Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
File: 458aboTAJ378tW2UKw615FZHESk.mft (raw, json)
Hash identifier: Q8r9KRolLlNysfBDx50Fcnr7/CIxynvN70YwaN+dT6M=
Subject key identifier: 97:1E:48:29:D2:F0:FE:19:88:02:D1:B3:20:53:6A:B5:EC:9E:B2:0A
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 019A722643EC97A5CEA68EAC65BCA0DD0165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
Manifest number: 1726
Signing time: Tue 11 Nov 2025 09:01:41 +0000
Manifest this update: Tue 11 Nov 2025 09:01:41 +0000
Manifest next update: Wed 12 Nov 2025 09:01:41 +0000
Files and hashes: 1: 00-pDRnkJ28HOY9PiW3UHtRlnaA.roa (hash: ajRA1r/wZbCFV5DRURYHBboFEqfVmi4nUu+o5RsVv7I=)
2: 458aboTAJ378tW2UKw615FZHESk.crl (hash: pQmZTgr8ssr7SaMSd+je67alwzww8F3bgj8Yd5MRoY8=)
3: h0icjzgutWd6lA-1BOIfw-Gwjqg.roa (hash: S1MAwDWcpRVxYAC6r+etNs1goxhniGxwWQ8E6EEXeo8=)
4: w1G2WgRwg5TMv1o-ctrHxpnkGg8.roa (hash: agU6Qqy0fnivl3H4SG64+Hxp9Tp7KmPmlQXRx4PQep0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:43:ec:97:a5:ce:a6:8e:ac:65:bc:a0:dd:01:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Nov 11 09:01:41 2025 GMT
Not After : Nov 12 09:01:41 2025 GMT
Subject: CN=971e4829d2f0fe198802d1b320536ab5ec9eb20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:ea:fb:06:af:a0:4a:56:19:e6:f8:ed:7c:
4e:a7:a9:e4:b3:71:a0:7a:91:ed:83:97:7d:43:73:
1e:52:5a:45:a5:de:d3:81:39:88:e2:77:85:d0:71:
b5:06:70:df:c6:ed:d2:7f:94:10:42:c7:b4:98:c6:
9c:3d:54:df:c2:1c:e0:b0:ab:b3:15:da:02:7b:d1:
38:ca:92:dd:a2:88:a5:82:de:21:94:d4:f9:02:59:
1f:af:0e:cb:57:c7:35:f7:57:c3:51:44:dc:16:1b:
8e:ac:5a:a1:49:69:91:0d:e9:85:0d:45:fb:b7:7c:
5c:e5:b9:65:a5:a3:14:cb:dc:e9:2d:56:52:5b:cc:
c8:fa:e7:68:fa:aa:0f:1d:8d:18:fa:d3:3d:24:71:
63:ae:c7:99:9e:51:ca:02:75:58:13:ce:d9:53:ad:
a6:1b:e2:12:b3:8d:b7:ac:97:c7:50:7e:8e:b8:ac:
a9:94:80:2a:9f:95:28:0b:87:96:05:4e:b8:f3:40:
18:9e:75:f9:d2:61:a0:3a:f3:ae:64:f2:a8:07:36:
e3:1f:24:aa:93:b4:d0:cf:14:9e:72:98:7f:e0:3f:
9e:04:f0:58:df:7f:87:ee:f7:6e:77:e7:c4:1c:8b:
0d:4d:4f:b9:2d:06:75:1d:2f:7b:01:2f:d8:c0:6a:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1E:48:29:D2:F0:FE:19:88:02:D1:B3:20:53:6A:B5:EC:9E:B2:0A
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3d:4a:c7:7c:ae:17:3f:dd:3b:89:df:e1:ed:99:3a:c7:63:
