Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: UXEI828JA/flTry9sl0HmnFn+BrkwWiWy05UippqD+o=
Subject key identifier: 64:7D:99:15:F6:55:D0:20:D9:39:C1:BD:4C:F8:23:0A:E3:DE:1E:02
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 0199FB457E10F0900BE0FE285BC448F5940A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 08CE
Signing time: Sun 19 Oct 2025 07:00:59 +0000
Manifest this update: Sun 19 Oct 2025 07:00:59 +0000
Manifest next update: Mon 20 Oct 2025 07:00:59 +0000
Files and hashes: 1: JyF5UhD9cVqjqquiR-hK995tZzw.roa (hash: 5AXS3YhQ0/Ke6SUL+/AhBjypj7cC6zgjHgX8v/ujINo=)
2: pTQKkEXtOvhz7EuIYUqt-o1qzFk.roa (hash: OW+foSbaeoc9zsDW/uMWemQINFvQAo39Gw9c3A0iOPI=)
3: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: 7vLrCmrzg4XRAeqaZbdLxy90A83p/gbq4YIXG8eqsDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:7e:10:f0:90:0b:e0:fe:28:5b:c4:48:f5:94:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Oct 19 07:00:59 2025 GMT
Not After : Oct 20 07:00:59 2025 GMT
Subject: CN=647d9915f655d020d939c1bd4cf8230ae3de1e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:bd:b6:1c:24:76:3b:be:4c:5e:ec:f6:7e:
3e:94:fd:a4:6b:db:64:0e:b9:91:e2:71:1a:f9:2b:
e0:b8:68:17:ed:b0:b5:e7:7b:6a:84:11:70:a3:2e:
cb:8b:be:d0:5e:ab:a5:41:98:e0:f2:04:f7:46:52:
24:b6:d5:40:28:b8:8d:8d:66:6b:69:11:47:b8:b6:
9a:6f:43:ca:01:45:42:bb:ed:3f:bf:c6:17:fc:bc:
f4:ce:76:ea:47:ea:df:a4:31:6c:e7:03:e0:65:69:
76:ed:01:b7:f8:d2:d3:56:cc:f7:88:3e:77:22:b3:
31:6b:32:6a:49:6b:ed:42:c9:08:19:52:da:b5:3f:
47:16:d1:27:01:1e:48:bb:92:63:d9:01:10:87:67:
38:a4:1c:26:9b:12:00:72:3d:7e:ed:3a:26:76:b1:
44:93:26:1b:37:15:a5:12:64:51:37:52:d4:e3:3e:
a0:42:a9:7a:eb:43:98:61:e4:ba:95:1c:d1:9e:1f:
9e:c2:75:81:3c:5e:23:cc:25:ad:ed:f8:07:ef:d3:
e9:ce:df:3a:b0:66:52:80:74:a4:f9:aa:07:6a:91:
96:ef:f0:68:4c:ef:5c:33:0d:9a:5c:46:ab:59:25:
a7:2d:c9:7b:43:91:30:aa:13:74:54:78:df:d7:1d:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7D:99:15:F6:55:D0:20:D9:39:C1:BD:4C:F8:23:0A:E3:DE:1E:02
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:37:20:60:fa:e6:1e:95:4c:6d:50:60:3f:04:28:96:ec:55:
62:f3:a0:fa:9e:40:b2:09:e3:dc:04:4e:b2:2b:c9:f0:4c:64:
53:61:7b:19:ee:96:d2:43:80:9f:e3:8d:5d:da:af:4b:b1:5b:
d7:9a:32:ec:55:d4:91:0c:7d:73:0a:23:39:97:43:da:92:76:
57:0d:3e:a0:40:89:26:46:2d:23:9b:f2:9a:98:d3:e4:b1:7b:
4f:41:4b:07:9d:ac:a5:a7:bf:fd:6c:b0:8b:07:cd:ba:f7:fc:
99:47:43:c1:37:6f:aa:a4:b6:a0:52:53:80:15:ef:d6:d3:09:
e0:89:e7:26:6e:53:66:ec:d0:3d:cf:ef:41:3e:b2:bd:ec:6e:
57:95:e2:ee:ad:c8:48:94:40:ab:10:e7:df:4c:8b:c7:5c:15:
ca:d3:7d:f1:4f:e6:cb:26:67:fc:3c:73:52:fd:19:d7:bf:ac:
d2:a4:61:74:65:16:ee:d1:bc:b4:e8:15:4f:be:bf:27:3b:42:
93:1d:2d:1d:d3:f6:2f:98:55:d4:04:f2:cc:da:71:33:b2:c3:
99:a0:d0:fc:c2:b7:8e:fb:5e:26:6b:56:be:d9:78:9c:2c:f9:
f2:2c:ab:f5:5a:c4:8f:74:6d:bb:93:83:83:6b:97:2b:ca:fe:
74:3b:20:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RX4Q8JAL4P4oW8RI9ZQKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MDI2Yzk5NzQwOTJlMjIwNTQyNDAxMjgxZjliZGZkMzU2
YzI4NDIwHhcNMjUxMDE5MDcwMDU5WhcNMjUxMDIwMDcwMDU5WjAzMTEwLwYDVQQD
Eyg2NDdkOTkxNWY2NTVkMDIwZDkzOWMxYmQ0Y2Y4MjMwYWUzZGUxZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1S9thwkdju+TF7s9n4+lP2ka9tk
DrmR4nEa+SvguGgX7bC153tqhBFwoy7Li77QXqulQZjg8gT3RlIkttVAKLiNjWZr
aRFHuLaab0PKAUVCu+0/v8YX/Lz0znbqR+rfpDFs5wPgZWl27QG3+NLTVsz3iD53
IrMxazJqSWvtQskIGVLatT9HFtEnAR5Iu5Jj2QEQh2c4pBwmmxIAcj1+7TomdrFE
kyYbNxWlEmRRN1LU4z6gQql660OYYeS6lRzRnh+ewnWBPF4jzCWt7fgH79Ppzt86
sGZSgHSk+aoHapGW7/BoTO9cMw2aXEarWSWnLcl7Q5EwqhN0VHjf1x3TSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGR9mRX2VdAg2TnBvUz4Iwrj3h4CMB8GA1UdIwQY
MBaAFLUCbJl0CS4iBUJAEoH5vf01bChCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYt
ZWVhMjY3YTU4NDk0LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYtZWVhMjY3YTU4NDk0
LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzcgYPrm
HpVMbVBgPwQoluxVYvOg+p5Asgnj3AROsivJ8ExkU2F7Ge6W0kOAn+ONXdqvS7Fb
15oy7FXUkQx9cwojOZdD2pJ2Vw0+oECJJkYtI5vympjT5LF7T0FLB52spae//Wyw
iwfNuvf8mUdDwTdvqqS2oFJTgBXv1tMJ4InnJm5TZuzQPc/vQT6yvexuV5Xi7q3I
SJRAqxDn30yLx1wVytN98U/myyZn/DxzUv0Z17+s0qRhdGUW7tG8tOgVT76/JztC
kx0tHdP2L5hV1ATyzNpxM7LDmaDQ/MK3jvteJmtWvtl4nCz58iyr9VrEj3Rtu5OD
g2uXK8r+dDsgag==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:09 2025 by rpki-client