Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
File: pTi7DCtB76jDsCBk68UvupLCNiY.mft (raw, json)
Hash identifier: EUXwRGlFrn5ckGhKV+qAHZxHORssY+FkecB5BxaPx8w=
Subject key identifier: 4A:4A:D8:62:B3:C8:27:00:3D:D2:82:76:DD:54:D5:9D:42:91:42:E0
Authority key identifier: A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
Certificate issuer: /CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Certificate serial: 0199FCFD5A161E454B5C7A63415A460BC1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
Manifest number: 12CD
Signing time: Sun 19 Oct 2025 15:01:25 +0000
Manifest this update: Sun 19 Oct 2025 15:01:25 +0000
Manifest next update: Mon 20 Oct 2025 15:01:25 +0000
Files and hashes: 1: DSyQL16gVyPuINIFuwqbtqDaLcQ.roa (hash: 4sWGWWc2NQ2B2oMwbMVn1NZgZ93cb0NJnNIgTj1CBqg=)
2: ldlRi9PG7yaWe_OISm5PxetZ-fs.roa (hash: zAtX/bKzY97x7lzgIkaYD8HV9V6BCkypXN+jO7OstUg=)
3: pTi7DCtB76jDsCBk68UvupLCNiY.crl (hash: RyTY9KhtaBMdhl8TjnYlu/1Snpl1Lsgi9YYKGm/epjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:5a:16:1e:45:4b:5c:7a:63:41:5a:46:0b:c1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Validity
Not Before: Oct 19 15:01:25 2025 GMT
Not After : Oct 20 15:01:25 2025 GMT
Subject: CN=4a4ad862b3c827003dd28276dd54d59d429142e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:ef:25:5c:d3:f4:75:31:26:fa:05:2c:24:
a1:9f:16:cc:5d:44:6c:4a:f5:dd:ae:46:1f:97:d2:
a7:3e:e5:52:82:67:ae:84:29:63:5e:b7:d5:98:4e:
b0:96:bf:cc:65:f2:03:46:9a:c5:a4:f8:a0:d3:ce:
26:35:82:2f:b3:66:b6:67:bc:4c:45:48:83:e8:21:
57:63:5a:1c:fa:e0:98:42:5d:d1:0d:d4:be:f3:70:
0c:33:f5:dd:41:2a:71:35:cc:84:a3:10:2b:49:b6:
f2:04:df:ae:02:1f:97:05:47:a4:2e:d0:d1:27:ed:
d5:ab:69:96:a2:1c:09:e7:a0:74:40:f0:a5:99:f8:
d5:77:7d:f9:e8:9e:fb:16:72:d8:84:0d:87:e0:31:
42:3a:b3:5f:59:fc:3d:de:54:cb:4d:a7:b2:89:a3:
00:60:5c:a5:b9:e7:8d:d1:9c:7d:2b:15:b7:77:25:
cd:5d:b5:54:c8:cc:95:3e:20:c3:1f:e0:a9:ef:22:
2f:bd:e8:ec:2a:17:14:32:16:c6:33:5f:cd:6f:48:
21:76:3a:f8:9f:8e:c8:7e:a5:19:96:e8:9b:52:88:
91:83:60:e6:19:f3:7a:92:8e:3e:48:37:46:13:ba:
ed:f6:a4:61:88:23:41:14:f9:d2:2d:32:5e:13:d0:
a4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4A:D8:62:B3:C8:27:00:3D:D2:82:76:DD:54:D5:9D:42:91:42:E0
X509v3 Authority Key Identifier:
keyid:A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0b:99:bc:c3:b0:d5:7f:2c:12:f2:ba:38:99:3e:42:c6:ab:
