Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
File: tYe8Eust4poQJrj1a-jUafL1jPM.mft (raw, json)
Hash identifier: kso7L4bXTbKE2phVEOouurD1bGU7PCklz2g8EMEd6uI=
Subject key identifier: 0A:94:1D:E1:A0:56:3C:50:8B:0D:57:81:9E:78:52:10:1D:5C:72:E5
Authority key identifier: B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
Certificate issuer: /CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Certificate serial: 019A033546559B3CAFC320CEF3F5201E9A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 20:00:14 +0000
Manifest this update: Mon 20 Oct 2025 20:00:14 +0000
Manifest next update: Tue 21 Oct 2025 20:00:14 +0000
Files and hashes: 1: SRbcYTDvBK2K42GBZURfc-9owLk.roa (hash: ou7G18aw8/QVFexo/f3lobAxj/5Hzi02IWmge/V7dxQ=)
2: tYe8Eust4poQJrj1a-jUafL1jPM.crl (hash: ZQPfeXceM2qan7zJob5YC2zNoVSA1Z99QaVwc06TzkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:35:46:55:9b:3c:af:c3:20:ce:f3:f5:20:1e:9a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Validity
Not Before: Oct 20 20:00:14 2025 GMT
Not After : Oct 21 20:00:14 2025 GMT
Subject: CN=0a941de1a0563c508b0d57819e7852101d5c72e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:29:3c:3c:48:15:09:c7:cc:d1:31:95:b4:
0f:b6:ab:2c:cf:0a:67:82:35:cd:eb:7e:ef:96:d4:
fb:0e:7f:d2:f4:90:e2:0d:97:08:47:ea:a5:e5:31:
2a:93:5f:40:90:26:49:f4:af:28:96:20:38:2a:0e:
38:c9:a6:fa:91:44:6a:ce:09:23:d3:91:2a:2b:72:
02:d7:a1:75:55:52:33:61:f2:ed:c6:a8:64:f3:56:
6f:1f:bd:af:58:29:cf:42:f9:a9:e3:b7:6d:c4:ba:
34:42:66:75:f8:ea:59:93:c9:dc:4f:76:7b:e5:f0:
e3:7a:3a:e8:56:49:92:a9:d0:cd:13:84:d1:6c:cf:
81:33:30:54:3e:a0:cc:bc:64:06:31:29:58:93:da:
a3:d5:7f:d2:54:5d:23:0f:52:7b:66:11:ae:93:be:
36:5d:64:2b:67:f3:de:ae:65:08:fa:b3:31:0a:62:
70:7d:75:bf:09:bb:d2:de:76:03:f9:0c:28:5f:ed:
ba:17:a0:c2:2b:91:f3:93:8f:b5:c1:da:94:0b:1a:
4d:a0:e7:04:32:83:66:ff:ff:6f:25:2b:86:9f:a8:
8c:3f:75:d5:3f:ba:6a:da:b5:00:8f:7c:38:40:1e:
44:3a:a5:1d:5c:6a:e3:b5:3d:b5:07:08:02:d0:1d:
50:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:94:1D:E1:A0:56:3C:50:8B:0D:57:81:9E:78:52:10:1D:5C:72:E5
X509v3 Authority Key Identifier:
keyid:B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:53:ca:bd:60:bb:44:48:6c:1d:d3:cc:3a:0d:89:76:23:1f:
f1:50:ce:2d:1a:13:cb:f4:95:f0:34:b9:6f:a0:c4:59:99:7b:
c3:04:bd:6d:a1:dd:9d:8b:c3:6a:68:56:b8:50:9f:b9:c6:16:
