Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
File: T5AEs7-KHhe9YGbgUYltO-vWaXM.mft (raw, json)
Hash identifier: ycZfDiaXNakdHJc9/gHiYI7Xt0KkI4mZRq38lGaNMcQ=
Subject key identifier: 49:23:89:F3:EE:A1:85:36:2E:0F:B5:CF:9E:A7:AA:F9:D0:34:30:48
Authority key identifier: 4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73
Certificate issuer: /CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
Certificate serial: 0199FC58479780A47B8DA4491B7CFFAAE8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
Manifest number: 0255
Signing time: Sun 19 Oct 2025 12:01:07 +0000
Manifest this update: Sun 19 Oct 2025 12:01:07 +0000
Manifest next update: Mon 20 Oct 2025 12:01:07 +0000
Files and hashes: 1: 52rM1TLXeNL9F-vxMnLogxZvGbg.roa (hash: t74CQPsg3SU8+YzT6bR/4fFoJ3HTMThAu9/OMJSg+7c=)
2: T5AEs7-KHhe9YGbgUYltO-vWaXM.crl (hash: Z97B93HjHmY2XIO3EgiWi2ydIA84j3OjntKoT0CWrXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:47:97:80:a4:7b:8d:a4:49:1b:7c:ff:aa:e8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
Validity
Not Before: Oct 19 12:01:07 2025 GMT
Not After : Oct 20 12:01:07 2025 GMT
Subject: CN=492389f3eea185362e0fb5cf9ea7aaf9d0343048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:7d:66:fc:04:64:c6:a9:d1:de:04:f3:7f:
1a:0e:f6:00:5e:e6:40:89:ff:70:b2:5d:e2:32:8d:
ec:b1:45:14:1e:73:b2:77:85:86:c2:8c:d9:33:a3:
fe:75:28:70:b1:39:e2:6c:fa:cc:07:da:ca:b6:f6:
00:37:ae:c8:39:54:5e:64:f4:22:0e:04:be:ee:53:
db:2b:ab:03:32:f2:88:73:7d:0b:62:ca:1e:0c:1c:
f4:03:13:4d:0a:c1:87:8f:62:2e:c2:ff:e0:01:ad:
3a:9e:ec:06:51:5a:68:5a:d6:0c:02:21:ed:1c:41:
49:49:aa:40:78:e9:85:53:90:eb:37:d3:ae:62:c4:
92:94:9f:4f:2b:2d:91:b2:79:b8:26:ee:2b:03:75:
cc:3d:70:03:c9:ef:78:94:5e:04:f8:9d:52:a9:92:
e1:74:49:f7:83:fb:5e:73:f3:a4:27:98:80:15:71:
68:06:9f:9c:35:12:2a:4a:65:6a:d0:a9:bc:11:84:
b1:1b:e2:96:d2:78:c7:29:4c:fd:ec:28:81:3e:13:
ad:9e:57:ab:b0:92:f3:e4:b2:eb:91:10:d7:76:13:
45:05:f3:ff:ea:2d:a6:25:14:d7:63:c9:bf:39:2d:
4b:1f:75:f1:44:31:27:a7:dd:6a:ac:9c:15:88:56:
ae:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:23:89:F3:EE:A1:85:36:2E:0F:B5:CF:9E:A7:AA:F9:D0:34:30:48
X509v3 Authority Key Identifier:
keyid:4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:43:b0:4c:dc:a2:cf:cc:ba:67:06:23:26:4c:7c:2a:d9:88:
74:5a:6e:81:fb:3c:8a:a6:dc:3d:cf:4e:ae:c4:87:09:70:b0:
