Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File: RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier: ODOIrO9egHXb0ouaha+84N06hv9jBW3goX6Sk7gs+b0=
Subject key identifier: 6C:60:DD:E7:66:57:69:CB:9F:C2:0C:AD:C1:41:D5:F2:F3:8A:85:9E
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer: /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial: 019A526315B237AEF9104B7D521EC0CD700B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number: 04D7
Signing time: Wed 05 Nov 2025 05:00:16 +0000
Manifest this update: Wed 05 Nov 2025 05:00:16 +0000
Manifest next update: Thu 06 Nov 2025 05:00:16 +0000
Files and hashes: 1: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: MCJV3tt1pezhKDQ/JdDs4XjIqS7NHCJBLWg3N5FcV74=)
2: etkRbnW9ryrJ6e3ywwJ1q9bD7Xw.roa (hash: JMmWgxd8mijwpLVsPTeG3AKA8OAxDNzyK+lSzQE8/U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:15:b2:37:ae:f9:10:4b:7d:52:1e:c0:cd:70:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
Validity
Not Before: Nov 5 05:00:16 2025 GMT
Not After : Nov 6 05:00:16 2025 GMT
Subject: CN=6c60dde7665769cb9fc20cadc141d5f2f38a859e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:14:e5:61:44:49:0a:c7:45:c2:3b:c5:ff:
64:3f:14:44:31:56:bc:40:e9:69:d1:ff:27:f8:ca:
84:d5:69:1d:6b:ca:2e:d1:63:36:35:7e:53:3f:90:
87:76:dd:7b:dc:fa:c3:f3:84:97:3b:12:35:78:a5:
0e:ef:9d:3b:5e:67:1e:97:d4:57:59:7e:38:cd:75:
eb:7c:c3:f3:aa:b9:51:8b:ac:b2:fe:d6:79:eb:74:
bf:80:5b:68:14:ed:21:34:06:a4:f5:fb:c3:5f:67:
e1:47:e9:a2:53:95:cc:9f:b6:99:fd:33:6e:5b:e3:
aa:33:67:83:83:c3:aa:6a:82:af:d3:31:8a:c1:2d:
ab:97:c2:33:04:50:cb:1d:2f:ca:8f:ea:c5:5d:02:
38:fa:71:e0:26:ac:d6:62:c3:56:3f:09:08:c0:99:
56:9e:13:67:56:52:61:36:2b:f5:fc:56:a5:6a:f5:
8a:d8:f6:bc:52:c1:a2:8b:fc:7b:73:12:cf:b1:2d:
54:f8:d0:fa:6a:cd:2c:12:07:30:e5:e4:7f:c0:96:
3c:c1:fe:73:a1:0a:25:56:d4:8b:20:b4:09:4e:69:
31:6f:bd:3b:41:3a:31:a2:15:ff:20:a0:80:7d:3e:
42:20:a2:5e:3f:74:34:21:d0:75:93:62:9e:22:96:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:60:DD:E7:66:57:69:CB:9F:C2:0C:AD:C1:41:D5:F2:F3:8A:85:9E
X509v3 Authority Key Identifier:
keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fa:37:73:8b:a8:80:f6:f1:99:e9:71:17:72:a4:cb:76:3a:
19:50:0a:cc:2e:87:7b:bb:53:53:6e:b5:32:f0:1b:9e:13:f8:
c9:8d:74:0c:dc:09:88:e8:a2:87:db:4c:22:b6:2a:ab:03:4d:
e0:9f:69:4a:e8:08:81:91:ef:ea:c8:44:4f:12:82:bb:d3:50:
8b:8e:bc:83:38:d1:cf:5b:d9:be:37:8c:06:29:24:1d:13:53:
6d:4e:71:cc:88:d9:db:40:b3:e6:79:50:53:5c:ce:82:ea:dc:
f2:e5:c4:c6:57:77:96:66:87:a6:1e:33:a0:da:cf:38:a6:07:
41:9d:53:25:49:a3:b6:4a:f4:6d:25:94:5a:c8:1a:75:c9:aa:
15:fb:5d:72:c8:e4:a4:d8:b6:f0:54:db:dd:5e:84:45:28:c8:
5a:f0:e5:bd:ee:7c:0b:45:8c:88:27:c9:ca:08:a8:f8:13:39:
12:8f:e5:8a:3e:2a:92:32:72:bd:1f:b1:c0:bc:c9:25:13:5e:
e6:71:4b:c6:a0:fe:20:b6:4b:a3:fb:ab:fc:d1:c1:7c:92:c1:
22:15:43:a1:c0:b4:05:af:c6:ef:03:d7:7e:97:76:26:fe:dc:
6f:d7:eb:fd:84:56:7f:bf:fa:1c:66:da:1b:0a:d2:a9:3c:78:
c1:de:9d:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSYxWyN675EEt9Uh7AzXALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDNjNjU2YzE5NzQ2MWE0OWNhYTFmZmQ3MjBkMThiZWVh
YzgwNzYwHhcNMjUxMTA1MDUwMDE2WhcNMjUxMTA2MDUwMDE2WjAzMTEwLwYDVQQD
Eyg2YzYwZGRlNzY2NTc2OWNiOWZjMjBjYWRjMTQxZDVmMmYzOGE4NTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRgU5WFESQrHRcI7xf9kPxREMVa8
QOlp0f8n+MqE1Wkda8ou0WM2NX5TP5CHdt173PrD84SXOxI1eKUO7507Xmcel9RX
WX44zXXrfMPzqrlRi6yy/tZ563S/gFtoFO0hNAak9fvDX2fhR+miU5XMn7aZ/TNu
W+OqM2eDg8OqaoKv0zGKwS2rl8IzBFDLHS/Kj+rFXQI4+nHgJqzWYsNWPwkIwJlW
nhNnVlJhNiv1/FalavWK2Pa8UsGii/x7cxLPsS1U+ND6as0sEgcw5eR/wJY8wf5z
oQolVtSLILQJTmkxb707QToxohX/IKCAfT5CIKJeP3Q0IdB1k2KeIpYJ3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxg3edmV2nLn8IMrcFB1fLzioWeMB8GA1UdIwQY
MBaAFEYDxlbBl0YaScqh/9cg0YvurIB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWIt
YWZhNGZkMzUwNmQwLzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWItYWZhNGZkMzUwNmQw
LzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfo3c4uo
gPbxmelxF3Kky3Y6GVAKzC6He7tTU261MvAbnhP4yY10DNwJiOiih9tMIrYqqwNN
4J9pSugIgZHv6shETxKCu9NQi468gzjRz1vZvjeMBikkHRNTbU5xzIjZ20Cz5nlQ
U1zOgurc8uXExld3lmaHph4zoNrPOKYHQZ1TJUmjtkr0bSWUWsgadcmqFftdcsjk
pNi28FTb3V6ERSjIWvDlve58C0WMiCfJygio+BM5Eo/lij4qkjJyvR+xwLzJJRNe
5nFLxqD+ILZLo/ur/NHBfJLBIhVDocC0Ba/G7wPXfpd2Jv7cb9fr/YRWf7/6HGba
GwrSqTx4wd6dTQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:55:56 2025 by rpki-client