Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
File: 43O80yVaDa1fSjUNEdyJH6C-BDc.mft (raw, json)
Hash identifier: /utOZJ1SSLSHcIKv203oX4wQgSxANsmqXqnHVG57Xvg=
Subject key identifier: AD:11:7A:A9:96:33:EE:3D:F7:A7:90:02:4A:B6:C2:8F:30:90:15:E7
Authority key identifier: E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
Certificate issuer: /CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Certificate serial: 019A70DC50AD69DA5B3059CA17257053C1EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
Manifest number: 07EE
Signing time: Tue 11 Nov 2025 03:01:17 +0000
Manifest this update: Tue 11 Nov 2025 03:01:17 +0000
Manifest next update: Wed 12 Nov 2025 03:01:17 +0000
Files and hashes: 1: 1-AKJmO9q5axmG2bLlo_CKWpT7rI.roa (hash: IzbOHhtlqnCQLwohTNVhlpmomMZIZO83L4rK6yCvODA=)
2: 43O80yVaDa1fSjUNEdyJH6C-BDc.crl (hash: JKT0ausXk15r0OPLIyv6gkFseR/3tZ2f8SyhhqvFc8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:50:ad:69:da:5b:30:59:ca:17:25:70:53:c1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Validity
Not Before: Nov 11 03:01:17 2025 GMT
Not After : Nov 12 03:01:17 2025 GMT
Subject: CN=ad117aa99633ee3df7a790024ab6c28f309015e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:df:ec:7a:2c:6f:f7:0d:1a:a8:f9:5c:91:
4d:dd:81:f5:35:ff:62:75:c6:18:81:bd:91:39:e4:
41:ca:81:7d:64:3a:23:34:fc:20:31:f9:cc:94:66:
50:33:07:36:49:63:ea:0c:cc:00:2b:75:9a:5a:c7:
b8:6b:07:f2:a7:34:88:62:52:4d:df:27:e4:cd:18:
de:86:53:5d:96:e7:46:9c:a6:2f:c3:bd:3a:0b:3a:
28:60:ef:f7:28:37:f6:ee:be:6a:fb:9d:d1:c4:b2:
4f:d3:a5:4b:1b:2c:f0:e6:a9:2a:42:82:86:58:1b:
64:e6:e9:04:11:1d:3e:97:52:2c:14:06:84:d6:c8:
79:93:a6:5a:46:92:51:7f:08:14:13:af:ba:4e:27:
32:45:df:44:1d:5d:e8:f5:94:4f:c5:df:ae:a3:8c:
71:01:ec:1b:75:7a:79:38:3b:9a:83:95:d4:7b:bf:
9d:a1:c0:1f:ec:92:75:f0:aa:ab:d9:3e:1b:a6:04:
89:db:8b:54:f6:36:39:4b:70:6b:c1:0a:17:a9:80:
33:de:6e:71:93:7f:47:06:48:cd:ea:ab:28:c6:8f:
12:97:ad:97:55:7b:30:62:3d:56:13:9f:db:e5:2b:
77:02:c7:d2:1e:0c:8c:6a:d3:87:0c:bb:87:7e:12:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:11:7A:A9:96:33:EE:3D:F7:A7:90:02:4A:B6:C2:8F:30:90:15:E7
X509v3 Authority Key Identifier:
keyid:E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:84:b3:18:ce:07:56:ee:82:6d:53:38:2a:7b:5c:dd:4c:af:
91:e7:02:f5:74:80:eb:8a:f9:b9:ac:76:66:e5:05:15:69:06:
d1:0d:c4:e8:94:8d:d9:80:f5:3a:42:4a:21:2f:cb:24:11:ec:
6f:82:b5:6a:27:86:0d:ab:e2:27:8c:b3:6f:e2:07:10:50:58:
4f:f4:9a:4a:01:14:94:fc:eb:86:8c:e5:19:45:67:4b:05:0c:
92:2d:33:75:0e:f5:1c:af:23:9a:bc:ef:ec:44:f5:88:20:5e:
a0:fc:04:b4:03:1f:9b:ed:ae:a5:2a:3d:09:40:6d:e6:ac:b2:
9f:55:78:b1:d5:44:2a:ba:e5:2c:19:a1:26:3b:27:dc:45:df:
12:f1:f8:10:01:5d:39:a1:99:3b:43:c8:f4:b3:41:84:1e:17:
fa:5d:3c:c8:0f:6f:28:b9:ba:37:3a:6e:31:2a:ec:d0:d3:e3:
28:f6:2e:c2:b9:4e:e9:e9:0c:76:2f:c8:e4:05:68:3a:96:48:
a4:18:db:58:5e:15:6d:b4:61:23:41:97:4e:40:75:9d:aa:17:
88:a9:53:1b:42:95:1c:7e:b2:b2:af:47:d0:e8:fb:f4:1f:08:
c0:86:45:31:8f:12:ae:a3:42:bf:80:b4:90:da:3a:c5:5a:ab:
92:9f:6f:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3FCtadpbMFnKFyVwU8HqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzNiY2QzMjU1YTBkYWQ1ZjRhMzUwZDExZGM4OTFmYTBi
ZTA0MzcwHhcNMjUxMTExMDMwMTE3WhcNMjUxMTEyMDMwMTE3WjAzMTEwLwYDVQQD
EyhhZDExN2FhOTk2MzNlZTNkZjdhNzkwMDI0YWI2YzI4ZjMwOTAxNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodLf7Hosb/cNGqj5XJFN3YH1Nf9i
dcYYgb2ROeRByoF9ZDojNPwgMfnMlGZQMwc2SWPqDMwAK3WaWse4awfypzSIYlJN
3yfkzRjehlNdludGnKYvw706CzooYO/3KDf27r5q+53RxLJP06VLGyzw5qkqQoKG
WBtk5ukEER0+l1IsFAaE1sh5k6ZaRpJRfwgUE6+6TicyRd9EHV3o9ZRPxd+uo4xx
AewbdXp5ODuag5XUe7+docAf7JJ18Kqr2T4bpgSJ24tU9jY5S3BrwQoXqYAz3m5x
k39HBkjN6qsoxo8Sl62XVXswYj1WE5/b5St3AsfSHgyMatOHDLuHfhIYzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0ReqmWM+4996eQAkq2wo8wkBXnMB8GA1UdIwQY
MBaAFONzvNMlWg2tX0o1DRHciR+gvgQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNPODB5VmFEYTFmU2pVTkVkeUpINkMtQkRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kMjBkYmMtMmFiNC00M2ZiLTgwYTIt
MDRlN2IxYThjZTE4LzEvNDNPODB5VmFEYTFmU2pVTkVkeUpINkMtQkRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kMjBkYmMtMmFiNC00M2ZiLTgwYTItMDRlN2IxYThjZTE4
LzEvNDNPODB5VmFEYTFmU2pVTkVkeUpINkMtQkRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYSzGM4H
Vu6CbVM4Kntc3UyvkecC9XSA64r5uax2ZuUFFWkG0Q3E6JSN2YD1OkJKIS/LJBHs
b4K1aieGDaviJ4yzb+IHEFBYT/SaSgEUlPzrhozlGUVnSwUMki0zdQ71HK8jmrzv
7ET1iCBeoPwEtAMfm+2upSo9CUBt5qyyn1V4sdVEKrrlLBmhJjsn3EXfEvH4EAFd
OaGZO0PI9LNBhB4X+l08yA9vKLm6NzpuMSrs0NPjKPYuwrlO6ekMdi/I5AVoOpZI
pBjbWF4VbbRhI0GXTkB1naoXiKlTG0KVHH6ysq9H0Oj79B8IwIZFMY8SrqNCv4C0
kNo6xVqrkp9vHw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:13 2025 by rpki-client