14:c5:58:3f:42:a6:6a:16:05:a0:f8:f9:b9:fe:21:6c:2d:cb:
ce:3a:7d:13:18:95:bc:3f:ac:ce:a3:10:ee:44:9f:5e:eb:29:
bb:de:f6:65:2f:2a:d2:99:e3:e4:6b:40:12:15:b3:ba:d6:5f:
df:55:d5:49:35:0d:87:a0:f4:7d:dd:30:28:19:5a:16:80:1d:
d4:f7:c5:0d:7e:ea:f3:20:db:05:aa:68:23:a1:8f:29:97:1f:
6e:e0:11:70:97:1d:cf:5a:90:6c:ea:47:c1:61:be:13:f3:42:
7f:be:46:f2:af:7b:9c:83:b5:a1:fc:1b:c7:fe:31:05:b2:40:
a8:2c:8d:ca:68:4a:da:53:72:ae:2a:b9:81:11:08:04:c4:4f:
f7:ca:d0:93:bd:07:06:09:65:99:2f:03:22:7d:6d:9e:63:36:
78:12:3e:7b:b1:6c:c7:42:39:11:27:18:84:13:89:f2:6e:0f:
3d:6b:da:72:44:ee:47:38:0a:65:97:72:ba:8a:1c:3a:14:b2:
e1:23:e2:76:38:c2:e7:e2:c9:5a:33:3f:e5:8e:46:88:34:7e:
99:d1:ee:b2:ef:e8:ed:d2:ed:bc:5c:68:49:c0:ea:67:b3:86:
8a:fb:78:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJkPsl6XOpo6sZbyg3QFlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOWYxYTZlODRjMDI3N2VmY2I1NmQ5NDJiMGViNWU0NTY0
NzExMjkwHhcNMjUxMTExMDkwMTQxWhcNMjUxMTEyMDkwMTQxWjAzMTEwLwYDVQQD
Eyg5NzFlNDgyOWQyZjBmZTE5ODgwMmQxYjMyMDUzNmFiNWVjOWViMjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pDq+wavoEpWGeb47XxOp6nks3Gg
epHtg5d9Q3MeUlpFpd7TgTmI4neF0HG1BnDfxu3Sf5QQQse0mMacPVTfwhzgsKuz
FdoCe9E4ypLdooilgt4hlNT5Alkfrw7LV8c191fDUUTcFhuOrFqhSWmRDemFDUX7
t3xc5bllpaMUy9zpLVZSW8zI+udo+qoPHY0Y+tM9JHFjrseZnlHKAnVYE87ZU62m
G+ISs423rJfHUH6OuKyplIAqn5UoC4eWBU6480AYnnX50mGgOvOuZPKoBzbjHySq
k7TQzxSecph/4D+eBPBY33+H7vdud+fEHIsNTU+5LQZ1HS97AS/YwGqiSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJceSCnS8P4ZiALRsyBTarXsnrIKMB8GA1UdIwQY
MBaAFOOfGm6EwCd+/LVtlCsOteRWRxEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMt
MGU1MzkyNzU3ZjgyLzEvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMtMGU1MzkyNzU3Zjgy
LzEvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMD1Kx3yu
Fz/dO4nf4e2ZOsdjFMVYP0KmahYFoPj5uf4hbC3Lzjp9ExiVvD+szqMQ7kSfXusp
u972ZS8q0pnj5GtAEhWzutZf31XVSTUNh6D0fd0wKBlaFoAd1PfFDX7q8yDbBapo
I6GPKZcfbuARcJcdz1qQbOpHwWG+E/NCf75G8q97nIO1ofwbx/4xBbJAqCyNymhK
2lNyriq5gREIBMRP98rQk70HBgllmS8DIn1tnmM2eBI+e7Fsx0I5EScYhBOJ8m4P
PWvackTuRzgKZZdyuoocOhSy4SPidjjC5+LJWjM/5Y5GiDR+mdHusu/o7dLtvFxo
ScDqZ7OGivt4yA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:21 2025 by rpki-client