6d:55:9e:cf:08:ba:dd:94:3a:3b:34:c2:73:36:4b:b2:7b:bc:
97:67:24:81:d8:79:a3:fa:0c:55:aa:cc:1e:cf:ae:a3:7a:c4:
de:e9:df:40:95:68:37:62:61:2f:f2:8e:39:54:86:74:9d:38:
d8:f0:fa:e8:49:9b:9e:ba:f1:c6:e8:f6:b1:71:a6:27:24:44:
fe:62:1c:87:9c:66:72:f0:c1:3b:40:fd:6b:f3:67:d5:d3:d7:
a1:d1:85:b1:95:a7:98:04:bb:f2:29:12:02:47:76:ab:f6:4d:
33:ba:5d:13:94:00:0b:d1:07:01:22:7d:f5:f0:3c:76:e5:6b:
1a:83:10:9b:e3:d7:cf:61:20:60:ce:fa:16:91:47:83:92:9c:
e3:cd:81:91:f0:e6:19:eb:4f:04:62:ea:76:a5:99:99:7d:8f:
fc:4a:f0:92:3e:ff:05:1e:48:34:56:f7:38:ee:f9:3f:90:87:
c9:ca:5d:92:e1:54:96:6d:83:39:26:32:3c:8b:54:61:31:a5:
a9:4b:31:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoDNUZVmzyvwyDO8/UgHpqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ODdiYzEyZWIyZGUyOWExMDI2YjhmNTZiZThkNDY5ZjJm
NThjZjMwHhcNMjUxMDIwMjAwMDE0WhcNMjUxMDIxMjAwMDE0WjAzMTEwLwYDVQQD
EygwYTk0MWRlMWEwNTYzYzUwOGIwZDU3ODE5ZTc4NTIxMDFkNWM3MmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXIpPDxIFQnHzNExlbQPtqsszwpn
gjXN637vltT7Dn/S9JDiDZcIR+ql5TEqk19AkCZJ9K8oliA4Kg44yab6kURqzgkj
05EqK3IC16F1VVIzYfLtxqhk81ZvH72vWCnPQvmp47dtxLo0QmZ1+OpZk8ncT3Z7
5fDjejroVkmSqdDNE4TRbM+BMzBUPqDMvGQGMSlYk9qj1X/SVF0jD1J7ZhGuk742
XWQrZ/PermUI+rMxCmJwfXW/CbvS3nYD+QwoX+26F6DCK5Hzk4+1wdqUCxpNoOcE
MoNm//9vJSuGn6iMP3XVP7pq2rUAj3w4QB5EOqUdXGrjtT21BwgC0B1QeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqUHeGgVjxQiw1XgZ54UhAdXHLlMB8GA1UdIwQY
MBaAFLWHvBLrLeKaECa49Wvo1Gny9YzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFllOEV1c3Q0cG9RSnJqMWEtalVhZkwxalBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80YzNlMTktYTQ4OS00ZTNhLWEzYTIt
N2U1MmU3NDljM2FkLzEvdFllOEV1c3Q0cG9RSnJqMWEtalVhZkwxalBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80YzNlMTktYTQ4OS00ZTNhLWEzYTItN2U1MmU3NDljM2Fk
LzEvdFllOEV1c3Q0cG9RSnJqMWEtalVhZkwxalBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVPKvWC7
REhsHdPMOg2JdiMf8VDOLRoTy/SV8DS5b6DEWZl7wwS9baHdnYvDamhWuFCfucYW
bVWezwi63ZQ6OzTCczZLsnu8l2ckgdh5o/oMVarMHs+uo3rE3unfQJVoN2JhL/KO
OVSGdJ042PD66Embnrrxxuj2sXGmJyRE/mIch5xmcvDBO0D9a/Nn1dPXodGFsZWn
mAS78ikSAkd2q/ZNM7pdE5QAC9EHASJ99fA8duVrGoMQm+PXz2EgYM76FpFHg5Kc
482BkfDmGetPBGLqdqWZmX2P/Erwkj7/BR5INFb3OO75P5CHycpdkuFUlm2DOSYy
PItUYTGlqUsxPw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:59:04 2025 by rpki-client