Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
File: RzsJuP3t5sq1JPyqOzHmFrouSJY.mft (raw, json)
Hash identifier: Cti1D9fTDRrfuZ+YRGy0lm6yZpCbUJgoaS2JKVcG7Z4=
Subject key identifier: BA:A3:AC:CD:D3:9C:EC:59:44:8B:55:92:C7:31:D0:54:A8:10:21:8A
Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
Certificate issuer: /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Certificate serial: 019A71B798B3592D0BD355E84C3D96EA31CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:00:48 +0000
Manifest this update: Tue 11 Nov 2025 07:00:48 +0000
Manifest next update: Wed 12 Nov 2025 07:00:48 +0000
Files and hashes: 1: RzsJuP3t5sq1JPyqOzHmFrouSJY.crl (hash: ZdZIVS8w3T3Q2WokektTDE2TLEM6rbiw10r8HiFQnFY=)
2: vPQVU__LjjI0KQlbryLD4Z9lbco.roa (hash: T5jCIurL/aGFPYJ7qI4EV92wzbQfymp5kGHdqCYG6bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:98:b3:59:2d:0b:d3:55:e8:4c:3d:96:ea:31:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Validity
Not Before: Nov 11 07:00:48 2025 GMT
Not After : Nov 12 07:00:48 2025 GMT
Subject: CN=baa3accdd39cec59448b5592c731d054a810218a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f9:5e:78:e6:be:10:b0:2c:c3:e2:b4:27:04:
d2:b3:14:ff:63:2a:20:28:c1:a7:12:be:6a:ca:1e:
a4:f8:79:e7:a0:06:f8:34:b7:06:37:ff:f8:3a:8a:
bf:36:48:27:32:d1:bc:2f:98:8f:f9:c2:2e:81:a3:
b6:32:4a:52:84:61:9d:d3:da:0a:77:76:e3:d1:1d:
cf:ab:d9:80:f2:9b:5b:23:8e:a6:d1:e6:09:2d:71:
28:ff:bd:2b:d9:55:2d:3d:41:e4:df:f5:43:6d:d3:
7c:5d:95:69:7b:71:d2:3f:00:60:d7:4d:ac:b6:9d:
fe:6d:10:86:38:7f:1b:87:2c:12:2f:a5:98:6c:6a:
54:02:cb:b8:86:73:a4:ee:9f:f0:58:aa:4c:a0:4a:
3f:f5:97:f8:41:4d:a5:14:14:a8:12:91:c4:2d:71:
ea:46:6a:ab:f5:9a:5d:e3:ff:1d:17:c8:b5:7b:35:
08:43:97:66:d9:7a:39:df:70:4c:72:3b:59:36:aa:
c0:39:9a:ee:3a:ca:15:ad:b8:d7:67:6b:1e:59:9b:
86:80:5d:bd:c1:e9:2d:4b:1a:6b:5d:1a:bb:fa:7f:
40:ee:4b:c3:fc:b5:fe:89:0b:4c:14:a0:12:40:9f:
89:64:1c:88:58:48:0b:62:e9:7a:3a:f1:0c:68:6a:
a0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A3:AC:CD:D3:9C:EC:59:44:8B:55:92:C7:31:D0:54:A8:10:21:8A
X509v3 Authority Key Identifier:
keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f3:72:1e:b4:be:bc:00:31:03:f4:7b:46:03:f9:c9:e1:67:
f3:0f:13:55:e4:19:d5:10:7d:e9:98:5b:96:da:cb:83:da:58:
4c:8d:9b:15:d2:c4:27:9e:2c:5d:67:a8:b7:67:bd:2f:dc:17:
1b:8d:d1:7c:f6:01:b9:bb:11:c7:bc:68:9a:75:dd:7a:82:e4:
af:ad:0e:48:e5:b6:a2:b9:14:fe:c1:cf:d8:d5:5d:aa:6c:d3:
eb:2e:69:7d:9c:32:92:fd:2b:22:3a:9f:b8:6a:18:75:bf:bf:
4c:b4:a9:d2:83:3f:3e:ea:39:b8:63:db:40:51:2b:44:36:55:
f8:42:99:58:b1:ef:73:0c:07:b7:8f:e6:c8:c1:02:0a:44:b2:
ca:54:16:39:a5:c6:e4:bb:f9:32:7b:9f:fb:38:1d:57:42:9c:
51:54:23:16:64:81:dd:5d:af:18:ae:8a:d5:4a:c7:a6:c8:ed:
8f:96:39:2a:da:f4:f7:ec:47:a9:99:0b:4a:0c:47:77:1f:86:
ed:88:6d:07:64:68:1d:ea:b8:70:72:c9:52:cd:5a:9e:f0:0e:
b7:8a:91:64:dc:42:97:91:71:2c:66:2b:68:21:6b:75:0a:7f:
a7:13:35:a0:24:4f:b1:8e:c5:82:c9:52:ec:ed:8f:0c:d8:84:
28:f3:eb:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt5izWS0L01XoTD2W6jHMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3M2IwOWI4ZmRlZGU2Y2FiNTI0ZmNhYTNiMzFlNjE2YmEy
ZTQ4OTYwHhcNMjUxMTExMDcwMDQ4WhcNMjUxMTEyMDcwMDQ4WjAzMTEwLwYDVQQD
EyhiYWEzYWNjZGQzOWNlYzU5NDQ4YjU1OTJjNzMxZDA1NGE4MTAyMThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fleeOa+ELAsw+K0JwTSsxT/Yyog
KMGnEr5qyh6k+HnnoAb4NLcGN//4Ooq/NkgnMtG8L5iP+cIugaO2MkpShGGd09oK
d3bj0R3Pq9mA8ptbI46m0eYJLXEo/70r2VUtPUHk3/VDbdN8XZVpe3HSPwBg102s
tp3+bRCGOH8bhywSL6WYbGpUAsu4hnOk7p/wWKpMoEo/9Zf4QU2lFBSoEpHELXHq
Rmqr9Zpd4/8dF8i1ezUIQ5dm2Xo533BMcjtZNqrAOZruOsoVrbjXZ2seWZuGgF29
wektSxprXRq7+n9A7kvD/LX+iQtMFKASQJ+JZByIWEgLYul6OvEMaGqgrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqjrM3TnOxZRItVkscx0FSoECGKMB8GA1UdIwQY
MBaAFEc7Cbj97ebKtST8qjsx5ha6LkiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9jMDQ2NzQtZTlhYy00NTQ3LWJjZGEt
MjU4ODU0ZTUwY2Y4LzEvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9jMDQ2NzQtZTlhYy00NTQ3LWJjZGEtMjU4ODU0ZTUwY2Y4
LzEvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfNyHrS+
vAAxA/R7RgP5yeFn8w8TVeQZ1RB96ZhbltrLg9pYTI2bFdLEJ54sXWeot2e9L9wX
G43RfPYBubsRx7xomnXdeoLkr60OSOW2orkU/sHP2NVdqmzT6y5pfZwykv0rIjqf
uGoYdb+/TLSp0oM/Puo5uGPbQFErRDZV+EKZWLHvcwwHt4/myMECCkSyylQWOaXG
5Lv5Mnuf+zgdV0KcUVQjFmSB3V2vGK6K1UrHpsjtj5Y5Ktr09+xHqZkLSgxHdx+G
7YhtB2RoHeq4cHLJUs1anvAOt4qRZNxCl5FxLGYraCFrdQp/pxM1oCRPsY7FgslS
7O2PDNiEKPPrLg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:51 2025 by rpki-client