Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
File: Rl73vS6z3NurBJCDgNSKjy_rxiw.mft (raw, json)
Hash identifier: w/RfmHoJLdFzncbFgmUTKcShl61Fq1WmhMMmjVPZGd0=
Subject key identifier: D0:E1:CD:7E:88:E6:27:0A:C3:BA:47:65:A0:60:07:BC:F6:81:F7:79
Authority key identifier: 46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C
Certificate issuer: /CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
Certificate serial: 019A71EE6E5A3191A5440922C6C1B7DD9B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
Manifest number: 111C
Signing time: Tue 11 Nov 2025 08:00:42 +0000
Manifest this update: Tue 11 Nov 2025 08:00:42 +0000
Manifest next update: Wed 12 Nov 2025 08:00:42 +0000
Files and hashes: 1: 0-c9PgPd1_wXhamWThnKHlQbGGs.roa (hash: t9blZuOAI0IrEr32bYa6e5eRP1KzQCe8vHG6m5RDWu8=)
2: Rl73vS6z3NurBJCDgNSKjy_rxiw.crl (hash: 6Oj/ymq3nVYFZW8RMifEO4ke/PUAZSitoqjMsjn4r/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6e:5a:31:91:a5:44:09:22:c6:c1:b7:dd:9b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
Validity
Not Before: Nov 11 08:00:42 2025 GMT
Not After : Nov 12 08:00:42 2025 GMT
Subject: CN=d0e1cd7e88e6270ac3ba4765a06007bcf681f779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:db:b3:2f:95:a7:e3:b1:97:05:ae:00:54:
09:42:37:f0:13:9f:c4:32:11:59:f2:7d:34:e5:9e:
0c:b2:66:c8:93:bf:cb:54:ac:31:b7:5f:5f:bf:0a:
ad:4f:67:68:1d:98:76:3e:3d:82:b7:45:ec:11:62:
61:bb:ca:7c:3f:13:8e:0e:5f:05:f1:e6:14:be:1f:
68:0f:60:5c:77:06:9f:f1:91:8b:a7:b1:4f:23:84:
b9:26:4a:74:15:db:97:5d:bf:1e:cb:6b:e5:99:be:
5a:20:f6:a6:14:b4:c7:ed:44:8c:26:64:f9:0a:52:
23:31:df:13:9f:1e:60:9c:b5:be:12:af:f8:19:52:
40:2d:4a:17:c0:f3:b2:e2:76:4b:93:54:31:80:28:
98:2c:49:2c:e3:30:d2:58:bf:af:88:51:19:d5:9c:
13:de:67:47:fc:44:37:58:39:fd:0e:c7:6b:43:05:
57:05:f2:ba:f9:b4:f6:e5:f6:2b:4d:7b:7f:e2:d8:
fa:d1:33:9e:d7:eb:2e:8f:3f:b5:56:7d:e2:68:e0:
8e:93:18:83:aa:c8:aa:62:b8:da:2b:fa:c8:43:92:
ae:fd:41:1d:a3:cd:60:da:a2:06:20:4b:33:b6:0a:
e6:c6:82:d4:43:47:69:d3:96:b6:90:79:95:ca:94:
a4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E1:CD:7E:88:E6:27:0A:C3:BA:47:65:A0:60:07:BC:F6:81:F7:79
X509v3 Authority Key Identifier:
keyid:46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:60:18:8a:57:79:3f:77:b9:27:2e:20:c7:f1:f5:4f:64:ba:
4b:4b:9f:97:f6:d8:e7:07:50:54:3a:bb:15:6b:35:82:68:d1:
