Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
File: Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json)
Hash identifier: P2v4rQVGy5GrgPDY9Fmq/fJQIeeqlAlYTE4kplZwUp4=
Subject key identifier: EF:FD:48:CF:AB:29:74:B9:B2:97:D9:F7:60:FC:94:42:6C:BE:90:BF
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 019A4C986DE3CF4D96CB04F799E06D5F2808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
Manifest number: 1717
Signing time: Tue 04 Nov 2025 02:00:49 +0000
Manifest this update: Tue 04 Nov 2025 02:00:49 +0000
Manifest next update: Wed 05 Nov 2025 02:00:49 +0000
Files and hashes: 1: 6OzuFuoHFoTdTwv4FRn7LoIvB5s.roa (hash: e4WYSwjwkMxNR6fSo9iakfDeNdFMp+Vk1BRcdY4nLcA=)
2: CB8eQK5dvFg_5trPRYP6D-lZ4C8.roa (hash: oDBRZ17Xn2IgxwpcmrbPa7CycpvtEalBVdW/dY6q/rg=)
3: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: LV5fMM25TIaIv2MW0CYjqRhHPXCRuy6tx4CpvlmS05Q=)
4: TrNuqWdgLhGTxn5VxoYeyfzOKkg.roa (hash: Rqi2Sn0fAAAxy2y3ILi9hXub3082liYhSLIo32eP1Fg=)
5: VlDA6Ug6cUL_yTYBt63ZARwd1mw.roa (hash: kx60AZ5dZTQ/qqeCrvP99skkzaJh8HaHmSw61ZkqSCc=)
6: Xd-kVhv1wvUCMFGkclVtFTV9N-Y.roa (hash: GQJxOGAvPg3sAXcYghbtcTO+/Blw76yCa2ak8uLEs2c=)
7: _npBPU_qU8Q1a65hoUMHOBSefXQ.roa (hash: e8tqm7dxs7+LcvLZgwgmWSIzqUCH5DxQZJAY7CIpCfc=)
8: zsAzizQNzq-nU7DBqjyFfFYYJlY.roa (hash: lPKM4UQ81kuyk83v9B3QSeG105m6Qhy3mK0i/rPSzW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:6d:e3:cf:4d:96:cb:04:f7:99:e0:6d:5f:28:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Nov 4 02:00:49 2025 GMT
Not After : Nov 5 02:00:49 2025 GMT
Subject: CN=effd48cfab2974b9b297d9f760fc94426cbe90bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:28:09:75:61:73:1c:38:ad:26:bf:92:b0:
a3:d2:15:5e:27:85:c8:2f:2a:70:c6:7f:16:3c:e8:
96:1a:96:95:0f:c8:9d:db:4d:15:8c:04:2f:31:a9:
f1:71:2e:df:2c:33:9c:95:6c:c1:84:ce:57:22:c9:
eb:23:69:5a:69:fb:0f:f8:32:61:d1:9a:db:37:94:
1f:2d:c7:e9:08:81:43:a8:71:31:79:93:a6:9a:11:
cb:9e:f4:26:eb:a3:ab:8a:36:35:ce:bf:49:cc:b5:
4d:76:88:52:3a:bd:4f:dd:ca:25:ca:76:28:e9:8a:
0b:cb:a8:92:42:e0:83:75:31:95:3d:1b:98:ae:95:
7f:bf:ff:fe:6d:ea:33:ac:7d:0a:e9:44:8c:e5:83:
f5:82:79:3b:82:68:a7:77:5c:07:59:27:a4:f0:4f:
61:40:6a:f7:f2:d7:81:b9:3f:e5:87:32:f5:bf:69:
3c:9b:00:d4:f0:08:49:ea:5e:78:e7:1f:c8:85:b6:
5b:42:50:03:8c:b2:db:c3:4b:0a:be:e4:95:54:13:
cb:1d:72:35:dd:97:60:01:e8:00:b5:0e:81:db:bf:
b4:82:d3:b9:42:88:c0:bb:b4:a9:b9:1e:4f:bf:fa:
c5:e0:2a:06:a0:f5:fe:84:bb:de:2b:cd:a2:b2:11:
