Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
File: T893EF-VB1zlhdQn6XdU6PAHqLk.mft (raw, json)
Hash identifier: SpvObwoNycJENK2Lo21e+zHEFlgJVt8i6r8QAa6GN1Q=
Subject key identifier: 34:38:0A:27:30:8B:8C:F2:F4:F6:FB:45:81:38:C8:9A:E5:12:D1:5A
Authority key identifier: 4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
Certificate issuer: /CN=4fcf77105f95075ce585d427e97754e8f007a8b9
Certificate serial: 019A059278E85470C7CA1A606899F40AD5F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
Manifest number: 0A47
Signing time: Tue 21 Oct 2025 07:01:16 +0000
Manifest this update: Tue 21 Oct 2025 07:01:16 +0000
Manifest next update: Wed 22 Oct 2025 07:01:16 +0000
Files and hashes: 1: T893EF-VB1zlhdQn6XdU6PAHqLk.crl (hash: mnXLTuX8nhvyczdBbrQDeKqtcGSwQzrfSGzLbXls8hQ=)
2: T9LZjeWP7v9MjImSQxwCyXQEIjQ.roa (hash: ryZ/pHb+xQxL2NrfTWfDmvDfQVr6T5F6jZbDhNZwl/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:92:78:e8:54:70:c7:ca:1a:60:68:99:f4:0a:d5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fcf77105f95075ce585d427e97754e8f007a8b9
Validity
Not Before: Oct 21 07:01:16 2025 GMT
Not After : Oct 22 07:01:16 2025 GMT
Subject: CN=34380a27308b8cf2f4f6fb458138c89ae512d15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c4:9f:1e:2c:9a:51:26:b2:1e:5d:54:5b:9f:
aa:3e:f5:31:c0:61:1b:75:d5:a8:db:2b:b2:e9:0f:
48:f0:7c:7e:cf:10:ef:32:37:25:dc:0c:81:56:ee:
8d:19:bd:69:fd:83:e8:70:ee:59:24:91:76:a3:7a:
96:c0:63:53:21:6b:f3:27:a4:4a:49:74:63:a0:86:
4b:ad:c3:e3:3e:d9:14:24:b2:0f:e3:f1:69:fd:1e:
e9:48:26:ae:23:43:32:3d:1a:0b:d9:ad:ca:b0:76:
50:49:71:6f:1d:fd:94:db:91:4a:4b:0a:21:24:23:
c1:bd:ca:60:16:1b:f4:f1:d5:66:2a:d0:e8:86:10:
7a:3f:02:ba:86:a9:cd:6f:5b:ab:6f:99:d5:b8:df:
b2:9a:3c:0a:3e:73:63:73:6e:25:92:9f:64:36:8e:
52:1a:f6:5f:90:c5:ed:67:aa:0c:e3:c8:77:2f:17:
04:6e:ad:ca:5a:fe:9a:dc:78:b1:fe:b6:14:f4:47:
95:5b:9c:9f:49:a8:35:b0:21:72:2c:2d:58:00:ea:
5c:fc:92:22:b4:eb:0c:9c:6b:03:bf:68:94:ca:a1:
20:3f:0c:a7:b8:05:03:73:9e:f0:b6:86:89:04:be:
14:28:06:d1:45:d2:dc:e6:2d:68:a2:d5:43:23:a4:
55:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:38:0A:27:30:8B:8C:F2:F4:F6:FB:45:81:38:C8:9A:E5:12:D1:5A
X509v3 Authority Key Identifier:
keyid:4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6f:65:f5:82:c5:78:f6:0c:28:71:5b:df:8f:ee:19:8f:93:
8b:2d:4f:37:10:f8:1c:94:7a:a4:40:22:48:37:2b:0b:df:84:
