Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
File: TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json)
Hash identifier: 3E7fgkURhSbILwILQZ+2TSi3xACIzc6HWzGE61hITkc=
Subject key identifier: 7E:EF:15:D2:CC:32:19:74:D6:0D:53:83:04:76:3A:11:F8:7E:D1:9B
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 019A00356ECC0567CB41F2D5B964EB7B305D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
Manifest number: 16EB
Signing time: Mon 20 Oct 2025 06:01:33 +0000
Manifest this update: Mon 20 Oct 2025 06:01:33 +0000
Manifest next update: Tue 21 Oct 2025 06:01:33 +0000
Files and hashes: 1: 93DmKZhPP6C3A8rfNYLNAOSD7nY.roa (hash: dt3s4SYU1dR+fLajxJTR3/3GKKVmv0f+WTIVOmO+2as=)
2: A1lFiDlkwzd2kuuHtwLxrVifjIM.roa (hash: bheq6y6BKOc+FBTnE7aA9p7E54SloHCzl+8cgE33f9o=)
3: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: HgupwmSC+bM3JlLtOIra8JHzVTLsQIo9Gk5ELHdInbk=)
4: UD9G2KurtNeaAxJdizQiQcSD0uc.roa (hash: Es9ToT28+rspmgTLqxqTlnHgsgNlKjrlO13bAnzcF2g=)
5: XDIQZzxZW5-uUuoXNVfYPGALZY8.roa (hash: xZyhu94HluR+zrM/qfXRNVxIfS3klNJwNP/Gh4p7kNE=)
6: cYs_upIMBFM1qTzwqySxwaPDCLc.roa (hash: xI0Q9MYkvDP8hv/SnI33zJTsy3M/0ZO4tON1nbaFCD4=)
7: jk-_IfFTaD-MzFizpWx0AA1TkH4.roa (hash: wezPiSGoo0rul4hPDHDdcRTaZb8xQPAVvKZ9GBZZNU8=)
8: luOuJQnFXQhNggwM6MUJDK19PDQ.roa (hash: yd7LbwhPMHWjUutNzr3ySSl/LTeLlprMji5U1R9GXsM=)
9: mmpsKeeO5JUD0kNNB4aUsbfsoEs.roa (hash: mRAg2xOUvTrNMtJyTqYFatxVEZidyGOVjXZ4XpUtMSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:6e:cc:05:67:cb:41:f2:d5:b9:64:eb:7b:30:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: Oct 20 06:01:33 2025 GMT
Not After : Oct 21 06:01:33 2025 GMT
Subject: CN=7eef15d2cc321974d60d538304763a11f87ed19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:96:95:bf:0c:03:45:1c:fb:a6:85:82:c7:c8:
b6:20:8a:84:79:ec:42:c0:d0:6e:1b:f4:07:e9:be:
8a:c2:c6:81:59:c9:5d:d3:f0:18:34:5a:df:e2:0f:
30:b9:62:84:1f:45:c1:48:50:49:60:f7:43:cf:93:
16:94:ef:a2:b0:c7:19:c4:d3:fa:91:5d:0e:e9:55:
af:db:6d:3d:ff:d8:e6:56:a2:a1:a8:c0:cf:78:ab:
c6:7d:c5:07:d5:14:a0:4a:6c:00:b5:6f:23:b1:d3:
06:8f:af:07:5a:39:95:84:ec:9b:f2:5d:52:8a:0b:
86:b5:0f:8f:2d:76:9a:fb:35:79:92:d9:05:cb:85:
80:1f:18:be:f8:ba:b8:76:29:d9:0d:a7:af:94:96:
92:ef:db:52:e3:5f:a0:24:24:c7:b8:ce:59:41:12:
2a:ab:25:63:80:09:28:f6:c3:ad:2c:1d:38:81:08:
74:1d:a4:9a:07:bc:e1:0a:21:f9:6f:6b:61:cb:dd:
78:6b:c4:e7:4e:8b:5c:04:c3:86:e7:d6:c7:ed:ed:
c7:78:b8:f8:a1:4a:1b:1a:be:a1:b9:a3:84:9f:08:
ee:80:3c:9a:fb:d4:77:53:6e:69:d6:b3:21:d2:a0:
