Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
File: tCV3H5kv1037Bzbmla61nGr2fpM.mft (raw, json)
Hash identifier: My8s0vVSXZ2lPODXaqcbP/n8mpj+0c7VFbhu+/84zCg=
Subject key identifier: 25:AC:8F:76:40:DF:3C:B7:3A:4E:4D:EC:66:68:3F:87:38:17:19:6D
Authority key identifier: B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
Certificate issuer: /CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Certificate serial: 019A01B4D63FE33B95E5E0442B9DCF5593B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
Manifest number: 07B5
Signing time: Mon 20 Oct 2025 13:00:19 +0000
Manifest this update: Mon 20 Oct 2025 13:00:19 +0000
Manifest next update: Tue 21 Oct 2025 13:00:19 +0000
Files and hashes: 1: Vw2yLSQ3LTxqIY-0jpawdHHYRZc.roa (hash: iTSHI+c9vyvdBq9ojdYKL9zsD6xY6XyH0HTCqL60iXA=)
2: tCV3H5kv1037Bzbmla61nGr2fpM.crl (hash: Cs9xknu9fs3kyn07USEDpIeMWIydQC+6pZPr1L5YCn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:d6:3f:e3:3b:95:e5:e0:44:2b:9d:cf:55:93:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Validity
Not Before: Oct 20 13:00:19 2025 GMT
Not After : Oct 21 13:00:19 2025 GMT
Subject: CN=25ac8f7640df3cb73a4e4dec66683f873817196d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:23:67:37:5e:43:d9:fe:76:bd:06:f2:50:4d:
9f:4d:b2:ec:dd:6e:c6:cd:64:9a:44:89:d6:31:4e:
1d:c3:46:ce:29:82:53:07:f5:5c:1c:d2:2a:e5:a0:
32:87:0b:5f:6c:e1:88:a1:1a:22:2d:39:4f:3b:08:
4b:8e:5a:ca:79:c5:2e:3e:f1:46:a9:f9:de:05:ac:
91:ba:26:f3:4b:5a:0c:ee:55:9b:f7:9a:6c:ed:d1:
93:a3:9f:80:b1:5f:80:b5:2e:43:f7:61:3e:7a:80:
1b:66:34:a6:87:63:63:27:df:85:fe:28:3e:25:55:
d7:b8:c9:98:1c:d2:5e:d9:29:dd:00:d0:11:18:79:
f9:54:b6:4c:2b:68:ef:57:50:e8:ef:d6:d8:a4:d8:
ff:bd:5d:a1:37:31:57:82:18:2d:bc:2a:1f:3a:c4:
64:39:fc:3c:f2:c1:00:21:8d:ea:31:d7:ff:40:6b:
c0:bd:56:7f:d3:37:ce:d2:33:81:20:b2:f7:43:bf:
dd:2e:ca:ea:2b:10:6a:6f:d6:2f:48:e3:42:cf:f5:
4d:65:1c:e2:64:75:63:bc:8a:3c:f1:5d:07:3b:0f:
60:97:85:30:5d:0f:43:2d:a8:5e:bf:0c:ac:19:57:
f1:ec:02:ae:1a:0c:69:08:b1:fa:8c:b3:ee:81:66:
6e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AC:8F:76:40:DF:3C:B7:3A:4E:4D:EC:66:68:3F:87:38:17:19:6D
X509v3 Authority Key Identifier:
keyid:B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:36:f3:75:2f:84:76:5c:7c:b6:3c:0d:89:26:5b:31:ba:68:
ae:a0:0b:99:05:09:bf:6c:45:ca:3c:21:8c:d4:6f:a2:c9:1b:
