Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
File: TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json)
Hash identifier: JDByD8/z7bFe6TxF00fqiCoORTYicfWqjs3E0kM/9j8=
Subject key identifier: 9B:4F:63:99:53:23:CA:4E:F6:D6:DF:75:40:06:A5:36:9A:C1:1D:1F
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial: 0199FBEB908B860692B265B13A3822F36459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
Manifest number: 0DA5
Signing time: Sun 19 Oct 2025 10:02:23 +0000
Manifest this update: Sun 19 Oct 2025 10:02:23 +0000
Manifest next update: Mon 20 Oct 2025 10:02:23 +0000
Files and hashes: 1: 1-QMPtoomm6W5CX-SS0fyQ5AS734.roa (hash: hcd0LKLxrMub9hVDF7pi719s+IDTrzb/8hX4yl7gw2w=)
2: 8-JB4jMg3_rMGJjuIMVCBLnxwQ8.roa (hash: buBER4odhou/4TCkZQ3UeIhbfaoQJUXmTZ3cmJ4K9k8=)
3: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: H1TgPm3E2+16+xxxj11MqVCCYLwVVxHdUFDJA2r9Z/I=)
4: pSmbhIOz_v9DcZ6BjkBTv88tPZ4.roa (hash: 1vOAxGM5C9HFgFv3tm1lOiYWc4bRDbFQtmaO7PV8kkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:90:8b:86:06:92:b2:65:b1:3a:38:22:f3:64:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Validity
Not Before: Oct 19 10:02:23 2025 GMT
Not After : Oct 20 10:02:23 2025 GMT
Subject: CN=9b4f63995323ca4ef6d6df754006a5369ac11d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:1d:28:13:b4:ef:4f:60:ba:54:a0:76:09:
8d:ac:f9:36:4b:ba:44:bb:16:07:fa:1b:10:db:4d:
8a:5c:f2:f5:b3:70:87:d9:83:02:f1:e8:df:ec:9b:
2e:db:26:be:16:5e:ab:7e:2a:0b:24:2a:d9:4d:69:
07:3a:40:87:65:29:13:ad:cd:d3:a9:e2:02:94:12:
ae:75:c3:e1:e3:2a:07:7a:b6:b3:35:e3:58:12:b0:
98:e9:dc:f5:83:a2:c7:6f:64:70:c6:6b:86:5b:82:
8b:34:84:19:5d:a3:a6:c4:78:bd:14:9e:eb:98:ee:
da:b3:65:0f:21:53:d2:6f:fe:38:c4:98:de:55:b8:
e1:8a:49:4f:6b:a6:3a:d2:e2:2f:3a:12:92:c5:6a:
a6:11:fd:39:1d:3c:11:59:20:46:e6:c5:76:ad:0d:
43:5b:ad:c9:33:70:1f:86:72:90:0c:fc:e7:ec:4d:
5b:5f:bc:c7:90:56:55:9a:78:8e:1a:0e:2a:8f:9e:
21:ea:88:c9:e6:1a:b9:1f:35:d0:a6:50:8e:9c:2c:
d1:42:37:12:55:db:fe:c5:07:35:4e:71:2c:1f:86:
bd:5f:17:a3:6f:d7:31:ef:f0:ff:bc:87:ea:bb:74:
28:d3:a6:23:46:e3:ab:1b:5a:b3:f6:7e:f3:5c:7a:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4F:63:99:53:23:CA:4E:F6:D6:DF:75:40:06:A5:36:9A:C1:1D:1F
X509v3 Authority Key Identifier:
keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:cf:07:9a:f0:b3:2b:40:8f:b2:5d:1b:d6:03:3d:8a:41:9d:
