Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
File: TxUpALDTI9NtlFEKsLAck_RRfIk.mft (raw, json)
Hash identifier: yHqWeByCn85b+C8R00F/A2qJUjFLxAtiIFup4PFniGU=
Subject key identifier: 05:62:A7:2A:B3:53:56:C8:FF:CC:2D:A3:E4:DE:A2:2B:CB:5A:41:11
Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Certificate serial: 0199FCFDA776A5A798FB1A13C85E4F53F85D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:45 +0000
Manifest this update: Sun 19 Oct 2025 15:01:45 +0000
Manifest next update: Mon 20 Oct 2025 15:01:45 +0000
Files and hashes: 1: 8Zjvv60lC8NGP14VoQ8RNeofQIM.roa (hash: P7KtzcRE9odqg/BTLMYwDj7fh0a6LBnncSFvQDv5Bp0=)
2: FpKKPofiudOty7FxUMr6flRZ1Yw.roa (hash: 19qYKj9K4I/iMwutyl2SfY76xgKtvj/68+BwpIEN2Kg=)
3: TxUpALDTI9NtlFEKsLAck_RRfIk.crl (hash: kC00FYh9h/N3sGCvVRQI4BrBpW76ehgbSrtfwZx0QlE=)
4: yOx4nY5h71UsEVGCdqce7EnVtbw.roa (hash: pblfkKrPcMJNUK4hgNwzxNA61gyD6ePezh9yKZ6o3M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a7:76:a5:a7:98:fb:1a:13:c8:5e:4f:53:f8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Validity
Not Before: Oct 19 15:01:45 2025 GMT
Not After : Oct 20 15:01:45 2025 GMT
Subject: CN=0562a72ab35356c8ffcc2da3e4dea22bcb5a4111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:3a:b2:f9:21:c7:51:1d:e8:04:96:05:aa:
3d:93:33:b9:e1:8b:a0:e4:38:fd:f7:9d:3a:7c:af:
9b:cb:55:fd:d0:7d:69:fb:7b:cd:2e:59:b2:27:ce:
8b:d4:4d:6a:b8:02:2f:1d:b1:9e:38:5d:06:bd:81:
ff:78:32:2f:eb:9b:fe:d0:1f:c5:05:9c:6c:7f:2e:
c6:01:70:01:01:e0:59:ae:05:b2:2f:29:a1:7d:f8:
eb:27:0e:ab:f6:15:02:a9:02:35:92:55:bd:01:8f:
f3:a8:ec:6d:46:c4:14:13:61:2c:e5:a2:9c:17:e3:
7c:f7:e2:05:2a:af:9b:8a:bd:48:e2:0c:14:9b:cb:
0f:79:d9:5a:4e:b1:2d:b3:f3:56:6a:24:04:f3:fd:
ca:64:7d:dd:8e:e5:7f:3f:98:b0:2e:cc:77:53:5b:
a1:2a:ff:69:b9:80:a2:38:23:c6:ce:e5:4f:52:47:
f3:07:63:37:a8:1e:52:3b:c0:ce:53:a3:e6:8b:bd:
a1:eb:63:2a:2a:59:87:1e:7d:99:e7:f1:76:ab:7b:
dc:07:ff:9e:99:5a:c2:72:ea:00:2b:83:e2:b1:fe:
e6:c7:80:cb:4e:56:38:24:92:8d:ef:28:0d:64:e1:
be:f9:0b:74:64:43:91:6b:b2:89:bc:57:93:33:a6:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:62:A7:2A:B3:53:56:C8:FF:CC:2D:A3:E4:DE:A2:2B:CB:5A:41:11
X509v3 Authority Key Identifier:
keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a1:7d:6e:51:4f:37:c7:c2:33:91:26:57:a9:85:82:c3:74:
93:53:02:01:6b:7d:3e:6b:37:88:ba:15:ed:45:9d:25:d2:e2:
