Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
File: T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft (raw, json)
Hash identifier: aCbKMU6zF9jean/yfYU2Xrf8uqN5mZD80FzZMgDL4QA=
Subject key identifier: 4B:38:14:07:CB:BB:D7:38:83:90:77:3C:38:BE:15:BA:28:4D:27:DA
Authority key identifier: 4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
Certificate issuer: /CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Certificate serial: 0198D69875FCFA09E1B36C59642F69C3C8E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
Manifest number: 0DFA
Signing time: Sat 23 Aug 2025 11:02:52 +0000
Manifest this update: Sat 23 Aug 2025 11:02:52 +0000
Manifest next update: Sun 24 Aug 2025 11:02:52 +0000
Files and hashes: 1: QBK8lPoVvs-33OqaHsy4GGD-WkU.roa (hash: 0GUBtBrdWkItfU5ir9EaRdqIIGetsONKxZfwhY7ap78=)
2: QjtOOOK5pwQKBGSkxklhdFksgp4.roa (hash: mBFc78U/Py4iQS+BrsEjELYMOU1hEEh06mY9X8mzPLw=)
3: T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl (hash: 5NgCJXUd+lpAdbSga/yMmOLeqpuHGClQcmL7v2IukPE=)
4: tdMNK9TEqxpF4VZ5o4_bR4yE7Hc.roa (hash: XOeW5f83fNYsxiZeF2CyzZjG5tuKR78BMMUdvSarePY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:75:fc:fa:09:e1:b3:6c:59:64:2f:69:c3:c8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Validity
Not Before: Aug 23 11:02:52 2025 GMT
Not After : Aug 24 11:02:52 2025 GMT
Subject: CN=4b381407cbbbd7388390773c38be15ba284d27da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:e4:ee:67:2f:67:c7:ff:4e:96:2b:a7:3f:
02:17:6c:a9:ec:e5:d3:2b:68:19:5b:3f:3b:82:15:
fd:5b:ee:c9:7a:8f:b0:9a:79:38:76:24:87:0e:a6:
f9:93:82:f6:8d:d0:ea:bd:65:aa:cd:82:85:aa:8c:
16:f3:fc:34:97:4a:c5:32:a5:ba:72:6e:e1:a5:05:
f8:70:0c:12:9b:8a:fb:3d:22:2e:fe:be:e2:71:b8:
96:b8:50:c7:19:07:ec:b9:72:d0:5b:6b:2b:e4:57:
41:b7:c2:af:41:0c:6f:04:18:a2:57:90:31:ba:b6:
93:30:e2:50:86:52:a5:12:f9:c9:d9:23:27:92:d1:
ff:c1:f3:6c:bd:80:39:d3:c1:00:46:19:5b:a1:81:
77:26:eb:02:19:89:f2:cb:c0:b9:f7:f8:fa:50:b4:
d4:b0:37:d8:ab:1d:0a:f5:94:8c:f7:58:ef:f6:fb:
ea:ea:2f:ca:1f:20:ec:b1:62:79:0d:cd:91:71:f5:
24:15:e7:52:f1:f1:ec:29:ce:e4:71:36:0b:f6:01:
fb:7c:e3:86:df:c9:60:4a:ce:31:83:d1:d9:fa:b3:
04:17:6c:63:95:58:eb:2d:58:a9:ea:53:9c:4a:ea:
61:62:99:52:13:71:3f:90:fc:4a:5c:10:61:76:cb:
12:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:38:14:07:CB:BB:D7:38:83:90:77:3C:38:BE:15:BA:28:4D:27:DA
X509v3 Authority Key Identifier:
keyid:4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d9:40:2a:52:48:31:53:7a:f7:93:72:58:bd:83:bb:2b:14:
af:7a:61:ce:1d:6a:d9:fa:2b:6b:86:98:c5:e0:a1:9d:2a:f8:
a8:0d:a9:b9:f5:f2:4d:30:c0:94:eb:1d:38:de:02:23:2b:d4:
27:d2:4c:17:b5:40:37:20:5e:9c:89:e4:3a:31:ad:ab:be:38:
48:a7:3c:90:80:ad:58:ed:74:ad:b3:2e:75:b7:6c:6d:d3:08:
68:12:c8:08:f3:45:75:49:4e:8a:76:87:25:db:c1:e2:3b:5a:
63:5d:d0:ee:a4:91:c4:14:8f:a0:04:0d:3c:31:31:62:eb:64:
a1:bf:5b:10:3a:b3:dd:5d:97:c6:13:b8:4e:71:f2:14:8e:ad:
57:2a:35:16:63:63:a8:5f:80:39:86:36:a3:e2:1d:27:22:c2:
d5:c8:0d:d1:d9:65:57:73:6e:84:af:e0:05:e5:88:9d:32:e9:
eb:62:17:42:ac:46:6e:15:7c:c0:53:96:15:6d:c0:8a:c6:aa:
97:f2:01:3d:7f:5b:ac:a8:06:a6:47:3c:8c:a9:00:2a:57:ce:
98:58:49:ad:d7:a6:7d:97:6e:0c:7e:98:f1:f7:e5:13:d6:12:
54:65:02:ce:29:b3:aa:0f:10:6f:a2:8b:b4:98:cd:21:95:bb:
a1:e2:2a:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmHX8+gnhs2xZZC9pw8jkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYTVjZGU1MjRmNzgxMGQ1ODY4YmM0OWFiMGJmNjYyMWY0
NGRjMjEwHhcNMjUwODIzMTEwMjUyWhcNMjUwODI0MTEwMjUyWjAzMTEwLwYDVQQD
Eyg0YjM4MTQwN2NiYmJkNzM4ODM5MDc3M2MzOGJlMTViYTI4NGQyN2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0rk7mcvZ8f/TpYrpz8CF2yp7OXT
K2gZWz87ghX9W+7Jeo+wmnk4diSHDqb5k4L2jdDqvWWqzYKFqowW8/w0l0rFMqW6
cm7hpQX4cAwSm4r7PSIu/r7icbiWuFDHGQfsuXLQW2sr5FdBt8KvQQxvBBiiV5Ax
uraTMOJQhlKlEvnJ2SMnktH/wfNsvYA508EARhlboYF3JusCGYnyy8C59/j6ULTU
sDfYqx0K9ZSM91jv9vvq6i/KHyDssWJ5Dc2RcfUkFedS8fHsKc7kcTYL9gH7fOOG
38lgSs4xg9HZ+rMEF2xjlVjrLVip6lOcSuphYplSE3E/kPxKXBBhdssSzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEs4FAfLu9c4g5B3PDi+FbooTSfaMB8GA1UdIwQY
MBaAFE+lzeUk94ENWGi8SasL9mIfRNwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDZYTjVTVDNnUTFZYUx4SnF3djJZaDlFM0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kNjA4OGMtMzExMC00MWUxLWI5OTYt
MzJkNGFkOGY1NmRlLzEvVDZYTjVTVDNnUTFZYUx4SnF3djJZaDlFM0NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9kNjA4OGMtMzExMC00MWUxLWI5OTYtMzJkNGFkOGY1NmRl
LzEvVDZYTjVTVDNnUTFZYUx4SnF3djJZaDlFM0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONlAKlJI
MVN695NyWL2DuysUr3phzh1q2fora4aYxeChnSr4qA2pufXyTTDAlOsdON4CIyvU
J9JMF7VANyBenInkOjGtq744SKc8kICtWO10rbMudbdsbdMIaBLICPNFdUlOinaH
JdvB4jtaY13Q7qSRxBSPoAQNPDExYutkob9bEDqz3V2XxhO4TnHyFI6tVyo1FmNj
qF+AOYY2o+IdJyLC1cgN0dllV3NuhK/gBeWInTLp62IXQqxGbhV8wFOWFW3Aisaq
l/IBPX9brKgGpkc8jKkAKlfOmFhJrdemfZduDH6Y8fflE9YSVGUCzimzqg8Qb6KL
tJjNIZW7oeIqWg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:08:58 2025 by rpki-client