Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
File: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft (raw, json)
Hash identifier: LLDhN7rFhaA98odBxBHE+AEk7pKRQgf4D/xM2f3v6Rg=
Subject key identifier: 9A:14:F4:D4:35:F6:CE:17:41:A1:38:BE:A7:FA:37:A6:3A:10:BA:36
Authority key identifier: B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
Certificate issuer: /CN=b40c95867c3084c4c16a2febb46651090f3247e4
Certificate serial: 0199FB45943C835E87B6E24983B16C032D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
Manifest number: 0D5F
Signing time: Sun 19 Oct 2025 07:01:05 +0000
Manifest this update: Sun 19 Oct 2025 07:01:05 +0000
Manifest next update: Mon 20 Oct 2025 07:01:05 +0000
Files and hashes: 1: lEEZzzybqBVZbE52j1UTaBha8S8.roa (hash: M0ghNe8I1TZs4KtvQ8xKIi7A+x2ciHjaRyld8EsOpko=)
2: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl (hash: Ts5NKtiB+2e1k2Mle/0auszVXWYC7YjtTBoDwGJGvao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:94:3c:83:5e:87:b6:e2:49:83:b1:6c:03:2d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40c95867c3084c4c16a2febb46651090f3247e4
Validity
Not Before: Oct 19 07:01:05 2025 GMT
Not After : Oct 20 07:01:05 2025 GMT
Subject: CN=9a14f4d435f6ce1741a138bea7fa37a63a10ba36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:b1:13:30:a6:af:62:c6:56:37:9c:8b:cf:
c9:72:5b:ac:cf:e2:34:97:0d:46:a1:53:e9:e2:49:
1a:44:aa:7d:58:ba:2f:6a:bc:e0:f2:75:6c:ce:c5:
4a:f8:61:a0:3b:13:c0:ec:98:79:78:cc:16:06:33:
4e:19:39:43:b4:5b:5f:9b:27:c6:d0:95:f7:4c:8c:
4c:4a:8f:42:71:3a:51:50:f9:f6:1e:79:5a:95:f8:
91:66:f9:bd:11:fe:a6:a5:24:e2:ca:ad:55:18:75:
8f:4c:28:5c:f9:43:0c:9c:89:e6:b5:a5:26:eb:b6:
69:5f:64:98:44:5d:e1:23:29:19:ef:4b:77:19:e1:
17:62:f1:07:30:f5:83:7c:74:20:b5:3e:e3:db:78:
d3:7f:c8:2c:dc:9f:38:a4:96:7d:fc:40:42:8c:ea:
45:e5:83:73:a5:df:6a:51:e1:8a:6d:d7:c1:79:46:
0b:e6:40:29:83:37:7e:1b:40:33:05:40:b4:66:a8:
6a:c2:f0:cf:64:02:67:83:75:6a:b7:92:f6:c3:f5:
ec:a2:5d:0f:f4:d2:bd:36:72:f7:46:a4:d9:00:2c:
d5:6f:93:29:69:19:13:d5:a9:c6:18:d6:5f:a5:6f:
50:fd:4b:ad:5c:d9:8e:f5:01:ac:7d:88:ea:d7:08:
2b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:14:F4:D4:35:F6:CE:17:41:A1:38:BE:A7:FA:37:A6:3A:10:BA:36
X509v3 Authority Key Identifier:
keyid:B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:53:6d:3e:5e:d4:cd:47:1c:32:cc:b3:0f:36:ca:ed:0f:6d:
71:5d:44:03:f2:47:38:43:26:7c:43:97:c4:c7:6d:20:3f:c4:
8a:dd:39:f3:d0:ad:85:1a:29:62:a4:42:5d:e8:7a:ae:a1:44:
b9:73:f8:60:5e:6b:94:7e:51:82:fd:67:28:b9:61:52:9a:35:
5a:9c:60:ee:34:c5:8d:30:bd:9e:c5:be:71:a7:92:9a:0b:ea:
8d:34:1f:12:29:c7:a9:e6:43:03:d4:b8:89:e3:a2:1c:ba:f5:
ef:40:99:b7:d0:fa:13:b8:01:8b:20:3f:d4:77:a4:d9:cd:bf:
04:b1:14:78:7f:83:3e:47:12:fb:0d:d5:56:04:73:d3:b0:eb:
24:00:c8:1c:5d:3c:71:c5:3e:4e:16:38:26:da:e3:f4:01:52:
b9:29:94:dc:e2:b5:ec:89:11:95:06:a4:34:55:24:ee:8d:54:
43:20:25:58:16:5d:f4:17:c2:6d:31:d1:9f:0f:6f:2e:cc:ce:
7c:d0:44:9b:c0:38:11:41:73:6c:35:81:c5:a2:c4:18:29:ea:
fc:ed:be:c0:be:32:22:f5:33:2f:74:10:e4:34:31:ea:72:ba:
c1:d0:0f:64:cb:03:23:61:ab:a7:2f:52:c2:bf:02:f9:4b:8c:
ef:a4:aa:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RZQ8g16HtuJJg7FsAy17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MGM5NTg2N2MzMDg0YzRjMTZhMmZlYmI0NjY1MTA5MGYz
MjQ3ZTQwHhcNMjUxMDE5MDcwMTA1WhcNMjUxMDIwMDcwMTA1WjAzMTEwLwYDVQQD
Eyg5YTE0ZjRkNDM1ZjZjZTE3NDFhMTM4YmVhN2ZhMzdhNjNhMTBiYTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZyxEzCmr2LGVjeci8/Jclusz+I0
lw1GoVPp4kkaRKp9WLovarzg8nVszsVK+GGgOxPA7Jh5eMwWBjNOGTlDtFtfmyfG
0JX3TIxMSo9CcTpRUPn2HnlalfiRZvm9Ef6mpSTiyq1VGHWPTChc+UMMnInmtaUm
67ZpX2SYRF3hIykZ70t3GeEXYvEHMPWDfHQgtT7j23jTf8gs3J84pJZ9/EBCjOpF
5YNzpd9qUeGKbdfBeUYL5kApgzd+G0AzBUC0ZqhqwvDPZAJng3Vqt5L2w/Xsol0P
9NK9NnL3RqTZACzVb5MpaRkT1anGGNZfpW9Q/UutXNmO9QGsfYjq1wgrvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoU9NQ19s4XQaE4vqf6N6Y6ELo2MB8GA1UdIwQY
MBaAFLQMlYZ8MITEwWov67RmUQkPMkfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEF5Vmhud3doTVRCYWlfcnRHWlJDUTh5Ui1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zMTgyY2UtOWQyZi00YjIyLWFiY2Qt
YWNkOWEyZWNhMzNmLzEvdEF5Vmhud3doTVRCYWlfcnRHWlJDUTh5Ui1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8zMTgyY2UtOWQyZi00YjIyLWFiY2QtYWNkOWEyZWNhMzNm
LzEvdEF5Vmhud3doTVRCYWlfcnRHWlJDUTh5Ui1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFNtPl7U
zUccMsyzDzbK7Q9tcV1EA/JHOEMmfEOXxMdtID/Eit0589CthRopYqRCXeh6rqFE
uXP4YF5rlH5Rgv1nKLlhUpo1Wpxg7jTFjTC9nsW+caeSmgvqjTQfEinHqeZDA9S4
ieOiHLr170CZt9D6E7gBiyA/1Hek2c2/BLEUeH+DPkcS+w3VVgRz07DrJADIHF08
ccU+ThY4Jtrj9AFSuSmU3OK17IkRlQakNFUk7o1UQyAlWBZd9BfCbTHRnw9vLszO
fNBEm8A4EUFzbDWBxaLEGCnq/O2+wL4yIvUzL3QQ5DQx6nK6wdAPZMsDI2Grpy9S
wr8C+UuM76SqZA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:40 2025 by rpki-client