Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
File: T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft (raw, json)
Hash identifier: 8ODl98rVOa0Rc/ijOiKhxPYrSrZdnN+UcZpOZCsW2Gg=
Subject key identifier: 17:02:31:19:90:CD:33:74:60:65:31:B4:5A:99:C3:A3:3D:A2:A9:BC
Authority key identifier: 4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48
Certificate issuer: /CN=4f401dc13e50e9cc3d42d913ea65b1554c95a548
Certificate serial: 0199FFC80ECFD2FDD3F01BF59D79E12A79EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
Manifest number: 02A4
Signing time: Mon 20 Oct 2025 04:02:05 +0000
Manifest this update: Mon 20 Oct 2025 04:02:05 +0000
Manifest next update: Tue 21 Oct 2025 04:02:05 +0000
Files and hashes: 1: NgWmbAJgungmvuD2b4lhPyG9HS4.roa (hash: t3vC0+4VBb5wCcDlMDg2W8fzOL4JtbOA3CytBK/gjwA=)
2: T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl (hash: lw/6KxSZY1mrqlvhdXb+Aeq3yhC9h/s/XRmVAHzJguY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:0e:cf:d2:fd:d3:f0:1b:f5:9d:79:e1:2a:79:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f401dc13e50e9cc3d42d913ea65b1554c95a548
Validity
Not Before: Oct 20 04:02:05 2025 GMT
Not After : Oct 21 04:02:05 2025 GMT
Subject: CN=1702311990cd3374606531b45a99c3a33da2a9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:39:8b:53:e0:6f:61:71:ee:2e:8c:1f:7d:
b9:de:18:f9:5f:e6:4e:15:5b:fc:ad:11:f3:d9:91:
ff:a4:89:bb:7a:36:55:fe:7f:13:7f:0b:ac:d7:b1:
13:16:cb:ec:bf:9f:86:07:6c:44:7d:15:a2:a8:71:
10:fe:a1:e6:8e:ad:26:6f:46:2b:3f:6e:9d:31:1c:
51:03:ee:53:77:36:17:6b:92:5e:ac:f9:8a:a7:eb:
23:19:73:6e:fc:90:30:c4:e9:af:88:57:d5:b5:67:
20:16:c9:fe:56:f5:7c:b8:d2:b9:ae:c3:63:09:24:
5d:6f:38:6a:c1:77:fa:9d:ef:03:1e:a6:34:0f:2a:
a3:50:1a:1b:97:25:45:f0:c3:bc:91:b1:9c:e6:a3:
1b:3b:af:db:d2:96:fc:62:38:62:36:be:77:c1:82:
55:71:b7:64:ef:72:15:10:75:94:b7:b7:d4:79:41:
2f:46:fd:a9:9b:95:71:86:bc:96:32:f5:c8:c4:4e:
17:96:ab:af:11:4a:e1:01:41:c4:ee:88:18:b1:cf:
93:ec:c1:5c:67:6c:c8:04:9a:b3:30:56:e3:21:64:
ce:1e:81:a2:01:b9:75:c0:54:2a:97:cc:f7:ca:70:
9d:5f:c4:29:e5:ea:de:58:52:6d:97:bc:b9:af:92:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:02:31:19:90:CD:33:74:60:65:31:B4:5A:99:C3:A3:3D:A2:A9:BC
X509v3 Authority Key Identifier:
keyid:4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:dc:ac:34:db:3e:c1:76:81:cd:cb:38:75:21:fb:32:d0:07:
26:37:bf:30:e4:cf:93:9f:72:bf:b9:89:ac:2d:ac:a6:cb:78:
05:8f:11:f1:ca:57:8c:bc:e6:41:41:3c:c3:87:e4:f5:6d:ce:
bc:61:88:a8:19:25:cd:f8:98:64:e7:4c:50:38:a7:e1:75:5f:
12:6e:7d:f0:73:ba:26:06:4a:49:ac:67:6a:97:da:9d:1c:a0:
d2:90:01:1d:23:87:1f:d8:54:d5:f0:08:81:df:5a:0b:01:92:
9b:3b:0f:b7:36:00:6e:72:22:67:b3:cd:49:5f:0e:50:08:a5:
17:e3:b7:92:08:c5:27:59:11:d3:6a:cd:db:6a:a4:16:84:07:
01:58:dc:ef:fb:3b:f1:21:7a:54:e0:27:74:b9:70:68:5d:a6:
02:de:6a:7f:6d:37:e6:a7:f2:73:38:2d:ff:61:bc:82:dd:73:
c8:37:c6:aa:fa:73:aa:4b:8a:fa:1d:8b:4f:27:5d:35:d4:22:
61:4e:bd:ae:81:e0:1f:34:d7:48:d3:83:bb:5c:27:08:90:3c:
a6:fc:d5:32:37:74:c4:f0:cd:59:8b:e9:57:1f:b8:db:41:c3:
a7:af:20:9f:70:6d:30:c4:14:32:77:8d:4e:bb:65:ac:81:d2:
90:c9:69:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yA7P0v3T8Bv1nXnhKnnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNDAxZGMxM2U1MGU5Y2MzZDQyZDkxM2VhNjViMTU1NGM5
NWE1NDgwHhcNMjUxMDIwMDQwMjA1WhcNMjUxMDIxMDQwMjA1WjAzMTEwLwYDVQQD
EygxNzAyMzExOTkwY2QzMzc0NjA2NTMxYjQ1YTk5YzNhMzNkYTJhOWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcM5i1Pgb2Fx7i6MH3253hj5X+ZO
FVv8rRHz2ZH/pIm7ejZV/n8Tfwus17ETFsvsv5+GB2xEfRWiqHEQ/qHmjq0mb0Yr
P26dMRxRA+5TdzYXa5JerPmKp+sjGXNu/JAwxOmviFfVtWcgFsn+VvV8uNK5rsNj
CSRdbzhqwXf6ne8DHqY0DyqjUBoblyVF8MO8kbGc5qMbO6/b0pb8YjhiNr53wYJV
cbdk73IVEHWUt7fUeUEvRv2pm5VxhryWMvXIxE4XlquvEUrhAUHE7ogYsc+T7MFc
Z2zIBJqzMFbjIWTOHoGiAbl1wFQql8z3ynCdX8Qp5ereWFJtl7y5r5IGVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcCMRmQzTN0YGUxtFqZw6M9oqm8MB8GA1UdIwQY
MBaAFE9AHcE+UOnMPULZE+plsVVMlaVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDBBZHdUNVE2Y3c5UXRrVDZtV3hWVXlWcFVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85NjY5MGMtZDRlNS00MGZhLWE4Njkt
M2EwNWJiNzUzMGM2LzEvVDBBZHdUNVE2Y3c5UXRrVDZtV3hWVXlWcFVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC85NjY5MGMtZDRlNS00MGZhLWE4NjktM2EwNWJiNzUzMGM2
LzEvVDBBZHdUNVE2Y3c5UXRrVDZtV3hWVXlWcFVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtysNNs+
wXaBzcs4dSH7MtAHJje/MOTPk59yv7mJrC2spst4BY8R8cpXjLzmQUE8w4fk9W3O
vGGIqBklzfiYZOdMUDin4XVfEm598HO6JgZKSaxnapfanRyg0pABHSOHH9hU1fAI
gd9aCwGSmzsPtzYAbnIiZ7PNSV8OUAilF+O3kgjFJ1kR02rN22qkFoQHAVjc7/s7
8SF6VOAndLlwaF2mAt5qf2035qfyczgt/2G8gt1zyDfGqvpzqkuK+h2LTyddNdQi
YU69roHgHzTXSNODu1wnCJA8pvzVMjd0xPDNWYvpVx+420HDp68gn3BtMMQUMneN
TrtlrIHSkMlpwg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:38 2025 by rpki-client