Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
File: tGS0UjqJcrni9GpPShY06XAnrt8.mft (raw, json)
Hash identifier: afT/dyzoNcwIV14YbvHBnbLU8zNYDuAFCqJb6FOhTGM=
Subject key identifier: 66:15:D1:49:4C:C0:50:AB:1B:B1:90:7E:2D:F7:6C:1D:10:B4:2B:07
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial: 0199FC218698A73A147DA80A1D639AA3A9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
Manifest number: 06AC
Signing time: Sun 19 Oct 2025 11:01:19 +0000
Manifest this update: Sun 19 Oct 2025 11:01:19 +0000
Manifest next update: Mon 20 Oct 2025 11:01:19 +0000
Files and hashes: 1: LCm5HjjBIgE4kc53Y1x9V3jEK5E.roa (hash: gidlYB2yA995VC/sjZRH4fK+Z2xDnArATR8jcQsRBeo=)
2: Vo2AEZubMry-8LbxfP3bd7koV9U.roa (hash: Fh0uHUq/PCCkV86hQ4ARdMVMrk3QlRXqnTaAy7kodnk=)
3: g8C52r-HgjcOKaKK01GccaiLGqY.roa (hash: yFMdULn9+zrpJgeM+fVWlj0c0e8CtPQGd00H0hnJUEs=)
4: tGS0UjqJcrni9GpPShY06XAnrt8.crl (hash: DX41+DIbRtrCHbW11+FKK1uWogg8Cn+q1doQoZYh+oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:86:98:a7:3a:14:7d:a8:0a:1d:63:9a:a3:a9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Validity
Not Before: Oct 19 11:01:19 2025 GMT
Not After : Oct 20 11:01:19 2025 GMT
Subject: CN=6615d1494cc050ab1bb1907e2df76c1d10b42b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b1:45:84:b2:92:ad:3c:19:16:4b:95:c6:a9:
de:55:a3:1e:ec:2d:e2:f6:68:6a:4d:81:54:40:c0:
84:c0:b6:50:3e:72:9c:65:b2:ca:e7:a3:34:8d:c2:
dc:cc:ea:4e:fc:73:ab:93:42:a6:c2:e2:59:e2:5b:
60:70:50:1e:8c:ef:45:07:f8:14:61:30:0a:9d:b2:
62:72:26:43:5f:e0:de:36:53:72:85:de:b3:fd:3a:
84:d1:f1:c3:ed:37:99:5b:09:3e:46:3b:03:4b:61:
06:9e:1c:00:3b:8e:b1:da:f0:11:e7:11:b2:e1:c3:
89:c5:bd:84:db:c1:b0:15:6b:8c:d8:3a:ce:08:1a:
d5:15:85:0c:9a:2c:ab:60:d6:ad:f3:4e:45:da:e4:
af:fc:0b:9b:72:e7:51:5f:01:c7:27:20:28:7a:e0:
ac:59:50:63:5d:54:ca:ee:cc:9b:9a:de:c0:b9:f3:
1d:77:c2:a6:de:24:67:de:fa:5b:a6:7b:f0:22:fe:
63:0f:eb:28:12:e6:e9:e4:8e:21:b8:cb:29:8c:e7:
55:6a:fc:d7:2d:00:c2:82:c1:b2:04:db:f6:97:5b:
ed:26:5c:3d:e1:9c:8a:51:e5:93:0a:08:cb:d3:ce:
59:0b:ab:62:65:f3:e5:8b:ce:0f:87:f2:b8:86:53:
2f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:15:D1:49:4C:C0:50:AB:1B:B1:90:7E:2D:F7:6C:1D:10:B4:2B:07
X509v3 Authority Key Identifier:
keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:74:ec:3f:ed:02:23:a0:c2:45:7f:70:4e:e1:3b:47:e6:ad:
82:85:7e:71:62:1e:81:c4:06:9e:9a:6e:dc:ce:c2:5d:46:bd:
7c:76:5f:02:70:f4:49:b6:de:f5:3d:16:64:4a:37:47:5f:47:
ab:0a:dd:46:73:a6:05:f5:6d:d2:80:28:2c:36:ee:a5:70:50:
38:b8:d0:96:4e:17:1b:8b:6e:40:fc:6b:21:d4:35:ea:8f:f7:
5c:21:11:3c:3d:d9:45:c6:83:df:55:25:97:da:13:48:15:98:
ea:a7:a3:73:43:30:94:a9:48:8b:0d:9a:b3:9e:b8:35:81:37:
06:9a:12:6f:ef:2a:07:28:2d:2e:08:79:d9:75:06:1c:ec:2d:
bb:6a:e5:93:70:be:e2:b6:e9:38:ae:c4:5d:90:e5:a5:25:46:
d3:79:5c:05:cc:58:df:12:6c:af:7b:73:b2:e4:c2:35:a9:1c:
0b:48:1f:0d:0a:10:1d:02:f6:44:1c:99:e1:38:64:ef:54:8d:
e8:d5:0b:3d:2a:53:b1:18:09:5c:c6:bb:58:b2:ee:95:6e:4f:
d8:d0:03:c5:ba:6e:fe:08:34:4b:84:d8:33:c1:a2:6c:71:90:
44:68:f7:12:69:55:19:3f:5e:c1:28:10:50:74:2b:89:1d:63:
3f:84:fa:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IYaYpzoUfagKHWOao6ntMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjRiNDUyM2E4OTcyYjllMmY0NmE0ZjRhMTYzNGU5NzAy
N2FlZGYwHhcNMjUxMDE5MTEwMTE5WhcNMjUxMDIwMTEwMTE5WjAzMTEwLwYDVQQD
Eyg2NjE1ZDE0OTRjYzA1MGFiMWJiMTkwN2UyZGY3NmMxZDEwYjQyYjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLFFhLKSrTwZFkuVxqneVaMe7C3i
9mhqTYFUQMCEwLZQPnKcZbLK56M0jcLczOpO/HOrk0KmwuJZ4ltgcFAejO9FB/gU
YTAKnbJiciZDX+DeNlNyhd6z/TqE0fHD7TeZWwk+RjsDS2EGnhwAO46x2vAR5xGy
4cOJxb2E28GwFWuM2DrOCBrVFYUMmiyrYNat805F2uSv/AubcudRXwHHJyAoeuCs
WVBjXVTK7sybmt7AufMdd8Km3iRn3vpbpnvwIv5jD+soEubp5I4huMspjOdVavzX
LQDCgsGyBNv2l1vtJlw94ZyKUeWTCgjL085ZC6tiZfPli84Ph/K4hlMvCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYV0UlMwFCrG7GQfi33bB0QtCsHMB8GA1UdIwQY
MBaAFLRktFI6iXK54vRqT0oWNOlwJ67fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1Yjct
ZmM2ZTc3ODg0MDU0LzEvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1YjctZmM2ZTc3ODg0MDU0
LzEvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHTsP+0C
I6DCRX9wTuE7R+atgoV+cWIegcQGnppu3M7CXUa9fHZfAnD0Sbbe9T0WZEo3R19H
qwrdRnOmBfVt0oAoLDbupXBQOLjQlk4XG4tuQPxrIdQ16o/3XCERPD3ZRcaD31Ul
l9oTSBWY6qejc0MwlKlIiw2as564NYE3BpoSb+8qBygtLgh52XUGHOwtu2rlk3C+
4rbpOK7EXZDlpSVG03lcBcxY3xJsr3tzsuTCNakcC0gfDQoQHQL2RByZ4Thk71SN
6NULPSpTsRgJXMa7WLLulW5P2NADxbpu/gg0S4TYM8GibHGQRGj3EmlVGT9ewSgQ
UHQriR1jP4T6nQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:37 2025 by rpki-client