Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
File: t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json)
Hash identifier: ldGRiZd3DB2wGXvQyhYYCG40Nx+F93J6ZujUSJUYKfg=
Subject key identifier: C8:28:AD:69:01:3F:D0:5B:51:B8:C5:1A:C2:46:12:35:39:C7:55:DF
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial: 019A05C85E22083D2F875FB4A1181FF87314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
Manifest number: 1138
Signing time: Tue 21 Oct 2025 08:00:08 +0000
Manifest this update: Tue 21 Oct 2025 08:00:08 +0000
Manifest next update: Wed 22 Oct 2025 08:00:08 +0000
Files and hashes: 1: YBLZGJHJKH4DoV9XrJh7KrLAY0g.roa (hash: L0o/zjJZLOmk6cpaT73kurdvyrzNoMlbhiuzTQLNAKg=)
2: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: uOpHN+SAjzKCrHVR+Mz/JGt0JfcJ/Pk7ROkbWMeWuSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:c8:5e:22:08:3d:2f:87:5f:b4:a1:18:1f:f8:73:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
Validity
Not Before: Oct 21 08:00:08 2025 GMT
Not After : Oct 22 08:00:08 2025 GMT
Subject: CN=c828ad69013fd05b51b8c51ac246123539c755df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:02:b4:07:e9:fc:55:39:75:0e:8d:1b:8c:
30:a2:c4:7c:fd:fc:8a:70:e6:2d:0b:25:3b:21:37:
8b:96:d5:11:fc:fb:73:23:1b:41:5c:ed:83:cf:db:
c6:2c:44:15:46:44:1d:a2:28:85:dd:d5:6d:f1:38:
3b:cd:02:1f:85:ef:75:93:19:fd:35:d2:3f:57:87:
d0:73:2a:57:0a:db:82:58:cb:85:8d:cb:00:a1:69:
74:e7:9f:ae:c0:64:eb:c7:31:aa:78:fc:76:e0:f9:
23:2e:c5:37:31:97:f8:75:e8:ff:83:33:5d:bd:93:
b6:27:26:6c:8a:dc:63:d2:35:60:c4:30:10:f7:f0:
cc:31:bd:18:bb:0d:0c:2f:3d:cb:5d:a3:9d:02:48:
17:e7:9f:ea:a2:b0:de:9a:30:71:ec:d5:f4:be:ea:
8b:08:44:75:7e:f5:e2:f7:99:08:33:44:69:b7:d8:
2b:63:34:9c:83:7f:6d:9d:73:6b:a0:89:c1:d0:f3:
34:d8:8a:ce:a0:86:26:dc:f0:34:19:3a:ad:3d:97:
3f:22:a7:cd:99:1b:92:db:c5:25:f5:f6:37:df:a0:
e7:a1:83:d1:92:2a:6f:ae:dd:fe:8f:63:90:68:c9:
48:7e:ec:de:ae:fc:3d:6a:f0:1e:3f:3a:89:2a:fe:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:28:AD:69:01:3F:D0:5B:51:B8:C5:1A:C2:46:12:35:39:C7:55:DF
X509v3 Authority Key Identifier:
keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c7:ce:fa:7d:67:87:ec:d0:bf:c5:79:a6:cd:6c:2c:c3:c3:
8b:b3:ce:0a:9a:74:89:e6:c3:57:78:8b:b0:5c:26:62:2d:a8:
b0:db:73:e9:d8:a5:97:32:81:57:16:0d:46:5e:7b:96:57:d6:
85:33:79:2e:46:a2:92:ec:5c:eb:c7:13:82:38:e8:ca:3a:f2:
15:30:f4:8e:53:2c:a1:7c:bd:b0:a7:1b:8f:80:ea:81:4e:03:
06:9d:26:d9:03:6c:ef:99:fc:5c:ae:be:16:ab:a1:04:85:63:
c0:65:d4:e2:c8:a0:bf:68:e1:7c:22:85:03:dc:a8:5a:2a:c8:
e1:18:00:08:c3:99:9c:ea:50:71:58:d0:81:9f:d3:d5:91:9d:
0d:8c:c2:c0:3e:b5:a9:9e:82:ad:2b:fa:ca:e2:e3:e7:dc:b9:
b9:97:1f:68:93:ec:d7:fd:52:79:d3:7b:c9:a6:1b:9b:dc:b8:
e6:57:f0:c2:d6:a3:16:54:06:55:7d:ff:b3:08:ca:fa:37:27:
03:e1:e5:22:d1:b9:11:3b:cb:9f:68:56:99:14:2e:db:d7:d8:
10:9c:01:df:2d:6f:84:6f:00:50:a3:a4:6d:52:ad:a9:5e:d2:
4f:0e:30:fc:52:d9:66:33:52:1e:03:91:2e:75:ad:c5:ed:bf:
4e:5e:db:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoFyF4iCD0vh1+0oRgf+HMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NDQzMDk5MDgyNjllNTM4YjJiNGZhOTYzMzcwYzllYzIw
NzdhNzgwHhcNMjUxMDIxMDgwMDA4WhcNMjUxMDIyMDgwMDA4WjAzMTEwLwYDVQQD
EyhjODI4YWQ2OTAxM2ZkMDViNTFiOGM1MWFjMjQ2MTIzNTM5Yzc1NWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFACtAfp/FU5dQ6NG4wwosR8/fyK
cOYtCyU7ITeLltUR/PtzIxtBXO2Dz9vGLEQVRkQdoiiF3dVt8Tg7zQIfhe91kxn9
NdI/V4fQcypXCtuCWMuFjcsAoWl055+uwGTrxzGqePx24PkjLsU3MZf4dej/gzNd
vZO2JyZsitxj0jVgxDAQ9/DMMb0Yuw0MLz3LXaOdAkgX55/qorDemjBx7NX0vuqL
CER1fvXi95kIM0Rpt9grYzScg39tnXNroInB0PM02IrOoIYm3PA0GTqtPZc/IqfN
mRuS28Ul9fY336DnoYPRkipvrt3+j2OQaMlIfuzervw9avAePzqJKv4fmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgorWkBP9BbUbjFGsJGEjU5x1XfMB8GA1UdIwQY
MBaAFLdEMJkIJp5TiytPqWM3DJ7CB3p4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NjUyZTgtNWQyMC00MmY2LWE3Mzkt
ZDU0OTIxNjA0ZWNkLzEvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80NjUyZTgtNWQyMC00MmY2LWE3MzktZDU0OTIxNjA0ZWNk
LzEvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8fO+n1n
h+zQv8V5ps1sLMPDi7POCpp0iebDV3iLsFwmYi2osNtz6dillzKBVxYNRl57llfW
hTN5Lkaikuxc68cTgjjoyjryFTD0jlMsoXy9sKcbj4DqgU4DBp0m2QNs75n8XK6+
FquhBIVjwGXU4sigv2jhfCKFA9yoWirI4RgACMOZnOpQcVjQgZ/T1ZGdDYzCwD61
qZ6CrSv6yuLj59y5uZcfaJPs1/1SedN7yaYbm9y45lfwwtajFlQGVX3/swjK+jcn
A+HlItG5ETvLn2hWmRQu29fYEJwB3y1vhG8AUKOkbVKtqV7STw4w/FLZZjNSHgOR
LnWtxe2/Tl7boQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:02:55 2025 by rpki-client