Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: MYqvr0na/FlheaSoIfK7HneVq+ChA/JG2CnQu02av9U=
Subject key identifier: 8C:1E:99:18:B6:F2:CC:FE:6D:EB:B3:49:46:36:F5:38:DE:48:7C:7B
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 019A7225CF29A4D22F4AC793392465054A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 0F87
Signing time: Tue 11 Nov 2025 09:01:11 +0000
Manifest this update: Tue 11 Nov 2025 09:01:11 +0000
Manifest next update: Wed 12 Nov 2025 09:01:11 +0000
Files and hashes: 1: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: TYh8cuEve5EE9O3eJJ53VmwLlCIsWYqLYaYykuVxdsc=)
2: VaNHYKd7fkf8MUmIAFzRDiRSuAg.roa (hash: kArqpkPgXwbWfVfsCGeziL2LJL/J3oK8UFUA3DsKS6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:cf:29:a4:d2:2f:4a:c7:93:39:24:65:05:4a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Nov 11 09:01:11 2025 GMT
Not After : Nov 12 09:01:11 2025 GMT
Subject: CN=8c1e9918b6f2ccfe6debb3494636f538de487c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:9e:10:66:e9:49:85:68:91:d1:86:55:b1:
81:df:3e:a7:0e:09:75:ef:a7:41:90:b5:df:d6:b0:
b9:26:38:94:ed:58:02:68:b5:90:8a:8f:98:e3:8b:
51:1c:0a:46:91:0c:2a:5a:f2:99:bf:39:3d:c9:d4:
2f:66:b7:a1:03:6d:7d:7f:ec:64:0c:1b:5a:5a:cd:
0f:fd:55:24:25:34:6f:6b:e3:f1:2f:75:a5:99:a9:
48:61:71:47:3c:0f:6f:ed:cf:74:5f:a9:9b:68:59:
d7:10:39:98:cf:3a:92:02:99:d2:6d:2f:4f:b0:ec:
31:37:72:e3:dd:ce:4d:b2:a7:a7:cc:b9:46:a3:52:
d4:a5:87:be:38:ae:ac:82:ba:f3:e4:b3:d7:5e:db:
68:4a:be:34:d0:d5:c9:d3:d3:f4:d5:08:58:73:f2:
45:9e:17:51:cd:b3:b7:fd:38:c9:9a:3a:e1:72:36:
4a:66:4c:90:46:30:92:fc:f8:52:28:f5:42:7e:5b:
1d:ff:7f:58:d8:cc:50:65:f3:a8:be:1c:f3:b3:29:
dd:df:68:8c:89:e9:7d:f9:eb:c7:17:4c:db:97:61:
65:d6:b3:fe:6b:64:28:b9:24:0a:89:60:fe:eb:8d:
8b:4e:09:e1:c9:e0:94:3a:ff:28:70:48:7d:3e:61:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1E:99:18:B6:F2:CC:FE:6D:EB:B3:49:46:36:F5:38:DE:48:7C:7B
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:49:07:0f:00:a1:7b:aa:0b:7f:c5:00:39:5c:49:6d:bb:d0:
63:b0:e9:38:98:ca:d1:eb:fe:d2:43:38:73:94:fa:60:e3:dd:
46:7e:85:dc:01:05:33:ed:2d:61:7e:2b:5b:63:d8:43:10:55:
8c:c4:3a:33:70:9d:18:19:2f:7d:21:7f:f0:84:c3:88:14:27:
fe:cf:1d:52:77:6f:fc:cd:85:b2:b3:9c:30:05:7f:f0:97:12:
63:8f:97:11:05:bc:cd:07:b6:66:57:1d:d3:2f:7e:37:c7:3f:
a4:b5:b2:09:7d:39:5a:f4:7c:e0:9a:b9:32:cb:12:bc:9b:25:
3f:f6:32:15:50:67:59:e0:54:19:1a:28:65:55:ee:04:f8:e6:
54:2c:f9:bb:8f:00:30:5f:f1:17:e6:c1:59:b5:ae:f8:85:26:
84:d7:f0:71:3b:95:7d:68:25:9e:7d:72:c6:df:57:b1:77:5b:
2d:c4:c2:1c:f3:75:1a:bc:e7:54:53:03:95:59:83:e5:c9:25:
82:a0:d4:56:86:5f:3f:52:8a:32:c8:28:96:bb:49:dd:cf:d9:
f0:c5:55:b7:e8:30:3e:f6:20:03:53:d8:3b:8b:d1:a8:4b:a6:
0e:c0:1b:f7:ff:e6:9a:19:af:e9:71:f6:77:93:0e:c1:09:21:
f1:e6:6b:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJc8ppNIvSseTOSRlBUqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZGRkM2NiNjQ4YmViNDI1MWQ0N2NjNGI2NWJjZDY0YjA5
YThkNGIwHhcNMjUxMTExMDkwMTExWhcNMjUxMTEyMDkwMTExWjAzMTEwLwYDVQQD
Eyg4YzFlOTkxOGI2ZjJjY2ZlNmRlYmIzNDk0NjM2ZjUzOGRlNDg3YzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBqeEGbpSYVokdGGVbGB3z6nDgl1
76dBkLXf1rC5JjiU7VgCaLWQio+Y44tRHApGkQwqWvKZvzk9ydQvZrehA219f+xk
DBtaWs0P/VUkJTRva+PxL3WlmalIYXFHPA9v7c90X6mbaFnXEDmYzzqSApnSbS9P
sOwxN3Lj3c5NsqenzLlGo1LUpYe+OK6sgrrz5LPXXttoSr400NXJ09P01QhYc/JF
nhdRzbO3/TjJmjrhcjZKZkyQRjCS/PhSKPVCflsd/39Y2MxQZfOovhzzsynd32iM
iel9+evHF0zbl2Fl1rP+a2QouSQKiWD+642LTgnhyeCUOv8ocEh9PmEoHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwemRi28sz+beuzSUY29TjeSHx7MB8GA1UdIwQY
MBaAFOPd08tki+tCUdR8xLZbzWSwmo1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTIt
YjZiNzZlMjJmZmFjLzEvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTItYjZiNzZlMjJmZmFj
LzEvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEkHDwCh
e6oLf8UAOVxJbbvQY7DpOJjK0ev+0kM4c5T6YOPdRn6F3AEFM+0tYX4rW2PYQxBV
jMQ6M3CdGBkvfSF/8ITDiBQn/s8dUndv/M2FsrOcMAV/8JcSY4+XEQW8zQe2Zlcd
0y9+N8c/pLWyCX05WvR84Jq5MssSvJslP/YyFVBnWeBUGRooZVXuBPjmVCz5u48A
MF/xF+bBWbWu+IUmhNfwcTuVfWglnn1yxt9XsXdbLcTCHPN1GrznVFMDlVmD5ckl
gqDUVoZfP1KKMsgolrtJ3c/Z8MVVt+gwPvYgA1PYO4vRqEumDsAb9//mmhmv6XH2
d5MOwQkh8eZrPg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:41 2025 by rpki-client