a8:5f:b3:2c:6c:71:07:82:88:36:f9:62:87:e6:a1:28:cb:ee:
95:6d:e5:c4:c9:80:7a:a7:f1:a5:7c:e1:0e:b5:ad:21:4f:4d:
09:90:17:46:88:85:a8:83:36:bd:64:89:9c:7e:5d:62:c9:cd:
a0:0d:41:4b:9b:6b:8e:50:43:b2:4b:2b:8e:e3:db:11:70:b6:
57:57:cd:6e:9c:fd:df:3c:a8:25:de:a8:6d:78:1f:8e:46:5d:
a2:0d:d5:36:0b:23:f4:0d:0e:27:e9:ad:18:c5:52:22:2d:d1:
c1:32:9a:2d:92:39:2c:db:7c:f1:8c:e2:64:21:9e:f1:f4:3d:
9e:90:c0:3c:b3:50:bf:d7:0a:38:01:ad:e0:d7:bd:d0:f8:a5:
0c:ff:08:51:66:12:45:0b:8b:8c:83:34:61:c3:f5:3f:65:68:
75:a4:94:aa:70:3f:70:fa:82:71:54:78:b1:6a:9e:17:2b:ca:
33:38:a0:b7:77:55:cd:03:da:1c:cf:82:c8:62:52:32:ff:2d:
7d:70:6a:df:65:a7:93:a3:67:d7:bb:21:7f:f4:70:a4:a5:db:
72:34:d7:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WEeXgKR7jaRJG3z/quisMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTAwNGIzYmY4YTFlMTdiZDYwNjZlMDUxODk2ZDNiZWJk
NjY5NzMwHhcNMjUxMDE5MTIwMTA3WhcNMjUxMDIwMTIwMTA3WjAzMTEwLwYDVQQD
Eyg0OTIzODlmM2VlYTE4NTM2MmUwZmI1Y2Y5ZWE3YWFmOWQwMzQzMDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC99ZvwEZMap0d4E838aDvYAXuZA
if9wsl3iMo3ssUUUHnOyd4WGwozZM6P+dShwsTnibPrMB9rKtvYAN67IOVReZPQi
DgS+7lPbK6sDMvKIc30LYsoeDBz0AxNNCsGHj2Iuwv/gAa06nuwGUVpoWtYMAiHt
HEFJSapAeOmFU5DrN9OuYsSSlJ9PKy2Rsnm4Ju4rA3XMPXADye94lF4E+J1SqZLh
dEn3g/tec/OkJ5iAFXFoBp+cNRIqSmVq0Km8EYSxG+KW0njHKUz97CiBPhOtnler
sJLz5LLrkRDXdhNFBfP/6i2mJRTXY8m/OS1LH3XxRDEnp91qrJwViFau6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkjifPuoYU2Lg+1z56nqvnQNDBIMB8GA1UdIwQY
MBaAFE+QBLO/ih4XvWBm4FGJbTvr1mlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVBRXM3LUtIaGU5WUdiZ1VZbHRPLXZXYVhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lYjNlMDAtZTJhYS00NDdmLTkxZjMt
OGE1NDVjYjM1YTlhLzEvVDVBRXM3LUtIaGU5WUdiZ1VZbHRPLXZXYVhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9lYjNlMDAtZTJhYS00NDdmLTkxZjMtOGE1NDVjYjM1YTlh
LzEvVDVBRXM3LUtIaGU5WUdiZ1VZbHRPLXZXYVhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEOwTNyi
z8y6ZwYjJkx8KtmIdFpugfs8iqbcPc9OrsSHCXCwqF+zLGxxB4KINvlih+ahKMvu
lW3lxMmAeqfxpXzhDrWtIU9NCZAXRoiFqIM2vWSJnH5dYsnNoA1BS5trjlBDsksr
juPbEXC2V1fNbpz93zyoJd6obXgfjkZdog3VNgsj9A0OJ+mtGMVSIi3RwTKaLZI5
LNt88YziZCGe8fQ9npDAPLNQv9cKOAGt4Ne90PilDP8IUWYSRQuLjIM0YcP1P2Vo
daSUqnA/cPqCcVR4sWqeFyvKMzigt3dVzQPaHM+CyGJSMv8tfXBq32Wnk6Nn17sh
f/RwpKXbcjTXIA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:46 2025 by rpki-client