Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: bIM9Xws7tUywWZUl5oTvmIMLqv91CnYa/Fo3TUD5wI0=
Subject key identifier: 60:E3:1B:89:AF:8A:B8:AF:33:7A:18:64:50:EE:48:F9:60:5A:28:C9
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 019A72936174E72407B3F425CB964FDC3331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 11:00:52 +0000
Manifest this update: Tue 11 Nov 2025 11:00:52 +0000
Manifest next update: Wed 12 Nov 2025 11:00:52 +0000
Files and hashes: 1: Lddee0yGLa96EV9cff9j1b8lisk.roa (hash: 4wmS8bLLBI0yCHZS6lNJzngX25UoSHi3CPRXK8eiy+g=)
2: oFHxOR-gmoi2f8hzooiT2H5qGbs.roa (hash: v7L5BEVhrfX9YxGEPwkVKzRUyMYIDLUuZIRykF3hjrE=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: DOK1lWIhebleF2LvVDyIXxc7F5RP2tMP65lVVWWMGCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:61:74:e7:24:07:b3:f4:25:cb:96:4f:dc:33:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Nov 11 11:00:52 2025 GMT
Not After : Nov 12 11:00:52 2025 GMT
Subject: CN=60e31b89af8ab8af337a186450ee48f9605a28c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:32:ba:4c:2c:ef:f4:60:58:cb:5a:72:6f:
78:e9:22:49:49:83:b4:06:77:a8:9c:52:70:39:42:
43:b1:c2:c9:d5:3d:df:65:4a:42:28:aa:42:00:06:
f6:3c:ed:64:57:08:bc:57:a9:fb:a0:94:81:83:09:
cd:be:36:dc:2d:96:00:2d:c9:b2:7f:54:28:89:da:
6d:38:86:c4:74:13:d4:77:67:f7:9e:88:23:4a:a7:
b2:76:c9:e5:01:eb:71:7b:44:84:41:38:75:a4:e2:
84:a0:97:c8:90:65:be:c9:50:bc:a0:8a:81:6a:6f:
df:7c:be:83:74:e2:2b:cd:6e:4e:4d:62:e0:29:2d:
e1:f0:ec:83:49:3f:1f:67:3e:81:18:a7:ba:ab:f7:
ba:b2:9c:74:79:8c:da:fd:52:e4:e4:36:9e:9e:49:
bd:bb:78:d6:2a:51:b7:24:2a:39:1d:0e:83:40:64:
27:89:3f:a8:30:8f:97:26:37:7c:04:39:a4:3c:6d:
24:dd:13:6f:85:4f:8d:cd:2e:0b:eb:cb:22:8e:d4:
e6:16:af:09:2a:27:d3:89:76:06:89:e8:75:7b:01:
e8:e8:1a:30:ba:60:43:55:3a:c3:ec:2c:39:f9:f8:
d1:b0:d9:35:32:0d:5a:b7:2f:44:08:e5:08:b2:f6:
9f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E3:1B:89:AF:8A:B8:AF:33:7A:18:64:50:EE:48:F9:60:5A:28:C9
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7a:37:8e:f9:26:2f:56:c0:cc:14:e4:50:4d:c8:a8:e1:13:
0b:53:01:b4:26:6b:37:2b:58:3d:a9:3f:aa:4c:22:42:38:6c:
6b:03:5a:88:ee:ed:5f:13:e3:7e:cb:20:47:43:04:a4:2b:60:
ac:05:1a:9d:3b:1e:4e:50:a1:04:91:39:c9:7d:40:13:0d:c5:
72:3a:22:1e:7b:a0:3a:dc:02:b5:3d:c1:2f:7e:9f:26:2c:41:
0a:7f:99:99:2a:55:b1:47:9b:58:ee:06:a2:2f:0e:8a:4f:84:
9d:2c:9a:ff:94:39:c0:b4:28:84:fc:e3:18:dd:fe:69:11:dd:
5b:c7:73:d2:f8:ff:5d:e5:7d:e2:0a:b3:76:89:4c:ce:7f:63:
46:9c:6d:4e:7f:46:7d:10:93:90:a4:3d:61:cd:f6:08:df:5a:
1f:de:a6:10:ae:f6:e5:83:01:4c:99:49:38:7c:b1:3d:24:f2:
09:be:89:38:b5:cc:a4:de:da:29:86:82:36:4d:ec:ca:44:37:
d6:78:b6:9a:fb:32:26:50:87:c1:ec:f5:cc:c3:e0:4e:5c:8e:
33:2e:21:df:26:e4:fb:2c:f5:23:89:eb:16:03:79:27:37:29:
45:47:c1:4c:f5:7c:4b:90:28:e2:5a:1f:40:af:89:01:c8:d0:
33:ed:7f:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk2F05yQHs/Qly5ZP3DMxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNGVmNGE4ZWQzNzExYjZhY2Q2OGMwZjQ4ZjYyMTgzMWZk
NWFhYWUwHhcNMjUxMTExMTEwMDUyWhcNMjUxMTEyMTEwMDUyWjAzMTEwLwYDVQQD
Eyg2MGUzMWI4OWFmOGFiOGFmMzM3YTE4NjQ1MGVlNDhmOTYwNWEyOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0Eyukws7/RgWMtacm946SJJSYO0
BneonFJwOUJDscLJ1T3fZUpCKKpCAAb2PO1kVwi8V6n7oJSBgwnNvjbcLZYALcmy
f1QoidptOIbEdBPUd2f3nogjSqeydsnlAetxe0SEQTh1pOKEoJfIkGW+yVC8oIqB
am/ffL6DdOIrzW5OTWLgKS3h8OyDST8fZz6BGKe6q/e6spx0eYza/VLk5Daenkm9
u3jWKlG3JCo5HQ6DQGQniT+oMI+XJjd8BDmkPG0k3RNvhU+NzS4L68sijtTmFq8J
KifTiXYGieh1ewHo6BowumBDVTrD7Cw5+fjRsNk1Mg1aty9ECOUIsvafDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDjG4mvirivM3oYZFDuSPlgWijJMB8GA1UdIwQY
MBaAFK9O9KjtNxG2rNaMD0j2IYMf1aquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDkt
Y2I5YzU4ZjUxMGNiLzEvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDktY2I5YzU4ZjUxMGNi
LzEvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHo3jvkm
L1bAzBTkUE3IqOETC1MBtCZrNytYPak/qkwiQjhsawNaiO7tXxPjfssgR0MEpCtg
rAUanTseTlChBJE5yX1AEw3FcjoiHnugOtwCtT3BL36fJixBCn+ZmSpVsUebWO4G
oi8Oik+EnSya/5Q5wLQohPzjGN3+aRHdW8dz0vj/XeV94gqzdolMzn9jRpxtTn9G
fRCTkKQ9Yc32CN9aH96mEK725YMBTJlJOHyxPSTyCb6JOLXMpN7aKYaCNk3sykQ3
1ni2mvsyJlCHwez1zMPgTlyOMy4h3ybk+yz1I4nrFgN5JzcpRUfBTPV8S5Ao4lof
QK+JAcjQM+1/9A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:09 2025 by rpki-client