Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
File: T8muTFD6CwOCrdpfPH30GPeSWGQ.mft (raw, json)
Hash identifier: AogJ/iuLDKIW6D5iJhpuxtnO/haiZVFy59MpJgEfKsA=
Subject key identifier: 5B:B2:A5:11:D1:89:E1:CA:92:D2:84:B4:7B:9B:C8:8B:AC:E2:FD:4D
Authority key identifier: 4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
Certificate issuer: /CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Certificate serial: 0199FA69F4053CD6FC328899B4850AA66464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
Manifest number: 6D
Signing time: Sun 19 Oct 2025 03:01:11 +0000
Manifest this update: Sun 19 Oct 2025 03:01:11 +0000
Manifest next update: Mon 20 Oct 2025 03:01:11 +0000
Files and hashes: 1: EfBLqsVRmS2V_zTPOhomf1PD6s8.roa (hash: animJghjOYq1IX/7qhA2FDGSZ8rTFFcjT97KQ/IiWvY=)
2: T8muTFD6CwOCrdpfPH30GPeSWGQ.crl (hash: 5fPKsAz4HSfJn2PSOkklvbo/y3rTKOgUZv5qoSv70lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:f4:05:3c:d6:fc:32:88:99:b4:85:0a:a6:64:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864
Validity
Not Before: Oct 19 03:01:11 2025 GMT
Not After : Oct 20 03:01:11 2025 GMT
Subject: CN=5bb2a511d189e1ca92d284b47b9bc88bace2fd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:36:3b:44:2b:ac:ee:99:7d:a4:f5:75:ef:35:
16:65:cd:0f:51:a2:af:a4:06:a5:48:5e:1b:1c:47:
53:4c:84:03:c0:d5:f0:1e:95:cb:55:9a:87:a0:c7:
8b:cd:b2:bf:da:7b:47:4f:0f:fe:b2:24:69:63:07:
fc:2c:97:93:bd:2b:4f:3b:8d:a1:2d:3a:db:77:cb:
f9:0d:01:e0:49:6b:85:39:1c:33:37:1b:60:c4:b4:
cb:58:07:34:9a:03:a2:71:dc:6c:5a:ca:9a:77:4d:
bc:87:cd:4a:d0:15:37:7f:16:4c:a0:b4:76:ac:ef:
ee:4f:df:77:4a:8b:ab:e1:51:be:04:5c:d0:6e:1e:
5c:6d:5d:ed:45:35:a4:d2:00:be:5c:44:bb:13:46:
1e:11:62:a8:04:c0:b1:b1:63:79:aa:44:d2:dc:56:
65:95:ac:90:b9:79:cf:7a:fe:8e:94:9b:69:e2:f3:
8c:bf:c3:0b:26:29:0d:86:9a:01:9f:00:2f:86:af:
d7:a6:6d:d3:20:f3:ea:e0:c1:6e:0b:73:33:8f:f5:
25:bc:69:aa:32:42:4a:ae:37:8b:99:d3:7e:18:a2:
1d:49:71:ac:c6:fd:c9:6c:6e:a7:9a:18:7a:c6:0d:
46:9e:71:23:92:6d:c7:c9:0c:55:dc:38:78:44:82:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B2:A5:11:D1:89:E1:CA:92:D2:84:B4:7B:9B:C8:8B:AC:E2:FD:4D
X509v3 Authority Key Identifier:
keyid:4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:f7:a7:11:b4:96:9d:66:af:45:dc:88:3f:b7:fb:f5:a2:13:
60:11:db:8b:a2:a0:4a:34:a1:eb:3c:ba:14:72:fc:44:ec:07:
9a:3f:9f:27:97:41:b9:ad:ce:e1:f4:53:ab:be:2c:49:1a:77:
dc:06:2a:42:91:80:a5:d3:b4:33:2c:3f:6e:e1:60:91:fb:36:
64:26:7f:c3:24:ce:17:39:2e:09:ce:16:56:ae:fe:11:60:2b:
e9:f7:00:61:32:00:c1:58:9c:89:c7:d4:03:13:f9:0d:71:b4:
bd:f8:92:eb:99:74:b5:28:a7:53:71:b6:fc:9c:13:44:16:da:
f1:e1:fa:7a:ee:51:08:ca:77:fe:f5:65:65:9b:0d:df:f1:00:
57:93:b3:49:61:76:cf:e9:33:88:52:b2:9c:87:8b:74:10:14:
28:04:ca:7f:c2:13:90:d6:04:42:be:fc:e2:01:bb:03:cf:cb:
d8:1f:87:23:24:5b:bb:e3:ff:60:01:03:71:0f:82:a0:a8:a4:
3e:2d:0e:ea:78:58:dc:4c:f7:c4:2f:8e:71:10:e9:37:d4:42:
51:cf:80:31:26:a0:70:97:4a:a5:6d:76:4f:87:f2:a1:b3:93:
30:82:88:12:01:bd:2a:73:52:40:25:46:63:70:26:04:2a:67:
d4:7b:18:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6afQFPNb8MoiZtIUKpmRkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYzlhZTRjNTBmYTBiMDM4MmFkZGE1ZjNjN2RmNDE4Zjc5
MjU4NjQwHhcNMjUxMDE5MDMwMTExWhcNMjUxMDIwMDMwMTExWjAzMTEwLwYDVQQD
Eyg1YmIyYTUxMWQxODllMWNhOTJkMjg0YjQ3YjliYzg4YmFjZTJmZDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TY7RCus7pl9pPV17zUWZc0PUaKv
pAalSF4bHEdTTIQDwNXwHpXLVZqHoMeLzbK/2ntHTw/+siRpYwf8LJeTvStPO42h
LTrbd8v5DQHgSWuFORwzNxtgxLTLWAc0mgOicdxsWsqad028h81K0BU3fxZMoLR2
rO/uT993Sour4VG+BFzQbh5cbV3tRTWk0gC+XES7E0YeEWKoBMCxsWN5qkTS3FZl
layQuXnPev6OlJtp4vOMv8MLJikNhpoBnwAvhq/Xpm3TIPPq4MFuC3Mzj/UlvGmq
MkJKrjeLmdN+GKIdSXGsxv3JbG6nmhh6xg1GnnEjkm3HyQxV3Dh4RIK2SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuypRHRieHKktKEtHubyIus4v1NMB8GA1UdIwQY
MBaAFE/JrkxQ+gsDgq3aXzx99Bj3klhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDhtdVRGRDZDd09DcmRwZlBIMzBHUGVTV0dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy80NDQ1ZDctYWQyZC00NDQ1LThkZGUt
MmViZDY0NTdlZjFlLzEvVDhtdVRGRDZDd09DcmRwZlBIMzBHUGVTV0dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy80NDQ1ZDctYWQyZC00NDQ1LThkZGUtMmViZDY0NTdlZjFl
LzEvVDhtdVRGRDZDd09DcmRwZlBIMzBHUGVTV0dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyfenEbSW
nWavRdyIP7f79aITYBHbi6KgSjSh6zy6FHL8ROwHmj+fJ5dBua3O4fRTq74sSRp3
3AYqQpGApdO0Myw/buFgkfs2ZCZ/wyTOFzkuCc4WVq7+EWAr6fcAYTIAwVicicfU
AxP5DXG0vfiS65l0tSinU3G2/JwTRBba8eH6eu5RCMp3/vVlZZsN3/EAV5OzSWF2
z+kziFKynIeLdBAUKATKf8ITkNYEQr784gG7A8/L2B+HIyRbu+P/YAEDcQ+CoKik
Pi0O6nhY3Ez3xC+OcRDpN9RCUc+AMSagcJdKpW12T4fyobOTMIKIEgG9KnNSQCVG
Y3AmBCpn1HsYBQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:58 2025 by rpki-client