00:42:ae:8a:a6:21:d5:3d:3d:69:1c:e3:3f:85:61:73:17:25:
20:a2:9a:3c:e5:f1:5b:7e:2b:53:99:63:f5:1a:b6:2e:a6:5a:
eb:45:71:9f:f1:fb:59:a1:4d:b1:67:e9:93:9a:12:ce:52:2c:
52:d0:39:0e:de:e3:a7:b2:b9:b7:32:0b:40:8c:f4:1c:a6:1c:
a1:75:32:41:f8:78:a5:9f:dc:b1:5d:2b:cc:1c:bb:3c:fd:43:
4f:fa:8c:13:41:ea:47:bd:a4:68:eb:63:d2:ff:54:b5:2e:a2:
36:ff:61:8f:6d:de:4a:3b:7c:3c:ac:86:46:e6:b8:8e:ac:d1:
80:b1:c2:59:3c:4c:a6:08:75:65:24:47:04:30:3c:1a:20:c2:
00:02:35:7b:dc:64:a8:e8:c2:ca:1b:54:ca:41:95:a1:76:08:
64:34:b6:95:4a:cc:2f:e0:05:6a:de:8e:e1:8b:ed:c3:42:17:
10:9d:20:ec:30:3a:ee:11:75:48:bc:d4:9d:6c:8c:b2:06:f1:
d3:1e:ab:bf:0c:92:4d:35:0b:11:e3:91:81:e0:37:42:98:44:
67:94:27:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoFknjoVHDHyhpgaJn0CtXzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmY2Y3NzEwNWY5NTA3NWNlNTg1ZDQyN2U5Nzc1NGU4ZjAw
N2E4YjkwHhcNMjUxMDIxMDcwMTE2WhcNMjUxMDIyMDcwMTE2WjAzMTEwLwYDVQQD
EygzNDM4MGEyNzMwOGI4Y2YyZjRmNmZiNDU4MTM4Yzg5YWU1MTJkMTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysSfHiyaUSayHl1UW5+qPvUxwGEb
ddWo2yuy6Q9I8Hx+zxDvMjcl3AyBVu6NGb1p/YPocO5ZJJF2o3qWwGNTIWvzJ6RK
SXRjoIZLrcPjPtkUJLIP4/Fp/R7pSCauI0MyPRoL2a3KsHZQSXFvHf2U25FKSwoh
JCPBvcpgFhv08dVmKtDohhB6PwK6hqnNb1urb5nVuN+ymjwKPnNjc24lkp9kNo5S
GvZfkMXtZ6oM48h3LxcEbq3KWv6a3Hix/rYU9EeVW5yfSag1sCFyLC1YAOpc/JIi
tOsMnGsDv2iUyqEgPwynuAUDc57wtoaJBL4UKAbRRdLc5i1ootVDI6RVSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQ4Cicwi4zy9Pb7RYE4yJrlEtFaMB8GA1UdIwQY
MBaAFE/PdxBflQdc5YXUJ+l3VOjwB6i5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDg5M0VGLVZCMXpsaGRRbjZYZFU2UEFIcUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xMzllYmQtNWFiZi00MjU0LTg5MzMt
NmY5N2RmYzEwZmU3LzEvVDg5M0VGLVZCMXpsaGRRbjZYZFU2UEFIcUxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8xMzllYmQtNWFiZi00MjU0LTg5MzMtNmY5N2RmYzEwZmU3
LzEvVDg5M0VGLVZCMXpsaGRRbjZYZFU2UEFIcUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApG9l9YLF
ePYMKHFb34/uGY+Tiy1PNxD4HJR6pEAiSDcrC9+EAEKuiqYh1T09aRzjP4Vhcxcl
IKKaPOXxW34rU5lj9Rq2LqZa60Vxn/H7WaFNsWfpk5oSzlIsUtA5Dt7jp7K5tzIL
QIz0HKYcoXUyQfh4pZ/csV0rzBy7PP1DT/qME0HqR72kaOtj0v9UtS6iNv9hj23e
Sjt8PKyGRua4jqzRgLHCWTxMpgh1ZSRHBDA8GiDCAAI1e9xkqOjCyhtUykGVoXYI
ZDS2lUrML+AFat6O4Yvtw0IXEJ0g7DA67hF1SLzUnWyMsgbx0x6rvwySTTULEeOR
geA3QphEZ5Qnpg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 09:44:00 2025 by rpki-client