Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: I8BzGvpGB1eICZc2TX/Yda7mtfilPqwLFqYP2adpXi0=
Subject key identifier: CE:71:04:D3:18:E1:53:A8:C5:8E:46:A7:ED:0A:E6:FE:96:FD:58:21
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 0198D705EF448F9150C61C954281CCC15B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0B9E
Signing time: Sat 23 Aug 2025 13:02:26 +0000
Manifest this update: Sat 23 Aug 2025 13:02:26 +0000
Manifest next update: Sun 24 Aug 2025 13:02:26 +0000
Files and hashes: 1: 6b2ERBxknPAevOnYxSvxzu95eG8.roa (hash: 3kiDbks8aSmKxwaOLs+GDp7zBcCi628ZZOq/BNMJfnI=)
2: NOOroZsnjsQfsZH4dRjzbuju0Hk.roa (hash: Zg6ieQb4LhmgSd9bfRqKPOaZLXbcVzG7102ETjzQ1ro=)
3: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: GoAI+YZIMsu5If47K5BA/7FWGtovJ0HIQV6LxFjQ29I=)
4: auS9-c0NKZclAN6n9ZeMxPqllbY.roa (hash: jmic3pbI/PzbYEfrYr0mHzcn9EBC12zQGVngarCFUoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:ef:44:8f:91:50:c6:1c:95:42:81:cc:c1:5b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Aug 23 13:02:26 2025 GMT
Not After : Aug 24 13:02:26 2025 GMT
Subject: CN=ce7104d318e153a8c58e46a7ed0ae6fe96fd5821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:c1:6d:d8:52:91:1f:bb:cd:d5:7c:05:05:
bd:f8:bf:90:e3:93:b1:9e:bf:9b:6c:9c:ec:96:c6:
cc:df:4a:94:fe:f5:86:3e:a0:5d:b8:25:a7:3b:a6:
16:72:f2:77:61:36:71:c8:60:f9:3e:8e:76:64:5d:
02:51:7e:1e:63:f3:28:ae:de:f3:63:d1:5c:a5:9d:
4c:f9:22:47:29:33:02:78:b8:30:84:bc:ef:04:40:
9b:35:60:9b:c3:c4:eb:b2:8d:ce:10:1e:42:e2:55:
82:66:d4:2d:16:0c:bf:08:67:3f:10:ef:fe:8e:66:
30:4a:73:52:44:00:0a:21:69:e1:6e:65:4f:5f:00:
51:4e:60:de:c5:b3:b3:6a:d6:a0:ab:c1:89:b4:1f:
13:96:d3:0e:34:37:0b:18:32:dd:62:e5:cb:d7:e9:
61:d1:32:fa:62:50:ff:c8:ab:bc:24:10:fe:fe:49:
fd:b1:01:23:fa:a8:6c:49:87:64:68:1a:6d:ac:ff:
5d:3d:ec:fb:cf:e2:c2:56:53:e9:c2:9a:14:2b:b3:
ba:11:61:60:5c:cb:1d:02:e4:ca:4a:60:80:f1:ac:
a6:ff:af:3c:d3:00:ed:c2:01:af:42:e6:ad:42:79:
cc:3e:0e:66:ca:04:7b:9b:6f:3c:e7:a7:78:b2:ad:
25:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:71:04:D3:18:E1:53:A8:C5:8E:46:A7:ED:0A:E6:FE:96:FD:58:21
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:93:99:d4:4d:80:6b:67:99:6b:d4:b9:ed:82:e1:2a:46:fd:
40:3b:bb:d8:44:02:ee:95:fe:b2:7d:7a:0c:51:d9:38:7a:d3:
b1:9b:be:7b:a5:03:18:08:56:f9:69:68:a0:f4:00:e4:05:80:
4a:c6:76:06:13:28:67:23:af:63:7c:b2:bd:c6:f8:d5:9b:e1:
16:19:8a:15:cf:09:6d:74:c6:64:a7:4e:84:bf:ee:e7:0b:cb:
36:1e:16:5b:8b:51:ad:75:3a:42:1c:48:b6:86:e3:5a:38:cd:
b6:5f:90:dd:27:0c:cd:52:16:e6:7f:c5:3d:23:b3:4f:b5:a9:
40:1e:eb:96:a0:30:89:8d:2d:50:a6:e1:d0:19:be:98:3f:65:
1e:bc:ad:f9:08:a4:a0:e2:34:4c:c1:98:59:45:40:0f:66:6c:
40:8c:24:f3:1a:49:36:72:94:75:f1:36:60:fd:3e:76:48:97:
bf:48:5a:30:13:90:a0:f8:04:d7:8c:f7:df:ec:62:68:08:c8:
4e:d9:cc:69:2e:8c:0d:08:ba:0f:cd:21:41:42:da:b6:bb:75:
a7:bd:b0:3f:13:93:34:80:68:93:28:ac:56:02:74:f0:9e:b0:
e0:55:5f:da:2a:fc:0d:8e:48:ac:fb:16:19:1b:47:96:90:88:
35:f2:f7:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBe9Ej5FQxhyVQoHMwVsvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODk1ZmYwZTk5YTc3YzAxN2U4YTM4MzI5MmNiNWM2Zjgy
NjExMjAwHhcNMjUwODIzMTMwMjI2WhcNMjUwODI0MTMwMjI2WjAzMTEwLwYDVQQD
EyhjZTcxMDRkMzE4ZTE1M2E4YzU4ZTQ2YTdlZDBhZTZmZTk2ZmQ1ODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0vBbdhSkR+7zdV8BQW9+L+Q45Ox
nr+bbJzslsbM30qU/vWGPqBduCWnO6YWcvJ3YTZxyGD5Po52ZF0CUX4eY/Mort7z
Y9FcpZ1M+SJHKTMCeLgwhLzvBECbNWCbw8Trso3OEB5C4lWCZtQtFgy/CGc/EO/+
jmYwSnNSRAAKIWnhbmVPXwBRTmDexbOzatagq8GJtB8TltMONDcLGDLdYuXL1+lh
0TL6YlD/yKu8JBD+/kn9sQEj+qhsSYdkaBptrP9dPez7z+LCVlPpwpoUK7O6EWFg
XMsdAuTKSmCA8aym/6880wDtwgGvQuatQnnMPg5mygR7m28856d4sq0l3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5xBNMY4VOoxY5Gp+0K5v6W/VghMB8GA1UdIwQY
MBaAFE+JX/DpmnfAF+ijgykstcb4JhEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zMzI4ZGEtYWE0ZS00NDViLTlkYTkt
ZDA1Mzc0NWMyYWNjLzEvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8zMzI4ZGEtYWE0ZS00NDViLTlkYTktZDA1Mzc0NWMyYWNj
LzEvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZOZ1E2A
a2eZa9S57YLhKkb9QDu72EQC7pX+sn16DFHZOHrTsZu+e6UDGAhW+WlooPQA5AWA
SsZ2BhMoZyOvY3yyvcb41ZvhFhmKFc8JbXTGZKdOhL/u5wvLNh4WW4tRrXU6QhxI
tobjWjjNtl+Q3ScMzVIW5n/FPSOzT7WpQB7rlqAwiY0tUKbh0Bm+mD9lHryt+Qik
oOI0TMGYWUVAD2ZsQIwk8xpJNnKUdfE2YP0+dkiXv0haMBOQoPgE14z33+xiaAjI
TtnMaS6MDQi6D80hQULatrt1p72wPxOTNIBokyisVgJ08J6w4FVf2ir8DY5IrPsW
GRtHlpCINfL3xQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:31 2025 by rpki-client