9d:2a:b2:b9:f6:b3:d2:c7:a1:be:45:f8:d6:3e:70:e6:2b:a5:
a1:b8:49:28:9f:60:d4:af:61:26:3c:57:89:d4:6c:86:02:ac:
c5:34:3d:59:c5:aa:f2:47:21:e4:c6:0a:7b:cf:f4:d5:b6:e3:
df:0a:30:9b:63:ca:82:ac:0c:8a:1e:83:b4:50:fc:4b:ab:91:
9b:07:9d:14:95:ca:a7:63:0d:ff:57:c3:c4:91:52:b5:bb:55:
71:06:b7:61:80:37:db:62:66:7b:35:2b:f7:f6:04:45:ba:16:
45:17:17:46:c9:fe:a4:c8:92:9a:7a:8c:79:1d:09:4a:92:a5:
0e:72:15:c5:01:7f:cf:b6:2c:a0:d6:12:0f:e4:86:19:59:21:
a4:8c:36:43:60:29:16:b2:af:67:02:bb:03:a7:e6:20:11:dd:
64:3b:32:26:39:11:b4:13:6a:ea:cf:d3:df:87:8c:7f:5f:af:
eb:20:c2:aa:30:f1:ef:d2:1c:38:95:8b:f6:fb:67:56:cf:1c:
4b:a8:8c:38:b6:cf:27:c9:c7:af:e7:e0:84:df:f4:61:d3:d7:
21:c5:fb:52:13:55:5d:ae:3e:23:54:12:9c:7e:63:3e:c1:ed:
e3:a3:b7:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn765CLhgaSsmWxOjgi82RZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMmY5ZmQ1YzhhMTRjZGM5ZjMxYzQ1ODVjZDYwZGI1N2Nm
ZmI0YzIwHhcNMjUxMDE5MTAwMjIzWhcNMjUxMDIwMTAwMjIzWjAzMTEwLwYDVQQD
Eyg5YjRmNjM5OTUzMjNjYTRlZjZkNmRmNzU0MDA2YTUzNjlhYzExZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcwdKBO0709gulSgdgmNrPk2S7pE
uxYH+hsQ202KXPL1s3CH2YMC8ejf7Jsu2ya+Fl6rfioLJCrZTWkHOkCHZSkTrc3T
qeIClBKudcPh4yoHerazNeNYErCY6dz1g6LHb2RwxmuGW4KLNIQZXaOmxHi9FJ7r
mO7as2UPIVPSb/44xJjeVbjhiklPa6Y60uIvOhKSxWqmEf05HTwRWSBG5sV2rQ1D
W63JM3AfhnKQDPzn7E1bX7zHkFZVmniOGg4qj54h6ojJ5hq5HzXQplCOnCzRQjcS
Vdv+xQc1TnEsH4a9Xxejb9cx7/D/vIfqu3Qo06YjRuOrG1qz9n7zXHrV7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtPY5lTI8pO9tbfdUAGpTaawR0fMB8GA1UdIwQY
MBaAFE0vn9XIoUzcnzHEWFzWDbV8/7TCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kYTRlNDYtMmE5My00NGE0LWI4ZTMt
YzIxMzNkZDgxYjU2LzEvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kYTRlNDYtMmE5My00NGE0LWI4ZTMtYzIxMzNkZDgxYjU2
LzEvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJs8HmvCz
K0CPsl0b1gM9ikGdnSqyufaz0sehvkX41j5w5iulobhJKJ9g1K9hJjxXidRshgKs
xTQ9WcWq8kch5MYKe8/01bbj3wowm2PKgqwMih6DtFD8S6uRmwedFJXKp2MN/1fD
xJFStbtVcQa3YYA322JmezUr9/YERboWRRcXRsn+pMiSmnqMeR0JSpKlDnIVxQF/
z7YsoNYSD+SGGVkhpIw2Q2ApFrKvZwK7A6fmIBHdZDsyJjkRtBNq6s/T34eMf1+v
6yDCqjDx79IcOJWL9vtnVs8cS6iMOLbPJ8nHr+fghN/0YdPXIcX7UhNVXa4+I1QS
nH5jPsHt46O3Dg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:10 2025 by rpki-client