4a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FD:48:CF:AB:29:74:B9:B2:97:D9:F7:60:FC:94:42:6C:BE:90:BF
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f4:0a:fd:9d:0a:00:b6:5a:22:00:22:40:57:7c:f8:d2:db:
1f:0e:37:53:34:50:21:71:49:d8:fb:3b:ff:19:6e:82:fc:cc:
9d:bd:73:84:fe:54:ef:ac:a7:09:a9:d8:90:1f:c5:19:9a:70:
a4:e8:53:2a:7a:c0:35:a5:79:43:3e:f0:c0:8b:54:db:0c:c9:
62:ef:c7:25:be:82:81:7c:3c:aa:aa:32:bb:7c:65:50:36:db:
15:ff:dc:64:fe:28:17:99:be:bd:46:40:58:58:28:ef:72:71:
db:aa:1c:11:76:c7:ac:5a:c3:a6:81:e3:a0:f6:bc:92:f8:98:
d6:5f:88:44:fd:d0:96:a0:d6:1d:94:97:32:6e:6c:a3:e1:c1:
3b:f9:1f:23:21:97:33:6a:e9:ea:ba:e2:e3:ad:b0:4d:45:7c:
1a:1e:43:0c:e9:37:24:f0:d7:37:d7:2c:40:73:ff:ff:b9:a3:
1b:0b:73:7b:f4:83:fd:70:1d:5e:8e:47:1e:69:1d:73:4b:86:
6b:a2:bb:f7:5e:fc:36:07:b5:af:d5:e3:4f:36:f5:ba:99:b8:
38:84:ce:ac:43:9c:4e:91:1b:95:92:c5:ec:37:59:9b:ea:1c:
61:ce:9c:af:e2:45:82:5d:6e:d4:c1:27:7a:5c:15:93:72:21:
36:38:7b:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMmG3jz02WywT3meBtXygIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YmEzZjgwMDM5YjllNzg0Y2ZiMjRiZjJjN2RkYjI0ZTE5
MDBhNzYwHhcNMjUxMTA0MDIwMDQ5WhcNMjUxMTA1MDIwMDQ5WjAzMTEwLwYDVQQD
EyhlZmZkNDhjZmFiMjk3NGI5YjI5N2Q5Zjc2MGZjOTQ0MjZjYmU5MGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIYoCXVhcxw4rSa/krCj0hVeJ4XI
Lypwxn8WPOiWGpaVD8id200VjAQvManxcS7fLDOclWzBhM5XIsnrI2laafsP+DJh
0ZrbN5QfLcfpCIFDqHExeZOmmhHLnvQm66OrijY1zr9JzLVNdohSOr1P3colynYo
6YoLy6iSQuCDdTGVPRuYrpV/v//+beozrH0K6USM5YP1gnk7gmind1wHWSek8E9h
QGr38teBuT/lhzL1v2k8mwDU8AhJ6l545x/IhbZbQlADjLLbw0sKvuSVVBPLHXI1
3ZdgAegAtQ6B27+0gtO5QojAu7SpuR5Pv/rF4CoGoPX+hLveK82ishFKyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/9SM+rKXS5spfZ92D8lEJsvpC/MB8GA1UdIwQY
MBaAFEa6P4ADm554TPskvyx92yThkAp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWIt
ODlhY2UzODIyMGZiLzEvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWItODlhY2UzODIyMGZi
LzEvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/QK/Z0K
ALZaIgAiQFd8+NLbHw43UzRQIXFJ2Ps7/xlugvzMnb1zhP5U76ynCanYkB/FGZpw
pOhTKnrANaV5Qz7wwItU2wzJYu/HJb6CgXw8qqoyu3xlUDbbFf/cZP4oF5m+vUZA
WFgo73Jx26ocEXbHrFrDpoHjoPa8kviY1l+IRP3QlqDWHZSXMm5so+HBO/kfIyGX
M2rp6rri462wTUV8Gh5DDOk3JPDXN9csQHP//7mjGwtze/SD/XAdXo5HHmkdc0uG
a6K79178Nge1r9XjTzb1upm4OITOrEOcTpEblZLF7DdZm+ocYc6cr+JFgl1u1MEn
elwVk3IhNjh72Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 05:29:08 2025 by rpki-client