3DwEClEJbS+DEDPBoNQTK0vwj
rYp6KlHRM6qhW3pVW7VEfdUebJZs1yiqlbEoA8wssBtdjB5VsZdGImWeprB3orRs
KNYi26xbq9A/4wzy0bCHItz/mIAmLrr+cpes13HbKWZbw51jdaX4MWtoXLfuzCKP
I3vwV56QFp9PHMVnQP9zWfBibCLOzwSqNebQA5ZXy778WBmyv1fGCMMNXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWk380+kw3oHoKtppxcOMAzMJK5MB8GA1UdIwQY
MBaAFLTsbApevsWBfZG5HnmmvGEy650sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWIt
MTNmYjdhNTEzMGNhLzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWItMTNmYjdhNTEzMGNh
LzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAH2H4Qrr
DlLMRdcOzojo9NrhShl9lVc/3H4bLzqbNG5qdRs7XizfdAATGgs0OceC4umPIpmo
bt5gMaw7Etmt+FnTIq/LncMXj31F+d9UnZ5q9ioyhapHt6Pfx+EPCZ55vpKnyrEM
2PyweuQtVmIoCPKnY71V+3tOB3k9wR5P6feURl+16jPD0O4qlk0hVFHjMInnXXke
Wnq7OubFZxLX/4wiu0cOtF3bZrKkANjc3Ybq3hhDEBYGIM6H42ACE7bb1N3ZZnMf
2t+N75Xmn88NAoVdt/4z6dIU7qrUCFp93OM0YZFkvu9E1lgceafgYHYXD9dShXME
MJRj8fYqBGS+RQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:47 2025 by rpki-client