f9:f3:9b:da:a1:73:69:e6:aa:91:6d:fc:0c:8b:0c:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EF:15:D2:CC:32:19:74:D6:0D:53:83:04:76:3A:11:F8:7E:D1:9B
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e5:62:53:cc:9c:f6:f9:f3:a4:9b:e8:e2:af:51:aa:31:ad:
0b:be:f2:bc:1a:a7:5e:0d:e7:b7:6a:8f:0e:27:f6:7d:b4:c7:
1d:ad:32:b7:2e:9c:70:1d:9f:3f:6c:51:42:8e:ae:57:65:83:
f7:49:24:85:6b:a6:5a:2b:a2:4f:54:2f:4f:cf:fe:0b:8e:38:
aa:e1:86:0b:2c:9b:6a:0c:8b:5d:d0:64:3e:bf:4d:3b:08:7a:
b6:20:33:7a:94:7b:9e:40:41:3d:16:27:d5:c6:05:19:47:0e:
aa:5d:03:b1:0c:e7:7b:f3:a9:35:95:bf:6b:79:73:a3:44:2f:
e7:33:6b:77:f8:6b:1a:1c:e7:0e:32:5a:ff:e7:78:e2:9c:56:
d1:83:f7:8d:0a:89:da:2e:8d:e7:a9:53:72:d7:f1:09:65:25:
d5:a2:78:82:60:12:60:17:d7:a1:e9:6e:3b:7d:4f:65:05:e3:
b5:4b:d2:5b:a9:fe:ba:38:44:d6:72:9b:ba:47:28:9d:cc:3f:
d2:94:36:c8:b8:89:d9:de:65:7b:a0:9d:63:0f:03:f0:cb:9b:
65:83:37:5f:e9:7d:d4:cf:bc:15:b9:e1:2b:1c:ec:d7:43:ec:
16:64:31:4d:fd:51:19:10:46:9b:8e:2c:3b:48:6c:26:17:0c:
bc:2e:b9:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANW7MBWfLQfLVuWTrezBdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMGFkZTU0YzI3ZTZmY2RkYWNlMjYyYzRmZGY3OTBmMzIw
ZmVkOWMwHhcNMjUxMDIwMDYwMTMzWhcNMjUxMDIxMDYwMTMzWjAzMTEwLwYDVQQD
Eyg3ZWVmMTVkMmNjMzIxOTc0ZDYwZDUzODMwNDc2M2ExMWY4N2VkMTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JaVvwwDRRz7poWCx8i2IIqEeexC
wNBuG/QH6b6KwsaBWcld0/AYNFrf4g8wuWKEH0XBSFBJYPdDz5MWlO+isMcZxNP6
kV0O6VWv2209/9jmVqKhqMDPeKvGfcUH1RSgSmwAtW8jsdMGj68HWjmVhOyb8l1S
iguGtQ+PLXaa+zV5ktkFy4WAHxi++Lq4dinZDaevlJaS79tS41+gJCTHuM5ZQRIq
qyVjgAko9sOtLB04gQh0HaSaB7zhCiH5b2thy914a8TnTotcBMOG59bH7e3HeLj4
oUobGr6huaOEnwjugDya+9R3U25p1rMh0qD585vaoXNp5qqRbfwMiwxeNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7vFdLMMhl01g1TgwR2OhH4ftGbMB8GA1UdIwQY
MBaAFE0K3lTCfm/N2s4mLE/feQ8yD+2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2It
ODkyOTZjY2IzNWY1LzEvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2ItODkyOTZjY2IzNWY1
LzEvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuViU8yc
9vnzpJvo4q9RqjGtC77yvBqnXg3nt2qPDif2fbTHHa0yty6ccB2fP2xRQo6uV2WD
90kkhWumWiuiT1QvT8/+C444quGGCyybagyLXdBkPr9NOwh6tiAzepR7nkBBPRYn
1cYFGUcOql0DsQzne/OpNZW/a3lzo0Qv5zNrd/hrGhznDjJa/+d44pxW0YP3jQqJ
2i6N56lTctfxCWUl1aJ4gmASYBfXoeluO31PZQXjtUvSW6n+ujhE1nKbukconcw/
0pQ2yLiJ2d5le6CdYw8D8MubZYM3X+l91M+8FbnhKxzs10PsFmQxTf1RGRBGm44s
O0hsJhcMvC65jg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:44 2025 by rpki-client