fd:8d:a2:4a:b0:bc:ac:eb:1d:1a:79:e3:08:52:5f:8b:bc:45:
b7:f1:00:09:dc:f0:e6:38:11:98:eb:46:9f:9c:b0:c2:62:80:
53:15:de:ad:95:6c:55:3e:68:25:ee:bb:49:7b:73:65:b9:6e:
68:00:d9:13:0a:60:38:1d:9d:d0:65:e6:75:41:6b:5b:05:36:
7e:86:5a:ed:07:79:a8:77:77:5c:7f:77:24:c6:d0:f3:56:a5:
3f:9c:61:d9:75:07:bd:a0:be:0e:d4:99:74:d2:e9:74:54:09:
54:68:2b:38:11:4d:4b:aa:a1:7f:f0:99:cb:64:5c:b6:8c:2a:
c7:15:44:aa:20:ad:e8:78:02:9f:d1:21:05:3b:0e:0e:ea:ce:
6f:02:72:bb:6b:9f:38:3f:e0:11:2e:cc:e0:d6:c6:0b:56:a9:
67:b4:aa:c4:87:e7:0e:4e:3a:99:c1:24:30:36:14:08:53:83:
04:01:83:f0:65:b2:b4:d5:d8:dd:19:f9:38:d4:2a:08:a9:1f:
46:50:1b:f2:b4:ab:c2:5c:66:91:18:c9:6b:b8:bd:db:d7:59:
7f:b4:62:cd:74:8e:67:9d:ce:06:f2:f6:19:f6:a7:7d:f0:c0:
8b:ac:dc:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/VoWHkVLXHpjQVpGC8GzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MzhiYjBjMmI0MWVmYThjM2IwMjA2NGViYzUyZmJhOTJj
MjM2MjYwHhcNMjUxMDE5MTUwMTI1WhcNMjUxMDIwMTUwMTI1WjAzMTEwLwYDVQQD
Eyg0YTRhZDg2MmIzYzgyNzAwM2RkMjgyNzZkZDU0ZDU5ZDQyOTE0MmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiXvJVzT9HUxJvoFLCShnxbMXURs
SvXdrkYfl9KnPuVSgmeuhCljXrfVmE6wlr/MZfIDRprFpPig084mNYIvs2a2Z7xM
RUiD6CFXY1oc+uCYQl3RDdS+83AMM/XdQSpxNcyEoxArSbbyBN+uAh+XBUekLtDR
J+3Vq2mWohwJ56B0QPClmfjVd3356J77FnLYhA2H4DFCOrNfWfw93lTLTaeyiaMA
YFylueeN0Zx9KxW3dyXNXbVUyMyVPiDDH+Cp7yIvvejsKhcUMhbGM1/Nb0ghdjr4
n47IfqUZluibUoiRg2DmGfN6ko4+SDdGE7rt9qRhiCNBFPnSLTJeE9CkcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpK2GKzyCcAPdKCdt1U1Z1CkULgMB8GA1UdIwQY
MBaAFKU4uwwrQe+ow7AgZOvFL7qSwjYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFRpN0RDdEI3NmpEc0NCazY4VXZ1cExDTmlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jZWJhNWMtZTlkOS00ZTkxLWJhYmMt
NjcyODJkNzEzOGEwLzEvcFRpN0RDdEI3NmpEc0NCazY4VXZ1cExDTmlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9jZWJhNWMtZTlkOS00ZTkxLWJhYmMtNjcyODJkNzEzOGEw
LzEvcFRpN0RDdEI3NmpEc0NCazY4VXZ1cExDTmlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOguZvMOw
1X8sEvK6OJk+Qsar/Y2iSrC8rOsdGnnjCFJfi7xFt/EACdzw5jgRmOtGn5ywwmKA
UxXerZVsVT5oJe67SXtzZbluaADZEwpgOB2d0GXmdUFrWwU2foZa7Qd5qHd3XH93
JMbQ81alP5xh2XUHvaC+DtSZdNLpdFQJVGgrOBFNS6qhf/CZy2RctowqxxVEqiCt
6HgCn9EhBTsODurObwJyu2ufOD/gES7M4NbGC1apZ7SqxIfnDk46mcEkMDYUCFOD
BAGD8GWytNXY3Rn5ONQqCKkfRlAb8rSrwlxmkRjJa7i929dZf7RizXSOZ53OBvL2
GfanffDAi6zcRA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:16 2025 by rpki-client