Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
File: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft (raw, json)
Hash identifier: MEz5IMde+kB5lxpVZVXv77ERGWsAAOVq3rjprZQcD3s=
Subject key identifier: 24:98:53:FC:72:58:89:26:BD:FD:10:4D:7D:18:E9:A4:ED:00:AE:9B
Authority key identifier: B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
Certificate issuer: /CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Certificate serial: 019A71EE790589CCDAC5A92D092ACC0D9FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:00:45 +0000
Manifest this update: Tue 11 Nov 2025 08:00:45 +0000
Manifest next update: Wed 12 Nov 2025 08:00:45 +0000
Files and hashes: 1: mAE3_QFYxLK2bxPNIhFbVq5Pufo.roa (hash: 8Db1Fqvg0Iw4fJZLlY1WJu1zNG21SFNmOlpLtn7VYgI=)
2: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl (hash: 5lQxNIYXBlseg1/rICmazSLEEkwouOfwbQBkO5VqvQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:79:05:89:cc:da:c5:a9:2d:09:2a:cc:0d:9f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Validity
Not Before: Nov 11 08:00:45 2025 GMT
Not After : Nov 12 08:00:45 2025 GMT
Subject: CN=249853fc72588926bdfd104d7d18e9a4ed00ae9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7b:52:cb:06:c9:8a:53:42:a5:95:2d:ec:c1:
d9:e7:f6:38:a5:08:2c:65:a2:e6:c2:b9:65:e7:f2:
2f:e3:cc:65:26:32:50:b7:11:81:d6:2c:79:0e:7e:
f0:85:0b:ed:e4:e4:3c:6e:75:cd:49:1d:80:5c:f4:
56:b6:4c:68:b9:ca:ad:e8:71:e2:d7:d4:be:6c:06:
e8:8f:9e:83:28:4a:86:c5:5b:bb:f3:2d:29:0d:11:
ca:98:81:58:27:62:1b:39:df:45:1d:81:da:52:f6:
21:3e:18:d9:8a:f9:05:e1:72:f6:1b:77:f9:28:54:
13:f1:9e:6f:61:ff:98:52:f3:5e:18:21:15:a7:ac:
9e:2f:e4:2a:a0:28:9b:fb:28:4a:4f:7f:68:32:42:
bb:da:93:44:7c:53:fd:19:ae:43:ab:d5:ef:cb:00:
43:9b:95:ca:ad:9e:d1:23:e0:e9:03:c4:b5:c0:9a:
e0:8f:9d:c6:ae:d5:b3:18:ff:22:c0:91:8f:ca:27:
80:eb:48:f0:99:b2:89:24:fb:d1:a3:6d:2c:ac:0e:
70:eb:3d:d5:9e:6e:a5:41:11:56:a9:3d:c8:43:f6:
3a:0e:d2:96:e7:de:c6:f6:a8:3f:b9:08:59:ec:c6:
dd:b6:04:8c:63:38:d8:46:dd:72:b1:67:9e:37:72:
f4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:98:53:FC:72:58:89:26:BD:FD:10:4D:7D:18:E9:A4:ED:00:AE:9B
X509v3 Authority Key Identifier:
keyid:B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:74:ce:c6:a4:2e:be:2e:6a:9a:a9:4b:9a:e4:7f:7c:63:a3:
b5:74:d3:3d:9d:23:f9:e6:00:c2:71:2e:68:da:52:7b:73:28:
