Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
File: RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json)
Hash identifier: JaWzOL7yv8oEc981bpu7i/96I5ctPe/HXm9Cwr3/FkM=
Subject key identifier: 05:D2:90:50:05:7A:9D:FA:FE:8D:16:4D:BE:2E:78:25:08:EA:76:5A
Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
Certificate issuer: /CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Certificate serial: 019A72937301A8984BBA2AA8020A4C5A3230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:00:56 +0000
Manifest this update: Tue 11 Nov 2025 11:00:56 +0000
Manifest next update: Wed 12 Nov 2025 11:00:56 +0000
Files and hashes: 1: 6Ch2BA4EBBViUCewGb6Paaan7YI.roa (hash: WRYMr3XPQ7z0oDRXKp9hN0X+086fzEIRzfg0NuzfPNE=)
2: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: 61L0bMEgUlzX+vofivqI+Qd42kCS9nCnbzwKl4ca7jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:73:01:a8:98:4b:ba:2a:a8:02:0a:4c:5a:32:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Validity
Not Before: Nov 11 11:00:56 2025 GMT
Not After : Nov 12 11:00:56 2025 GMT
Subject: CN=05d29050057a9dfafe8d164dbe2e782508ea765a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:fa:11:df:84:04:f7:e1:d4:e3:56:ad:ba:
3c:3b:d8:6c:ad:98:26:70:eb:39:4e:0d:f7:ec:d1:
db:ce:85:69:31:a9:1a:7b:ed:4f:36:78:65:01:66:
14:f3:1f:41:04:21:e3:d2:a6:dc:ec:a5:9e:6e:cb:
d7:e2:d1:15:0b:93:ed:f7:9c:4f:71:62:51:b7:7b:
69:32:6d:5a:01:b3:5c:1c:21:eb:6b:c3:49:da:83:
dd:4b:c5:42:35:42:e9:47:c1:0f:1f:e7:a2:f0:5a:
25:88:cd:65:05:30:d4:3e:00:6c:b4:43:47:8e:ef:
97:ca:2f:0c:ea:01:40:61:89:e3:b1:c7:c5:76:33:
fd:88:51:18:94:af:22:7d:a9:ce:41:a2:9b:a0:a0:
5d:f1:72:90:a1:94:79:8c:48:e6:80:e8:25:2f:3d:
27:4a:8c:d1:82:ba:77:5c:81:2d:1d:72:9a:0f:60:
04:b9:4a:64:eb:0e:9a:88:52:82:97:68:08:a3:39:
e6:fe:04:d4:12:c9:3f:38:28:02:56:26:be:d3:5d:
ac:27:25:e1:5c:45:72:2d:84:ec:c8:71:1f:a0:77:
f8:7d:d2:a7:f0:af:7e:c1:13:66:fe:8b:86:22:88:
6a:ee:7a:e2:69:0b:08:22:5e:c4:30:f6:33:f2:1b:
e4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D2:90:50:05:7A:9D:FA:FE:8D:16:4D:BE:2E:78:25:08:EA:76:5A
X509v3 Authority Key Identifier:
keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8d:32:49:1f:e3:3d:c9:9f:03:08:0d:f1:5a:cf:6b:a0:ef:
51:90:dc:c1:2a:d6:e2:9d:6b:d7:b6:fa:13:1d:78:09:3b:8a:
07:1b:b7:7f:01:58:5b:11:2c:3d:13:01:40:b3:a4:33:86:20:
11:ba:8d:07:5b:ee:ab:dd:49:f7:b5:65:93:bf:a7:5d:48:ef:
88:97:2d:9c:d0:73:7d:93:b1:2b:40:55:f3:0a:95:50:3d:28:
84:22:3d:84:0e:df:5c:49:3e:f0:9e:fe:e3:6b:56:8b:b6:30:
8a:85:80:dd:29:8c:41:4e:97:5b:87:9a:7b:43:63:52:19:68:
d2:4f:de:b6:c8:ad:15:46:e4:02:54:e6:d0:d2:ee:94:dc:05:
52:83:ed:9f:48:bf:3a:f9:c1:09:68:90:67:5a:66:99:88:dd:
e3:44:15:85:8a:98:7b:74:fe:07:29:7a:2e:7b:b2:92:df:68:
45:33:13:2c:13:98:6e:3b:c3:15:86:dc:0e:e9:9c:d9:ec:8c:
7c:f5:43:f1:69:f9:f9:0d:cd:91:ef:1b:8e:56:e5:c0:c9:85:
5b:ed:ae:ed:4b:71:30:54:20:ba:8d:28:7b:44:77:86:7c:14:
17:11:10:a9:f0:08:ef:38:93:a0:7a:ca:8c:c3:0f:3f:e6:f2:
1f:84:6e:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk3MBqJhLuiqoAgpMWjIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NWRmMTNkMjBmM2I1NzFhNGJhNjEwYjgxZTYzMDNkYjZk
MDk5YzAwHhcNMjUxMTExMTEwMDU2WhcNMjUxMTEyMTEwMDU2WjAzMTEwLwYDVQQD
EygwNWQyOTA1MDA1N2E5ZGZhZmU4ZDE2NGRiZTJlNzgyNTA4ZWE3NjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMH6Ed+EBPfh1ONWrbo8O9hsrZgm
cOs5Tg337NHbzoVpMakae+1PNnhlAWYU8x9BBCHj0qbc7KWebsvX4tEVC5Pt95xP
cWJRt3tpMm1aAbNcHCHra8NJ2oPdS8VCNULpR8EPH+ei8FoliM1lBTDUPgBstENH
ju+Xyi8M6gFAYYnjscfFdjP9iFEYlK8ifanOQaKboKBd8XKQoZR5jEjmgOglLz0n
SozRgrp3XIEtHXKaD2AEuUpk6w6aiFKCl2gIoznm/gTUEsk/OCgCVia+012sJyXh
XEVyLYTsyHEfoHf4fdKn8K9+wRNm/ouGIohq7nriaQsIIl7EMPYz8hvk5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXSkFAFep36/o0WTb4ueCUI6nZaMB8GA1UdIwQY
MBaAFERd8T0g87VxpLphC4HmMD220JnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTkt
NGY1NGFkNzU1YjIwLzEvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTktNGY1NGFkNzU1YjIw
LzEvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAio0ySR/j
PcmfAwgN8VrPa6DvUZDcwSrW4p1r17b6Ex14CTuKBxu3fwFYWxEsPRMBQLOkM4Yg
EbqNB1vuq91J97Vlk7+nXUjviJctnNBzfZOxK0BV8wqVUD0ohCI9hA7fXEk+8J7+
42tWi7YwioWA3SmMQU6XW4eae0NjUhlo0k/etsitFUbkAlTm0NLulNwFUoPtn0i/
OvnBCWiQZ1pmmYjd40QVhYqYe3T+Byl6Lnuykt9oRTMTLBOYbjvDFYbcDumc2eyM
fPVD8Wn5+Q3Nke8bjlblwMmFW+2u7UtxMFQguo0oe0R3hnwUFxEQqfAI7ziToHrK
jMMPP+byH4RuVg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:53 2025 by rpki-client