Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
File: 60GVbRLcuYK-1HqfrEp-SOd4fHk.mft (raw, json)
Hash identifier: eEq3O6kx2H0Dv4+6hh8hUXAciBaAHDKqCZOGRaOK48k=
Subject key identifier: 8F:97:F3:12:81:6A:58:47:71:8C:4F:AE:C2:5F:7D:BF:42:CF:A1:DA
Authority key identifier: EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79
Certificate issuer: /CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
Certificate serial: 019A70DC580BC4E459F265FD8CCB74B976DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 03:01:19 +0000
Manifest this update: Tue 11 Nov 2025 03:01:19 +0000
Manifest next update: Wed 12 Nov 2025 03:01:19 +0000
Files and hashes: 1: 60GVbRLcuYK-1HqfrEp-SOd4fHk.crl (hash: wh35aLEGpwumNkt6yFoiOpUVIctU73q2loF4bQGynmk=)
2: yAxzfi9JXUul0TO1jK5Ldw1Rthk.roa (hash: lWeFfnhZvBmgn+p8KY5mqn1eMKw9nzLuCchH9PtGLK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:58:0b:c4:e4:59:f2:65:fd:8c:cb:74:b9:76:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
Validity
Not Before: Nov 11 03:01:19 2025 GMT
Not After : Nov 12 03:01:19 2025 GMT
Subject: CN=8f97f312816a5847718c4faec25f7dbf42cfa1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:e8:3a:52:a1:6e:d5:37:6f:5c:a6:e1:35:
60:a8:48:7e:be:f6:18:2b:3e:f4:a5:1b:c9:a1:c9:
ef:be:08:5e:94:d7:8d:53:ee:9e:5d:63:41:76:db:
b2:9b:00:fc:51:83:a0:38:10:a8:f4:2d:a6:0c:83:
fd:a0:08:9e:9e:3a:89:02:33:31:44:33:01:ad:b4:
a6:26:c3:b8:03:a9:58:7e:ec:e3:c9:8a:76:b5:89:
2f:c9:1f:8c:63:82:49:e7:98:11:c9:f9:89:b7:b7:
d3:f3:ff:b0:52:13:c4:df:51:aa:73:44:b3:9b:12:
51:6e:ee:c5:25:42:7e:ed:10:61:c2:04:a1:55:1d:
e4:4b:e3:e2:7e:f2:f0:e3:d7:ea:d4:12:3a:42:17:
da:cf:2c:4f:31:13:dc:d4:18:fc:02:73:be:70:66:
b9:e0:9a:b7:f7:f2:f4:17:18:99:52:eb:5c:33:a4:
85:62:51:5a:20:e3:c0:32:98:ec:0d:92:13:9c:20:
3a:cb:c6:44:53:7f:3d:58:61:4b:70:31:1d:98:f3:
b7:c5:eb:dd:0b:70:46:d9:01:3c:4d:70:f9:22:7e:
0a:a4:da:99:7a:11:f3:3b:94:ca:e8:6a:c2:93:59:
2d:92:aa:65:94:b8:44:7e:cd:81:07:63:f9:3f:4e:
a9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:97:F3:12:81:6A:58:47:71:8C:4F:AE:C2:5F:7D:BF:42:CF:A1:DA
X509v3 Authority Key Identifier:
keyid:EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f8:bd:dc:65:41:a1:d4:8c:f3:36:cc:11:cf:b6:f2:7f:8a:
d2:9c:7e:e7:04:ea:4a:57:25:e3:d4:d6:70:25:66:c9:34:6d:
fb:2e:b0:d1:26:63:ec:46:84:2c:c3:5e:2f:60:3e:da:a8:5c:
db:f2:d6:20:9a:fa:b9:19:bc:dc:b2:66:ac:bb:ae:25:ba:a0:
45:32:16:40:c4:b0:a0:ed:f4:a8:9c:2b:d5:0c:ed:f6:f8:d2:
21:e9:5f:8e:ee:49:c0:bf:fc:b3:c4:56:f5:0e:c7:b6:06:76:
95:0d:c2:95:fa:b6:ef:4d:12:83:7b:0b:10:43:fd:21:9d:1e:
fa:c3:ad:c0:10:a4:cf:9a:d9:16:8b:1a:8f:bc:34:28:fd:28:
27:b1:55:e3:88:a6:f4:42:ce:a1:74:1b:53:d5:43:9d:4b:09:
5c:f9:b0:46:ed:8c:2d:41:b2:ca:77:7c:b1:3c:71:ca:b4:98:
c7:a2:94:f3:0b:b0:ca:af:ea:81:c4:c5:92:5c:0c:6d:29:13:
96:c1:40:3b:a4:1b:9e:04:7e:44:ca:e5:6d:24:50:ce:56:2c:
a6:17:ce:33:67:ef:3b:3b:92:ad:d8:71:06:7b:5a:0d:d8:10:
94:f7:d4:45:e3:72:89:5c:1e:66:b3:10:68:1b:fa:a1:50:f2:
41:37:f3:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3FgLxORZ8mX9jMt0uXbdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNDE5NTZkMTJkY2I5ODJiZWQ0N2E5ZmFjNGE3ZTQ4ZTc3
ODdjNzkwHhcNMjUxMTExMDMwMTE5WhcNMjUxMTEyMDMwMTE5WjAzMTEwLwYDVQQD
Eyg4Zjk3ZjMxMjgxNmE1ODQ3NzE4YzRmYWVjMjVmN2RiZjQyY2ZhMWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS7oOlKhbtU3b1ym4TVgqEh+vvYY
Kz70pRvJocnvvghelNeNU+6eXWNBdtuymwD8UYOgOBCo9C2mDIP9oAienjqJAjMx
RDMBrbSmJsO4A6lYfuzjyYp2tYkvyR+MY4JJ55gRyfmJt7fT8/+wUhPE31Gqc0Sz
mxJRbu7FJUJ+7RBhwgShVR3kS+PifvLw49fq1BI6QhfazyxPMRPc1Bj8AnO+cGa5
4Jq39/L0FxiZUutcM6SFYlFaIOPAMpjsDZITnCA6y8ZEU389WGFLcDEdmPO3xevd
C3BG2QE8TXD5In4KpNqZehHzO5TK6GrCk1ktkqpllLhEfs2BB2P5P06pYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+X8xKBalhHcYxPrsJffb9Cz6HaMB8GA1UdIwQY
MBaAFOtBlW0S3LmCvtR6n6xKfkjneHx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjBHVmJSTGN1WUstMUhxZnJFcC1TT2Q0ZkhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZDNmMWMtY2ZmNS00YjJiLTllNDYt
Njc4NDdjNzZjYjc2LzEvNjBHVmJSTGN1WUstMUhxZnJFcC1TT2Q0ZkhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81ZDNmMWMtY2ZmNS00YjJiLTllNDYtNjc4NDdjNzZjYjc2
LzEvNjBHVmJSTGN1WUstMUhxZnJFcC1TT2Q0ZkhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvi93GVB
odSM8zbMEc+28n+K0px+5wTqSlcl49TWcCVmyTRt+y6w0SZj7EaELMNeL2A+2qhc
2/LWIJr6uRm83LJmrLuuJbqgRTIWQMSwoO30qJwr1Qzt9vjSIelfju5JwL/8s8RW
9Q7HtgZ2lQ3Clfq2700Sg3sLEEP9IZ0e+sOtwBCkz5rZFosaj7w0KP0oJ7FV44im
9ELOoXQbU9VDnUsJXPmwRu2MLUGyynd8sTxxyrSYx6KU8wuwyq/qgcTFklwMbSkT
lsFAO6QbngR+RMrlbSRQzlYsphfOM2fvOzuSrdhxBntaDdgQlPfUReNyiVweZrMQ
aBv6oVDyQTfzHw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:35 2025 by rpki-client