Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
File: ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft (raw, json)
Hash identifier: fLHp6laIBC/2UACLKX6bQGozwesAW5zRAwvR9+uQx34=
Subject key identifier: 9A:A4:D4:82:C9:A6:DC:13:22:E6:AF:39:48:DA:CE:CF:54:5A:76:11
Authority key identifier: B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
Certificate issuer: /CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Certificate serial: 019A71EEA2D8B8606972DA72A1B50CF9E89B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 08:00:55 +0000
Manifest this update: Tue 11 Nov 2025 08:00:55 +0000
Manifest next update: Wed 12 Nov 2025 08:00:55 +0000
Files and hashes: 1: 1-qjOvMD_gOLy6H4ikM5iY4VGQ8.roa (hash: x56Lu5EMx6deCo6ci/ec7JVHm+rQMFgfSVpjOag6Bkc=)
2: ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl (hash: pVIbQ8IjM5R3wRCKK/F3Y4l0QniHvYQFCKiMBq+dZyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a2:d8:b8:60:69:72:da:72:a1:b5:0c:f9:e8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Validity
Not Before: Nov 11 08:00:55 2025 GMT
Not After : Nov 12 08:00:55 2025 GMT
Subject: CN=9aa4d482c9a6dc1322e6af3948dacecf545a7611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:76:d6:74:7c:7b:b5:1c:23:88:2d:0b:4c:
69:15:42:d4:3c:c7:b5:0b:39:94:88:40:6d:76:53:
5b:95:c6:9d:cd:a3:9a:a3:d2:39:b3:e8:fd:00:c9:
55:ed:20:c9:d9:2d:35:9a:a9:fa:f3:41:60:30:f0:
67:0c:f0:97:a1:0e:3f:88:8f:c5:77:3c:e5:80:0a:
e3:03:35:b7:c9:22:38:68:d7:8f:a5:a3:5b:07:e5:
65:52:6f:08:86:ca:8b:f8:5c:b8:7c:bb:91:0c:11:
fe:16:34:6a:4c:bd:57:8f:c7:63:2a:c6:de:3b:9c:
54:fe:02:6f:08:a8:5d:99:06:05:5f:83:3a:23:97:
0b:e1:a5:7e:c4:c8:09:a4:18:89:ee:53:9c:17:16:
40:22:20:14:22:79:c7:a4:ee:5f:77:11:9c:06:88:
5f:bb:cd:e0:65:63:69:d5:5c:49:a8:e6:5a:0e:26:
f9:d6:05:88:47:b8:0d:f4:3c:f2:1f:7e:5c:1b:6e:
4b:8b:d1:a9:ad:f4:8a:71:8f:2a:c7:1f:8b:bf:29:
15:eb:2d:c8:e1:86:b9:1c:0a:e2:cb:c0:83:22:c3:
ee:a3:c7:75:52:88:bc:66:17:f6:90:71:f7:43:82:
61:fa:40:a4:a8:34:b0:0c:43:7a:23:d0:7a:ef:2d:
00:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A4:D4:82:C9:A6:DC:13:22:E6:AF:39:48:DA:CE:CF:54:5A:76:11
X509v3 Authority Key Identifier:
keyid:B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8e:42:9a:17:54:cc:da:87:28:1a:e5:95:ac:bd:2c:32:14:
7b:a5:cb:2d:61:72:0c:2c:59:32:30:21:b9:48:3f:3a:3a:e6:
24:f2:1e:6d:b1:98:93:03:91:b2:24:f9:12:a8:e9:92:7a:30:
cd:91:78:a9:85:78:b5:79:fc:f2:92:e1:6e:69:9c:83:ba:62:
02:af:4b:88:94:d6:b2:cb:18:11:b4:f0:59:56:a2:d5:22:3b:
50:7a:c8:f1:3a:02:db:ef:a5:f2:51:f6:c7:76:9d:06:e8:2d:
62:2c:b8:0f:a3:5a:2b:3b:f1:53:b7:44:e8:58:1e:db:ed:80:
1e:2a:dc:72:93:61:4d:39:7f:4c:b2:eb:3b:d5:b4:cc:d5:cf:
1d:6d:d7:1d:56:99:1f:6b:d0:78:0c:7f:63:41:d7:c0:b4:26:
2b:6d:27:31:0f:d7:ba:f8:a5:66:23:68:4b:2a:37:bb:6a:8e:
19:58:29:3f:45:c4:9f:88:56:b9:b2:fa:65:8d:f5:dd:91:53:
46:28:85:9f:7c:bc:c5:75:8e:44:34:73:55:81:97:b2:18:9c:
f4:f8:13:e3:6d:e8:47:2b:74:03:d2:f0:ae:f7:1d:be:e4:11:
3e:2f:fb:53:e1:26:3e:82:7c:35:09:ee:f5:12:80:95:db:d0:
0b:b0:f8:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7qLYuGBpctpyobUM+eibMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmRkNjA1NDhiNjdjYzQxZTY3YjZhNjE2YTEyZWM1M2Jm
NDI5NzgwHhcNMjUxMTExMDgwMDU1WhcNMjUxMTEyMDgwMDU1WjAzMTEwLwYDVQQD
Eyg5YWE0ZDQ4MmM5YTZkYzEzMjJlNmFmMzk0OGRhY2VjZjU0NWE3NjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK921nR8e7UcI4gtC0xpFULUPMe1
CzmUiEBtdlNblcadzaOao9I5s+j9AMlV7SDJ2S01mqn680FgMPBnDPCXoQ4/iI/F
dzzlgArjAzW3ySI4aNePpaNbB+VlUm8IhsqL+Fy4fLuRDBH+FjRqTL1Xj8djKsbe
O5xU/gJvCKhdmQYFX4M6I5cL4aV+xMgJpBiJ7lOcFxZAIiAUInnHpO5fdxGcBohf
u83gZWNp1VxJqOZaDib51gWIR7gN9DzyH35cG25Li9GprfSKcY8qxx+LvykV6y3I
4Ya5HAriy8CDIsPuo8d1Uoi8Zhf2kHH3Q4Jh+kCkqDSwDEN6I9B67y0AfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqk1ILJptwTIuavOUjazs9UWnYRMB8GA1UdIwQY
MBaAFLYt1gVItnzEHme2phahLsU79Cl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGkzV0JVaTJmTVFlWjdhbUZxRXV4VHYwS1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80OTBlMTItMWE0NS00YjAwLWE0NmMt
YWYxZTZkMDc3ZTBjLzEvdGkzV0JVaTJmTVFlWjdhbUZxRXV4VHYwS1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80OTBlMTItMWE0NS00YjAwLWE0NmMtYWYxZTZkMDc3ZTBj
LzEvdGkzV0JVaTJmTVFlWjdhbUZxRXV4VHYwS1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI45CmhdU
zNqHKBrllay9LDIUe6XLLWFyDCxZMjAhuUg/OjrmJPIebbGYkwORsiT5Eqjpknow
zZF4qYV4tXn88pLhbmmcg7piAq9LiJTWsssYEbTwWVai1SI7UHrI8ToC2++l8lH2
x3adBugtYiy4D6NaKzvxU7dE6Fge2+2AHirccpNhTTl/TLLrO9W0zNXPHW3XHVaZ
H2vQeAx/Y0HXwLQmK20nMQ/XuvilZiNoSyo3u2qOGVgpP0XEn4hWubL6ZY313ZFT
RiiFn3y8xXWORDRzVYGXshic9PgT423oRyt0A9LwrvcdvuQRPi/7U+EmPoJ8NQnu
9RKAldvQC7D4Jg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:00 2025 by rpki-client