6a:b0:34:e3:95:3d:86:0b:ab:53:86:5b:39:c2:16:ab:b6:f7:
ad:32:52:88:65:94:dc:bc:27:d5:ea:a5:16:f4:a0:b1:81:6a:
b2:8d:a2:a5:1f:72:12:8b:55:ac:02:99:cb:0a:99:58:f0:2a:
d1:76:44:25:be:8d:4d:78:9b:f4:e5:23:f0:ba:24:ab:01:88:
b6:bb:fc:81:3a:d0:f0:f8:75:3f:8f:d0:4f:08:2e:cc:9a:c7:
02:44:56:19:0e:d3:a7:eb:cf:3e:54:1c:d6:8c:7b:3e:64:6f:
af:e1:a9:ed:23:ee:ef:6c:1e:38:92:c6:74:98:5b:20:a1:d1:
08:f0:bf:49:40:62:2f:5e:fb:63:7f:f8:29:03:c1:fd:c6:56:
e4:d8:8d:60:fc:dd:8c:8a:c8:06:ab:d6:ea:01:be:95:7a:bc:
49:59:c6:ad:51:a7:a6:98:99:5a:58:29:0c:51:27:3d:ae:ff:
ab:ad:38:ac:45:06:cf:7e:78:88:d8:0a:0b:4c:8b:ec:67:08:
48:3f:f0:8a:e5:7d:b0:7d:6e:6e:11:e8:60:09:3a:7e:c1:46:
03:4b:0e:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7nkFiczaxaktCSrMDZ++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzVmNTI2ZDdkMDkwOWU3ZjRhN2RmMmM1Y2FkNzJkMmFm
NmIyYzMwHhcNMjUxMTExMDgwMDQ1WhcNMjUxMTEyMDgwMDQ1WjAzMTEwLwYDVQQD
EygyNDk4NTNmYzcyNTg4OTI2YmRmZDEwNGQ3ZDE4ZTlhNGVkMDBhZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXtSywbJilNCpZUt7MHZ5/Y4pQgs
ZaLmwrll5/Iv48xlJjJQtxGB1ix5Dn7whQvt5OQ8bnXNSR2AXPRWtkxoucqt6HHi
19S+bAboj56DKEqGxVu78y0pDRHKmIFYJ2IbOd9FHYHaUvYhPhjZivkF4XL2G3f5
KFQT8Z5vYf+YUvNeGCEVp6yeL+QqoCib+yhKT39oMkK72pNEfFP9Ga5Dq9XvywBD
m5XKrZ7RI+DpA8S1wJrgj53GrtWzGP8iwJGPyieA60jwmbKJJPvRo20srA5w6z3V
nm6lQRFWqT3IQ/Y6DtKW597G9qg/uQhZ7MbdtgSMYzjYRt1ysWeeN3L0uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSYU/xyWIkmvf0QTX0Y6aTtAK6bMB8GA1UdIwQY
MBaAFLQ19SbX0JCef0p98sXK1y0q9rLDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERYMUp0ZlFrSjVfU24zeXhjclhMU3Iyc3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zNmIzZmEtYzkyNS00YjA5LWI4ZWEt
MzJmNTlmYTViMzExLzEvdERYMUp0ZlFrSjVfU24zeXhjclhMU3Iyc3NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zNmIzZmEtYzkyNS00YjA5LWI4ZWEtMzJmNTlmYTViMzEx
LzEvdERYMUp0ZlFrSjVfU24zeXhjclhMU3Iyc3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqnTOxqQu
vi5qmqlLmuR/fGOjtXTTPZ0j+eYAwnEuaNpSe3MoarA045U9hgurU4ZbOcIWq7b3
rTJSiGWU3Lwn1eqlFvSgsYFqso2ipR9yEotVrAKZywqZWPAq0XZEJb6NTXib9OUj
8LokqwGItrv8gTrQ8Ph1P4/QTwguzJrHAkRWGQ7Tp+vPPlQc1ox7PmRvr+Gp7SPu
72weOJLGdJhbIKHRCPC/SUBiL177Y3/4KQPB/cZW5NiNYPzdjIrIBqvW6gG+lXq8
SVnGrVGnppiZWlgpDFEnPa7/q604rEUGz354iNgKC0yL7GcISD/wiuV9sH1ubhHo
YAk6fsFGA0sOgA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:28 2025 by rpki-client