Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
File: 69siVHHy1uQQYLNBhXJUhUgQFLg.mft (raw, json)
Hash identifier: Untv/I7geQJSAB0btr5LGcg9K0gmYLqwOqWrwVnDDPM=
Subject key identifier: 11:1B:7C:6A:EC:56:3A:7B:E8:9D:9A:7F:BE:1B:34:5D:02:31:C9:17
Authority key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
Certificate issuer: /CN=ebdb225471f2d6e41060b34185725485481014b8
Certificate serial: 019A72260FBBF0A23D00156729BA35CAD031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
Manifest number: 1680
Signing time: Tue 11 Nov 2025 09:01:28 +0000
Manifest this update: Tue 11 Nov 2025 09:01:28 +0000
Manifest next update: Wed 12 Nov 2025 09:01:28 +0000
Files and hashes: 1: 69siVHHy1uQQYLNBhXJUhUgQFLg.crl (hash: EM0PIq81/gzbh2xiuJn06e3i6h5KSj2BXsKNA7H0WxI=)
2: fa7NROYx8iSrXkapsnKC5maWgAE.roa (hash: uTBWDWi+lUO6SXQc1mkpkLFQ4pPjE/7aqsWLMLokR9M=)
3: ypiHaIkjWTMZcDzv0-OFLs0Vl8g.roa (hash: VEkHUv83f9ifQbOyDH/QRdAXTrrARw1jb4RzCM/pIXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:0f:bb:f0:a2:3d:00:15:67:29:ba:35:ca:d0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdb225471f2d6e41060b34185725485481014b8
Validity
Not Before: Nov 11 09:01:28 2025 GMT
Not After : Nov 12 09:01:28 2025 GMT
Subject: CN=111b7c6aec563a7be89d9a7fbe1b345d0231c917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:60:17:da:28:44:42:15:b2:f2:f5:d3:81:
34:22:d7:f9:d2:2e:a8:10:b6:ff:2d:94:9c:81:1d:
40:0f:78:e2:18:83:ff:aa:c0:7f:bc:90:cc:df:2b:
7d:ca:69:f7:2e:1c:a0:a7:e3:8b:bb:75:77:75:ed:
35:68:a9:62:fc:a3:35:db:cf:2a:3a:41:01:8d:2b:
69:a9:06:d2:32:21:0d:3f:b4:32:e6:bf:8c:b4:79:
e3:d8:3a:ed:14:b6:c2:1d:50:0b:dc:e7:99:7d:62:
f7:c8:53:0e:9b:2d:c0:40:6f:6c:17:39:65:89:37:
e3:c3:d3:c3:38:ba:24:d5:76:e7:32:e0:2e:22:92:
31:3e:82:84:78:71:99:f1:c4:3a:b6:d4:2a:92:e3:
c7:40:2c:33:2d:b1:04:86:f1:7b:bd:4d:d0:57:f2:
0b:db:51:ad:43:42:06:df:8d:64:14:5c:84:78:fa:
44:92:f2:90:77:6c:ee:db:fb:3e:dd:92:34:1f:ff:
16:e3:66:94:f7:5a:9f:d2:b1:85:68:5a:3c:f4:d2:
60:d6:14:9a:74:a8:08:ed:25:a7:8e:99:a5:19:d5:
85:18:95:55:ea:e1:38:00:a6:74:f8:42:a0:67:fc:
54:00:d5:2c:c3:95:c5:d4:57:8d:db:93:83:1b:ce:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1B:7C:6A:EC:56:3A:7B:E8:9D:9A:7F:BE:1B:34:5D:02:31:C9:17
X509v3 Authority Key Identifier:
keyid:EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b7:af:32:54:ed:6d:5e:6a:ea:5c:9e:ff:8b:b9:25:6d:3e:
