Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: VW04JjisL7p6kPRzL2/5SiTEtGIrlmJVGDHPpnRSVks=
Subject key identifier: EC:C9:95:CE:B2:7B:14:2D:FE:DD:67:B9:B8:34:76:A6:95:05:CB:8E
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 019A29D53591DD296648D4D22C79E1F349D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 1130
Signing time: Tue 28 Oct 2025 08:00:29 +0000
Manifest this update: Tue 28 Oct 2025 08:00:29 +0000
Manifest next update: Wed 29 Oct 2025 08:00:29 +0000
Files and hashes: 1: 3vMVhDVuSakGpKEegLzmX9CZn_0.roa (hash: 0WA7LBg+VlA+MYR6g5nbmdux2cCvdzgMgFAqrxmL/5k=)
2: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: E3d8hckxUofir1HMTJPwSne7ScptTGJsVp6p0sJnYHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d5:35:91:dd:29:66:48:d4:d2:2c:79:e1:f3:49:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Oct 28 08:00:29 2025 GMT
Not After : Oct 29 08:00:29 2025 GMT
Subject: CN=ecc995ceb27b142dfedd67b9b83476a69505cb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:6f:90:55:61:83:79:b9:c5:44:c3:96:d9:
d2:e2:5b:32:11:fc:e7:19:12:f3:64:81:55:c6:08:
a5:7c:6c:2c:f9:90:69:a2:26:e4:54:33:41:9e:a0:
69:96:ff:f8:90:f8:c0:9c:ef:f4:43:81:72:4f:c9:
54:37:b6:46:92:78:03:92:79:b8:54:08:06:15:7d:
fa:8b:eb:e0:65:21:09:be:52:02:b0:77:f6:fc:aa:
69:36:79:ff:90:e1:3f:9a:9e:6c:ae:ed:11:cd:09:
b2:29:55:a1:c9:e7:92:d4:01:ef:53:f0:d1:06:18:
ad:51:2c:b5:5e:94:34:9f:8b:dc:be:c1:00:d0:1e:
0a:96:06:ab:89:36:ad:0b:ac:c3:17:4f:7c:3c:f3:
9d:dc:23:25:f4:0b:bb:49:93:6b:2c:e2:3c:6d:3e:
1d:c5:3b:03:00:d2:cd:3b:cb:21:7a:a1:db:24:31:
5f:46:98:51:69:59:e7:75:4a:0b:bc:06:e3:5e:77:
5a:fa:ba:87:5e:10:0f:e4:ba:0b:d2:69:1f:58:dd:
1e:a9:59:cd:ea:52:46:ef:57:e4:4c:93:9f:3f:81:
ed:53:99:9f:07:b2:90:dc:f9:73:5e:25:f4:4a:4d:
0e:24:6b:b6:1e:be:6e:84:81:02:f2:e8:0a:e3:34:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C9:95:CE:B2:7B:14:2D:FE:DD:67:B9:B8:34:76:A6:95:05:CB:8E
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b9:19:ad:04:4e:5d:ed:56:0e:47:83:da:79:ce:b5:98:b5:
9f:e9:49:d0:0e:f7:14:f6:5e:ec:f7:14:81:1b:fc:c0:90:13:
2a:ca:63:b8:7b:55:6b:36:80:80:61:06:5f:3f:10:d7:c0:96:
40:a4:26:7e:ba:d3:7f:cb:09:2d:06:15:a9:9f:6b:7d:cc:2d:
ff:fa:6d:18:65:18:ef:4d:78:45:44:29:ac:34:ce:f0:03:88:
14:dc:1f:08:1a:3e:46:88:94:93:ea:fd:3a:70:4b:b6:d7:84:
f1:89:8b:f9:56:50:0d:0a:86:da:27:c5:0a:80:92:dd:81:df:
ee:b8:fc:44:14:65:07:74:04:fd:89:00:cc:2c:3d:b0:d6:b8:
67:70:ae:2c:37:bb:30:2f:51:43:08:50:89:aa:1c:35:07:25:
3b:31:71:ff:be:ca:77:03:96:36:52:fc:79:46:01:88:9a:f8:
19:fc:49:1e:f4:ed:a9:1d:6e:d1:d5:8a:41:e3:0a:36:8f:9f:
2e:ff:0e:21:a5:42:63:e3:55:f0:ed:df:24:51:f3:3f:e0:70:
1e:4b:5b:1b:1d:52:c2:9c:45:be:a6:0c:3d:1b:06:e6:61:22:
cf:21:4a:23:b7:1d:c0:74:e6:ee:46:fd:6a:05:96:f5:70:72:
31:70:05:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZop1TWR3SlmSNTSLHnh80nSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMzVlMzg5NDYzNDQ4MmIwODMxNzc3NWM3OTY1N2U5Yjgz
MTJkNGQwHhcNMjUxMDI4MDgwMDI5WhcNMjUxMDI5MDgwMDI5WjAzMTEwLwYDVQQD
EyhlY2M5OTVjZWIyN2IxNDJkZmVkZDY3YjliODM0NzZhNjk1MDVjYjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu9vkFVhg3m5xUTDltnS4lsyEfzn
GRLzZIFVxgilfGws+ZBpoibkVDNBnqBplv/4kPjAnO/0Q4FyT8lUN7ZGkngDknm4
VAgGFX36i+vgZSEJvlICsHf2/KppNnn/kOE/mp5sru0RzQmyKVWhyeeS1AHvU/DR
BhitUSy1XpQ0n4vcvsEA0B4KlgariTatC6zDF098PPOd3CMl9Au7SZNrLOI8bT4d
xTsDANLNO8sheqHbJDFfRphRaVnndUoLvAbjXnda+rqHXhAP5LoL0mkfWN0eqVnN
6lJG71fkTJOfP4HtU5mfB7KQ3PlzXiX0Sk0OJGu2Hr5uhIEC8ugK4zQZYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzJlc6yexQt/t1nubg0dqaVBcuOMB8GA1UdIwQY
MBaAFHE144lGNEgrCDF3dceWV+m4MS1NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xY2I5ZmMtNmIzMy00MmQ1LTk0MjMt
NzllY2Q4YTliNmQ2LzEvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xY2I5ZmMtNmIzMy00MmQ1LTk0MjMtNzllY2Q4YTliNmQ2
LzEvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbkZrQRO
Xe1WDkeD2nnOtZi1n+lJ0A73FPZe7PcUgRv8wJATKspjuHtVazaAgGEGXz8Q18CW
QKQmfrrTf8sJLQYVqZ9rfcwt//ptGGUY7014RUQprDTO8AOIFNwfCBo+RoiUk+r9
OnBLtteE8YmL+VZQDQqG2ifFCoCS3YHf7rj8RBRlB3QE/YkAzCw9sNa4Z3CuLDe7
MC9RQwhQiaocNQclOzFx/77KdwOWNlL8eUYBiJr4GfxJHvTtqR1u0dWKQeMKNo+f
Lv8OIaVCY+NV8O3fJFHzP+BwHktbGx1SwpxFvqYMPRsG5mEizyFKI7cdwHTm7kb9
agWW9XByMXAFGA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 14:11:34 2025 by rpki-client