Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
File: taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json)
Hash identifier: SG7/U24yPLJVFg6XnesqoMDJ4V8n4DsqUNCipYvDt7s=
Subject key identifier: 94:86:17:BD:A5:F8:49:FA:02:89:FC:1B:80:C4:81:76:17:F8:87:C4
Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
Certificate issuer: /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Certificate serial: 0199FC8FC16FE68090B8BF149568E400AF58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 13:01:43 +0000
Manifest this update: Sun 19 Oct 2025 13:01:43 +0000
Manifest next update: Mon 20 Oct 2025 13:01:43 +0000
Files and hashes: 1: FxOU5mcs5zu6It7tyYPtggiNpMw.roa (hash: HYzosP3W6gjE2lC2/EeCUTPjqHpatsBGbz79rZD00GQ=)
2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: Zy81guvgzBGD6ut7LHmrOtKBgsssOuMKNTP3AhGjUnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c1:6f:e6:80:90:b8:bf:14:95:68:e4:00:af:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Validity
Not Before: Oct 19 13:01:43 2025 GMT
Not After : Oct 20 13:01:43 2025 GMT
Subject: CN=948617bda5f849fa0289fc1b80c4817617f887c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:4e:22:3b:9c:f4:f8:51:56:76:d4:03:e6:
60:b2:21:29:ae:5a:53:8e:41:da:8b:63:d8:2d:21:
3f:e5:bd:dc:46:a4:1a:ea:47:3c:d2:ec:20:f7:42:
96:c1:25:de:44:78:2d:45:74:35:0e:1b:9e:c8:52:
cd:b8:c8:dd:d5:de:17:c4:77:8e:16:c6:78:67:a7:
4b:c7:e1:3a:32:a7:81:be:b4:44:ac:2d:69:b7:c4:
90:e2:31:81:ae:f6:3e:19:3b:3b:f3:b5:ff:96:b2:
f7:19:62:da:b7:42:5a:10:d6:1a:d0:aa:8d:51:07:
1a:7d:87:40:d2:0c:50:8d:e1:95:0e:8c:42:f8:a1:
f7:5f:30:a1:1c:c9:ea:c5:3b:47:6f:2f:1b:92:bd:
77:ef:cd:b4:8e:13:2c:00:4d:15:ca:3c:6a:f6:66:
ee:c5:6a:ac:0b:71:9e:2d:71:d5:e9:fc:e8:17:17:
1f:56:bd:89:14:b8:48:d8:ae:b7:17:6a:8d:d0:ea:
f1:74:ef:2a:c5:f0:d3:9f:98:be:34:0a:47:0a:22:
b0:8a:46:5e:60:af:5c:b0:6c:ea:6b:d0:de:d1:33:
ac:44:9d:85:b3:90:5f:82:c6:c8:5a:41:3d:86:f3:
b7:3f:ce:ca:e2:31:e0:e7:b2:c6:e7:2a:98:0e:01:
4f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:86:17:BD:A5:F8:49:FA:02:89:FC:1B:80:C4:81:76:17:F8:87:C4
X509v3 Authority Key Identifier:
keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:71:f2:cd:fb:02:9a:4e:b5:16:bd:fe:a3:6d:1a:ff:e5:14:
4e:a9:03:3e:54:18:a5:60:f1:e3:08:85:42:4b:d5:e1:b5:05:
c4:22:3a:11:6b:e9:05:30:e4:34:f0:f8:4c:d6:0b:19:26:01:
df:24:db:71:a5:ba:ec:33:4e:ae:e7:01:94:16:59:29:5a:16:
d2:57:d0:d3:b2:3d:4e:75:7f:fe:1b:af:36:95:10:0b:8d:e9:
b1:64:6d:64:fa:d0:84:d1:b5:ed:f2:85:81:0c:1f:00:76:92:
b9:f6:66:a7:9f:dd:15:ce:d0:a9:fb:c3:ec:f8:1d:44:72:8f:
3b:7c:f6:35:36:e2:88:0a:de:dd:9f:0b:49:56:7f:6b:90:03:
fc:39:43:ad:de:89:94:20:11:7e:10:54:55:ab:c9:90:ff:55:
1d:f1:1e:77:4d:26:1a:0b:5d:a6:f4:75:0e:91:26:99:9a:69:
c7:6b:40:1a:16:38:01:d1:3d:1e:57:f8:61:77:f3:88:37:31:
ea:04:d1:36:dc:d6:83:3e:3b:04:f9:13:08:63:f2:fd:e0:70:
8b:15:2a:56:14:0a:1d:a3:96:0d:02:38:98:3f:cc:39:d5:b1:
90:ba:e5:e6:39:40:f0:2b:b6:02:44:06:c1:7e:b2:6d:53:3f:
a0:01:10:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j8Fv5oCQuL8UlWjkAK9YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YTI2M2QxOGViNWM1NDBmNzQ3ODgyNWJiNzJlZmFjNmYy
OGY4MmIwHhcNMjUxMDE5MTMwMTQzWhcNMjUxMDIwMTMwMTQzWjAzMTEwLwYDVQQD
Eyg5NDg2MTdiZGE1Zjg0OWZhMDI4OWZjMWI4MGM0ODE3NjE3Zjg4N2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJVOIjuc9PhRVnbUA+ZgsiEprlpT
jkHai2PYLSE/5b3cRqQa6kc80uwg90KWwSXeRHgtRXQ1DhueyFLNuMjd1d4XxHeO
FsZ4Z6dLx+E6MqeBvrRErC1pt8SQ4jGBrvY+GTs787X/lrL3GWLat0JaENYa0KqN
UQcafYdA0gxQjeGVDoxC+KH3XzChHMnqxTtHby8bkr137820jhMsAE0Vyjxq9mbu
xWqsC3GeLXHV6fzoFxcfVr2JFLhI2K63F2qN0OrxdO8qxfDTn5i+NApHCiKwikZe
YK9csGzqa9De0TOsRJ2Fs5BfgsbIWkE9hvO3P87K4jHg57LG5yqYDgFPcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSGF72l+En6Aon8G4DEgXYX+IfEMB8GA1UdIwQY
MBaAFLWiY9GOtcVA90eIJbty76xvKPgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2Et
MTQ2YTY5YjZkOGU0LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2EtMTQ2YTY5YjZkOGU0
LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxHHyzfsC
mk61Fr3+o20a/+UUTqkDPlQYpWDx4wiFQkvV4bUFxCI6EWvpBTDkNPD4TNYLGSYB
3yTbcaW67DNOrucBlBZZKVoW0lfQ07I9TnV//huvNpUQC43psWRtZPrQhNG17fKF
gQwfAHaSufZmp5/dFc7QqfvD7PgdRHKPO3z2NTbiiAre3Z8LSVZ/a5AD/DlDrd6J
lCARfhBUVavJkP9VHfEed00mGgtdpvR1DpEmmZppx2tAGhY4AdE9Hlf4YXfziDcx
6gTRNtzWgz47BPkTCGPy/eBwixUqVhQKHaOWDQI4mD/MOdWxkLrl5jlA8Cu2AkQG
wX6ybVM/oAEQsA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:15 2025 by rpki-client