51:62:3f:f3:3a:cf:52:d1:0c:be:8d:0a:85:95:31:d6:a9:15:
f2:5f:62:0e:33:de:10:c7:61:b7:40:3d:bb:83:50:d2:06:9e:
64:93:ee:9b:2a:81:22:92:55:d4:c0:6e:89:a9:58:63:74:35:
e7:f9:64:41:4d:b1:72:bd:e0:a8:5a:ab:48:a6:df:a8:75:d0:
45:c2:b0:31:80:ee:30:cc:5f:7d:7e:5b:11:8a:70:99:e7:50:
f6:24:89:ec:8e:c5:87:41:0b:ec:4e:87:d8:32:27:b5:7d:ec:
b6:92:cc:b5:7b:a0:af:3f:11:e6:50:23:4b:3d:56:4c:c0:98:
5b:2a:63:f0:5d:2b:de:77:ae:33:8a:ac:d5:60:17:e8:36:aa:
82:d8:8b:7e:38:3f:4b:fd:40:05:18:5e:cb:19:98:0c:69:fc:
f3:73:2d:d5:a9:6d:99:c9:18:49:6e:83:54:5f:a9:25:4a:c2:
cd:cf:a5:1c:f6:bc:9b:a2:a6:80:cf:1b:34:3c:55:1d:46:7a:
5a:14:80:48:88:58:63:a5:ad:39:b7:90:1c:a5:83:23:1f:16:
8a:79:d2:a2:9f:a1:bb:b8:16:a0:a5:3a:4c:20:14:51:27:7a:
89:44:63:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJg+78KI9ABVnKbo1ytAxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZGIyMjU0NzFmMmQ2ZTQxMDYwYjM0MTg1NzI1NDg1NDgx
MDE0YjgwHhcNMjUxMTExMDkwMTI4WhcNMjUxMTEyMDkwMTI4WjAzMTEwLwYDVQQD
EygxMTFiN2M2YWVjNTYzYTdiZTg5ZDlhN2ZiZTFiMzQ1ZDAyMzFjOTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtRgF9ooREIVsvL104E0Itf50i6o
ELb/LZScgR1AD3jiGIP/qsB/vJDM3yt9ymn3Lhygp+OLu3V3de01aKli/KM1288q
OkEBjStpqQbSMiENP7Qy5r+MtHnj2DrtFLbCHVAL3OeZfWL3yFMOmy3AQG9sFzll
iTfjw9PDOLok1XbnMuAuIpIxPoKEeHGZ8cQ6ttQqkuPHQCwzLbEEhvF7vU3QV/IL
21GtQ0IG341kFFyEePpEkvKQd2zu2/s+3ZI0H/8W42aU91qf0rGFaFo89NJg1hSa
dKgI7SWnjpmlGdWFGJVV6uE4AKZ0+EKgZ/xUANUsw5XF1FeN25ODG84GsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEbfGrsVjp76J2af74bNF0CMckXMB8GA1UdIwQY
MBaAFOvbIlRx8tbkEGCzQYVyVIVIEBS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjlzaVZISHkxdVFRWUxOQmhYSlVoVWdRRkxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zNzY4NTMtMmFiZi00MjMyLTkxZmYt
MDlhNWU4ZDk2MGRkLzEvNjlzaVZISHkxdVFRWUxOQmhYSlVoVWdRRkxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zNzY4NTMtMmFiZi00MjMyLTkxZmYtMDlhNWU4ZDk2MGRk
LzEvNjlzaVZISHkxdVFRWUxOQmhYSlVoVWdRRkxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7evMlTt
bV5q6lye/4u5JW0+UWI/8zrPUtEMvo0KhZUx1qkV8l9iDjPeEMdht0A9u4NQ0gae
ZJPumyqBIpJV1MBuialYY3Q15/lkQU2xcr3gqFqrSKbfqHXQRcKwMYDuMMxffX5b
EYpwmedQ9iSJ7I7Fh0EL7E6H2DIntX3stpLMtXugrz8R5lAjSz1WTMCYWypj8F0r
3neuM4qs1WAX6DaqgtiLfjg/S/1ABRheyxmYDGn883Mt1altmckYSW6DVF+pJUrC
zc+lHPa8m6KmgM8bNDxVHUZ6WhSASIhYY6WtObeQHKWDIx8WinnSop+hu7gWoKU6
TCAUUSd6iURjVw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:38 2025 by rpki-client