5b:56:fe:75:76:6f:12:63:b9:24:13:29:fd:8a:01:72:ec:5e:
19:61:db:9d:39:92:35:13:7c:2d:7b:6d:46:74:ee:b5:33:bc:
51:e4:37:1b:02:d7:f6:83:e5:c5:db:fb:03:68:71:10:8b:00:
ee:c7:5b:84:95:e2:b7:e7:39:96:14:b0:32:7f:1e:25:9b:e1:
64:b7:ac:ac:d1:15:d9:a4:3b:c7:bd:92:79:c2:35:8d:fe:a0:
6b:d1:64:b1:38:56:b9:dd:42:5a:03:a6:82:45:f1:28:5d:ed:
cb:76:5b:df:f1:08:5c:21:ac:c7:9b:82:2b:2e:82:48:de:cf:
54:01:e0:2e:55:b5:d9:02:c7:10:6d:53:3d:8e:ee:92:cf:f7:
68:12:37:fe:47:8f:1b:f1:18:2f:cb:f0:ce:dc:4f:59:b2:8d:
f4:5c:a6:22:0e:ea:9b:68:8a:bf:88:18:8b:b6:ec:9b:ba:28:
a2:75:19:98:6e:74:0c:c5:90:c2:97:12:79:66:70:0a:fd:a0:
0b:5e:eb:a2:89:10:e4:5f:ec:51:20:63:ef:12:e8:e4:75:bf:
e2:5a:c3:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7m5aMZGlRAkixsG33ZtjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NWVmN2JkMmViM2RjZGJhYjA0OTA4MzgwZDQ4YThmMmZl
YmM2MmMwHhcNMjUxMTExMDgwMDQyWhcNMjUxMTEyMDgwMDQyWjAzMTEwLwYDVQQD
EyhkMGUxY2Q3ZTg4ZTYyNzBhYzNiYTQ3NjVhMDYwMDdiY2Y2ODFmNzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4Hbsy+Vp+OxlwWuAFQJQjfwE5/E
MhFZ8n005Z4MsmbIk7/LVKwxt19fvwqtT2doHZh2Pj2Ct0XsEWJhu8p8PxOODl8F
8eYUvh9oD2Bcdwaf8ZGLp7FPI4S5Jkp0FduXXb8ey2vlmb5aIPamFLTH7USMJmT5
ClIjMd8Tnx5gnLW+Eq/4GVJALUoXwPOy4nZLk1QxgCiYLEks4zDSWL+viFEZ1ZwT
3mdH/EQ3WDn9DsdrQwVXBfK6+bT25fYrTXt/4tj60TOe1+sujz+1Vn3iaOCOkxiD
qsiqYrjaK/rIQ5Ku/UEdo81g2qIGIEsztgrmxoLUQ0dp05a2kHmVypSkfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDhzX6I5icKw7pHZaBgB7z2gfd5MB8GA1UdIwQY
MBaAFEZe970us9zbqwSQg4DUio8v68YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmw3M3ZTNnozTnVyQkpDRGdOU0tqeV9yeGl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80MDk5NDktZjIyOS00OThkLTkzMTUt
MzRiNjdkZjdjYjAzLzEvUmw3M3ZTNnozTnVyQkpDRGdOU0tqeV9yeGl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80MDk5NDktZjIyOS00OThkLTkzMTUtMzRiNjdkZjdjYjAz
LzEvUmw3M3ZTNnozTnVyQkpDRGdOU0tqeV9yeGl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmAYild5
P3e5Jy4gx/H1T2S6S0ufl/bY5wdQVDq7FWs1gmjRW1b+dXZvEmO5JBMp/YoBcuxe
GWHbnTmSNRN8LXttRnTutTO8UeQ3GwLX9oPlxdv7A2hxEIsA7sdbhJXit+c5lhSw
Mn8eJZvhZLesrNEV2aQ7x72SecI1jf6ga9FksThWud1CWgOmgkXxKF3ty3Zb3/EI
XCGsx5uCKy6CSN7PVAHgLlW12QLHEG1TPY7uks/3aBI3/kePG/EYL8vwztxPWbKN
9FymIg7qm2iKv4gYi7bsm7ooonUZmG50DMWQwpcSeWZwCv2gC17rookQ5F/sUSBj
7xLo5HW/4lrDHQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:04 2025 by rpki-client