d8:ce:65:7e:19:2d:89:9d:dc:1e:43:75:09:c8:47:b6:7e:e5:
1d:a3:f5:73:f4:ea:e8:1d:49:39:b2:77:c4:79:ad:80:d2:df:
07:be:f3:d4:0a:e8:6e:f9:64:78:15:ac:c6:36:e4:5e:2a:5c:
6b:78:74:9a:89:13:fe:9d:c2:e0:92:d8:18:34:20:ed:1b:f3:
2f:9b:de:37:8c:91:ac:68:52:15:a8:d3:24:15:43:70:11:dc:
56:6d:2d:57:a8:55:69:ac:6b:e8:ec:47:37:a3:8c:7b:ce:5f:
6e:3e:64:03:02:23:da:c3:9b:96:ac:5f:a5:8f:6f:80:d8:5f:
46:82:ad:fc:80:ce:69:dc:7f:d9:f5:ee:1c:4b:50:d9:69:01:
0d:35:3c:cb:ff:93:10:49:37:c5:a0:b4:9d:fb:91:55:3c:2f:
ab:68:93:70:fc:bd:f4:ae:1c:2b:21:6d:c7:ad:47:10:ad:91:
3e:a3:c6:75:41:36:c1:fb:14:69:12:38:22:8f:c6:7c:c0:f6:
f0:c8:5f:23:fb:a6:cc:2e:03:b3:de:5b:4a:a4:9a:16:29:ad:
73:1c:db:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/ad2paeY+xoTyF5PU/hdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTUyOTAwYjBkMzIzZDM2ZDk0NTEwYWIwYjAxYzkzZjQ1
MTdjODkwHhcNMjUxMDE5MTUwMTQ1WhcNMjUxMDIwMTUwMTQ1WjAzMTEwLwYDVQQD
EygwNTYyYTcyYWIzNTM1NmM4ZmZjYzJkYTNlNGRlYTIyYmNiNWE0MTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpY6svkhx1Ed6ASWBao9kzO54Yug
5Dj99506fK+by1X90H1p+3vNLlmyJ86L1E1quAIvHbGeOF0GvYH/eDIv65v+0B/F
BZxsfy7GAXABAeBZrgWyLymhffjrJw6r9hUCqQI1klW9AY/zqOxtRsQUE2Es5aKc
F+N89+IFKq+bir1I4gwUm8sPedlaTrEts/NWaiQE8/3KZH3djuV/P5iwLsx3U1uh
Kv9puYCiOCPGzuVPUkfzB2M3qB5SO8DOU6Pmi72h62MqKlmHHn2Z5/F2q3vcB/+e
mVrCcuoAK4Pisf7mx4DLTlY4JJKN7ygNZOG++Qt0ZEORa7KJvFeTM6bMDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVipyqzU1bI/8wto+TeoivLWkERMB8GA1UdIwQY
MBaAFE8VKQCw0yPTbZRRCrCwHJP0UXyJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhVcEFMRFRJOU50bEZFS3NMQWNrX1JSZklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84OWZmM2ItMTI2My00Y2RkLTljYWQt
MjNkZjhkZGRmOTc4LzEvVHhVcEFMRFRJOU50bEZFS3NMQWNrX1JSZklrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC84OWZmM2ItMTI2My00Y2RkLTljYWQtMjNkZjhkZGRmOTc4
LzEvVHhVcEFMRFRJOU50bEZFS3NMQWNrX1JSZklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6F9blFP
N8fCM5EmV6mFgsN0k1MCAWt9Pms3iLoV7UWdJdLi2M5lfhktiZ3cHkN1CchHtn7l
HaP1c/Tq6B1JObJ3xHmtgNLfB77z1ArobvlkeBWsxjbkXipca3h0mokT/p3C4JLY
GDQg7RvzL5veN4yRrGhSFajTJBVDcBHcVm0tV6hVaaxr6OxHN6OMe85fbj5kAwIj
2sOblqxfpY9vgNhfRoKt/IDOadx/2fXuHEtQ2WkBDTU8y/+TEEk3xaC0nfuRVTwv
q2iTcPy99K4cKyFtx61HEK2RPqPGdUE2wfsUaRI4Io/GfMD28MhfI/umzC4Ds95b
SqSaFimtcxzb+A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:52 2025 by rpki-client