b2:96:67:42:4a:9d:67:c0:2e:c1:cd:27:67:5b:39:b4:c4:71:
1f:78:11:0a:d1:07:bf:5d:04:73:8e:fa:da:52:a0:f3:2c:b4:
82:d6:e4:2a:6d:37:79:e6:35:a6:99:18:8b:f9:c9:10:2c:e1:
6a:e2:2a:53:aa:2e:35:33:2b:58:12:e3:ac:fe:7d:77:5a:63:
c4:53:1d:3f:db:f3:ef:97:0d:60:60:aa:4c:df:4d:c5:ee:6f:
2c:d7:e6:72:30:18:b1:47:3e:1b:6b:50:3a:d4:6b:c7:18:47:
e6:05:09:8b:68:0c:a8:7c:48:f9:7a:34:96:03:72:cb:99:6c:
90:6d:e9:0a:d7:9a:11:9a:9d:75:7f:79:d2:d6:ee:23:74:c8:
c3:33:2a:0e:aa:30:54:26:2e:5c:03:a5:1f:ca:ff:e9:8f:9b:
ee:7f:40:9a:31:37:50:1f:6b:a6:b7:26:94:5c:94:cc:5d:79:
2c:c4:39:78:9e:88:c5:47:b1:3f:24:29:21:91:e1:b7:a5:46:
25:85:97:d3:7a:7c:ca:61:46:92:4c:ca:09:29:e6:39:11:cf:
06:c5:c7:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtNY/4zuV5eBEK53PVZOxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjU3NzFmOTkyZmQ3NGRmYjA3MzZlNjk1YWViNTljNmFm
NjdlOTMwHhcNMjUxMDIwMTMwMDE5WhcNMjUxMDIxMTMwMDE5WjAzMTEwLwYDVQQD
EygyNWFjOGY3NjQwZGYzY2I3M2E0ZTRkZWM2NjY4M2Y4NzM4MTcxOTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yNnN15D2f52vQbyUE2fTbLs3W7G
zWSaRInWMU4dw0bOKYJTB/VcHNIq5aAyhwtfbOGIoRoiLTlPOwhLjlrKecUuPvFG
qfneBayRuibzS1oM7lWb95ps7dGTo5+AsV+AtS5D92E+eoAbZjSmh2NjJ9+F/ig+
JVXXuMmYHNJe2SndANARGHn5VLZMK2jvV1Do79bYpNj/vV2hNzFXghgtvCofOsRk
Ofw88sEAIY3qMdf/QGvAvVZ/0zfO0jOBILL3Q7/dLsrqKxBqb9YvSONCz/VNZRzi
ZHVjvIo88V0HOw9gl4UwXQ9DLahevwysGVfx7AKuGgxpCLH6jLPugWZu/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWsj3ZA3zy3Ok5N7GZoP4c4FxltMB8GA1UdIwQY
MBaAFLQldx+ZL9dN+wc25pWutZxq9n6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENWM0g1a3YxMDM3QnpibWxhNjFuR3IyZnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lOGY5NWQtYWQzOC00YjVjLWIwOTAt
OGE4NTY0YmEzYzhjLzEvdENWM0g1a3YxMDM3QnpibWxhNjFuR3IyZnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9lOGY5NWQtYWQzOC00YjVjLWIwOTAtOGE4NTY0YmEzYzhj
LzEvdENWM0g1a3YxMDM3QnpibWxhNjFuR3IyZnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTbzdS+E
dlx8tjwNiSZbMbporqALmQUJv2xFyjwhjNRvoskbspZnQkqdZ8Auwc0nZ1s5tMRx
H3gRCtEHv10Ec4762lKg8yy0gtbkKm03eeY1ppkYi/nJECzhauIqU6ouNTMrWBLj
rP59d1pjxFMdP9vz75cNYGCqTN9Nxe5vLNfmcjAYsUc+G2tQOtRrxxhH5gUJi2gM
qHxI+Xo0lgNyy5lskG3pCteaEZqddX950tbuI3TIwzMqDqowVCYuXAOlH8r/6Y+b
7n9AmjE3UB9rprcmlFyUzF15LMQ5eJ6IxUexPyQpIZHht6VGJYWX03p8ymFGkkzK
CSnmORHPBsXHvA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:42:01 2025 by rpki-client