Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft
File: R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft (raw, json)
Hash identifier: 2M7a4saYh2LOeCFuM444Mq3TdU0c1t/rwBkkI+dxV98=
Subject key identifier: 36:0B:CB:11:F5:96:0F:64:A2:71:E5:DC:C7:DB:AC:34:11:03:E0:9A
Authority key identifier: 47:89:C5:DC:0D:D5:44:FC:02:B7:E6:7E:5F:1B:AC:45:6A:AB:FE:61
Certificate issuer: /CN=4789c5dc0dd544fc02b7e67e5f1bac456aabfe61
Certificate serial: 019A706E7A42E5E367EEB77DA07274372C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 01:01:19 +0000
Manifest this update: Tue 11 Nov 2025 01:01:19 +0000
Manifest next update: Wed 12 Nov 2025 01:01:19 +0000
Files and hashes: 1: L6iR0CMwTlXaB3-hN4yCOodUYRY.roa (hash: eWR/YwFC9Nkq/Z8RvdCdYOBK7oxzXqUpetNS4HVcl8U=)
2: R4nF3A3VRPwCt-Z-XxusRWqr_mE.crl (hash: L6tS/kyMJ7DniRkFhKWBt5qzO476Tc9WUNf8XDGR1WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:7a:42:e5:e3:67:ee:b7:7d:a0:72:74:37:2c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4789c5dc0dd544fc02b7e67e5f1bac456aabfe61
Validity
Not Before: Nov 11 01:01:19 2025 GMT
Not After : Nov 12 01:01:19 2025 GMT
Subject: CN=360bcb11f5960f64a271e5dcc7dbac341103e09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:87:60:a7:a5:b1:ee:7c:52:22:a4:70:76:58:
2e:bb:54:a3:c3:f4:91:32:4a:1d:54:86:10:e7:28:
29:99:b5:9a:1b:f9:36:0f:b8:bb:c1:f5:39:4b:49:
fa:b8:6d:85:9f:98:6c:cf:c7:76:6e:f5:63:03:b7:
6f:05:11:1a:ba:78:2a:4c:ce:a8:af:46:ae:1a:8e:
67:09:0c:45:de:53:9c:f0:38:e8:68:45:f6:e7:2e:
a2:7a:7c:c8:bd:35:eb:96:f7:52:8d:c7:17:cf:5a:
b2:81:f8:a4:5b:02:ab:1d:ad:6f:74:fe:2d:e2:a0:
ef:b3:e2:56:95:64:e5:60:0c:46:e8:88:08:fc:e8:
04:59:08:12:11:6e:e0:be:7b:52:12:64:71:cb:f7:
3e:6d:0a:46:44:01:4d:d9:ae:0e:fc:6f:da:b0:0b:
97:ed:32:ee:12:18:7e:1f:fc:89:35:e4:06:5d:45:
7f:a3:5f:f9:38:22:4f:39:a9:5e:5b:8a:e3:7c:73:
67:1e:59:01:28:58:15:f1:4b:93:78:4a:7c:20:d6:
b1:d7:18:d0:3b:2a:ba:8d:3c:ed:94:07:f4:7f:5b:
29:7f:52:18:14:11:96:4c:0d:f8:fd:a7:03:48:32:
79:05:5c:d5:cd:24:4c:d9:86:95:c7:21:0e:16:28:
f2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0B:CB:11:F5:96:0F:64:A2:71:E5:DC:C7:DB:AC:34:11:03:E0:9A
X509v3 Authority Key Identifier:
keyid:47:89:C5:DC:0D:D5:44:FC:02:B7:E6:7E:5F:1B:AC:45:6A:AB:FE:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ad:38:75:e7:ae:52:bb:92:c3:a8:c2:c5:3e:51:3d:58:34:
05:16:be:69:de:b1:3c:68:08:85:e7:9c:b9:1d:2d:c2:13:30:
93:c0:8a:0b:ca:22:89:e9:2d:a7:a8:98:2e:6a:40:b2:de:08:
64:71:e8:d8:3b:1d:fb:79:89:8a:42:68:51:ab:a0:47:74:40:
26:e6:e4:5a:0d:cf:9b:3b:93:03:b4:5a:06:59:67:8b:68:59:
6b:22:2f:9b:55:ad:be:ee:c9:68:f9:4f:b1:57:21:88:25:54:
61:c1:b2:2a:9c:4c:90:c3:8f:1f:f4:e9:b1:0b:9c:c5:6a:1b:
e6:40:d7:e1:c1:5e:bc:97:45:07:f7:43:f8:94:66:06:17:10:
59:51:46:af:40:33:b0:22:d5:bf:e6:03:18:27:bf:87:a1:d4:
61:b9:4b:32:0e:c0:ef:56:4e:c1:7f:b7:85:72:1c:6d:db:bd:
f8:e3:83:63:bf:79:6a:bc:76:48:40:90:66:ce:87:6f:72:65:
82:cd:fe:7a:de:a1:81:f8:bf:16:2b:7c:6f:49:0b:ec:ae:e5:
16:40:78:0b:d9:69:dc:0a:9a:8a:07:ea:44:e7:36:c8:87:e1:
4e:65:17:ef:eb:21:d7:1e:f0:28:50:e1:50:e0:95:5e:4c:99:
3e:26:68:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbnpC5eNn7rd9oHJ0NyxPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ODljNWRjMGRkNTQ0ZmMwMmI3ZTY3ZTVmMWJhYzQ1NmFh
YmZlNjEwHhcNMjUxMTExMDEwMTE5WhcNMjUxMTEyMDEwMTE5WjAzMTEwLwYDVQQD
EygzNjBiY2IxMWY1OTYwZjY0YTI3MWU1ZGNjN2RiYWMzNDExMDNlMDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIdgp6Wx7nxSIqRwdlguu1Sjw/SR
MkodVIYQ5ygpmbWaG/k2D7i7wfU5S0n6uG2Fn5hsz8d2bvVjA7dvBREaungqTM6o
r0auGo5nCQxF3lOc8DjoaEX25y6ienzIvTXrlvdSjccXz1qygfikWwKrHa1vdP4t
4qDvs+JWlWTlYAxG6IgI/OgEWQgSEW7gvntSEmRxy/c+bQpGRAFN2a4O/G/asAuX
7TLuEhh+H/yJNeQGXUV/o1/5OCJPOaleW4rjfHNnHlkBKFgV8UuTeEp8INax1xjQ
Oyq6jTztlAf0f1spf1IYFBGWTA34/acDSDJ5BVzVzSRM2YaVxyEOFijyNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYLyxH1lg9konHl3MfbrDQRA+CaMB8GA1UdIwQY
MBaAFEeJxdwN1UT8Arfmfl8brEVqq/5hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjRuRjNBM1ZSUHdDdC1aLVh4dXNSV3FyX21FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84OTU0MmEtNTg3ZC00YzI3LWE1MjMt
NmExYjljMWM2OTI0LzEvUjRuRjNBM1ZSUHdDdC1aLVh4dXNSV3FyX21FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS84OTU0MmEtNTg3ZC00YzI3LWE1MjMtNmExYjljMWM2OTI0
LzEvUjRuRjNBM1ZSUHdDdC1aLVh4dXNSV3FyX21FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmq04deeu
UruSw6jCxT5RPVg0BRa+ad6xPGgIheecuR0twhMwk8CKC8oiiektp6iYLmpAst4I
ZHHo2Dsd+3mJikJoUaugR3RAJubkWg3PmzuTA7RaBllni2hZayIvm1Wtvu7JaPlP
sVchiCVUYcGyKpxMkMOPH/TpsQucxWob5kDX4cFevJdFB/dD+JRmBhcQWVFGr0Az
sCLVv+YDGCe/h6HUYblLMg7A71ZOwX+3hXIcbdu9+OODY795arx2SECQZs6Hb3Jl
gs3+et6hgfi/Fit8b0kL7K7lFkB4C9lp3AqaigfqROc2yIfhTmUX7+sh1x7wKFDh
UOCVXkyZPiZotw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:45 2025 by rpki-client