Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
File: _z73u2pGuvTbG6633ySkDB1MFU8.mft (raw, json)
Hash identifier: QD7EAmD+GZoGCijTokzTc0clSaslXwBQoCCMJzX35HU=
Subject key identifier: C4:BE:B7:B7:54:2E:8E:2C:F3:1A:02:B8:66:61:8B:37:76:5C:1E:BC
Authority key identifier: FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F
Certificate issuer: /CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
Certificate serial: 019A71B904EF9354BF79299D4268BBA1BE84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
Manifest number: 03CC
Signing time: Tue 11 Nov 2025 07:02:21 +0000
Manifest this update: Tue 11 Nov 2025 07:02:21 +0000
Manifest next update: Wed 12 Nov 2025 07:02:21 +0000
Files and hashes: 1: CyralhGuX94DIISxgcLaFGkuwEE.roa (hash: jbaQiBUIOwYyUUxeUd5k0D2sxSHilcS8Ozj2S6lNjj0=)
2: _z73u2pGuvTbG6633ySkDB1MFU8.crl (hash: uC4fBc3QhbVpC66JliO4DswOgAqqT4qUjht4OTFdwMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:04:ef:93:54:bf:79:29:9d:42:68:bb:a1:be:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
Validity
Not Before: Nov 11 07:02:21 2025 GMT
Not After : Nov 12 07:02:21 2025 GMT
Subject: CN=c4beb7b7542e8e2cf31a02b866618b37765c1ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:3d:2d:59:2e:11:92:e1:1f:72:fb:76:d4:
5e:58:8f:93:26:ee:6e:ba:da:f2:89:37:2a:7b:ac:
a5:66:24:62:c9:fa:0a:ce:70:8c:5e:de:0d:09:ee:
db:38:f1:7d:8d:bd:61:bf:f3:c3:f5:ae:59:f6:c7:
a7:07:60:04:89:50:6c:3c:78:a2:87:17:b2:74:a1:
30:b3:47:e6:fb:20:89:5a:6d:3e:64:00:9d:31:ea:
38:ba:f3:7c:54:e5:66:ed:a6:48:3a:d0:d8:d0:5c:
5d:03:dc:24:23:30:3c:74:88:80:13:51:05:57:7f:
ac:f2:06:c1:f1:37:f5:da:04:c6:45:97:2b:bb:91:
64:a8:58:b8:c2:12:98:eb:ed:67:1c:8d:6e:ac:4a:
b0:5d:d1:5d:75:95:1a:f9:bb:b5:b9:8a:13:32:39:
3a:a5:cf:ba:4a:6d:13:db:f5:c1:d3:1c:b3:15:e4:
79:ad:fd:15:40:95:26:7a:b7:6b:5f:fc:1e:0e:65:
b2:79:72:c3:f8:88:ea:13:3f:97:b9:52:5b:59:06:
71:35:90:f0:a0:ee:f8:e1:8d:5e:9b:47:65:61:a8:
fe:36:22:20:93:7b:64:58:89:e0:05:9c:82:ce:9c:
44:ce:b0:13:be:02:30:cd:a2:b9:60:02:a5:bb:46:
48:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BE:B7:B7:54:2E:8E:2C:F3:1A:02:B8:66:61:8B:37:76:5C:1E:BC
X509v3 Authority Key Identifier:
keyid:FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:5c:51:d4:b4:08:03:cb:9d:26:d8:47:92:a9:35:37:fd:6f:
eb:9d:0e:c4:72:93:f8:75:0b:5b:5e:cd:92:cf:72:ac:6c:73:
fa:88:37:0d:d6:6f:f4:c3:78:4f:a9:98:77:c6:e9:1f:bd:72:
06:89:ba:23:41:1d:46:ce:0b:41:8b:a3:85:10:2c:9a:71:07:
53:b7:9d:ba:59:41:40:65:19:ad:ba:cf:17:d1:74:8d:64:df:
81:d6:67:4f:a1:ab:49:48:5a:9e:37:46:0b:fc:a8:13:0a:d6:
04:5a:39:69:ac:4c:11:99:d2:86:05:f3:ff:ed:2e:21:1b:91:
b5:8a:ac:1a:29:34:f9:94:d3:14:a0:cb:8d:44:04:a1:cc:b0:
39:7b:d4:55:2f:7e:2a:d9:c3:8d:7b:05:30:7b:7f:28:71:49:
2f:74:b9:9d:c9:c4:dc:f4:1c:70:58:09:29:d2:f0:dd:cd:4f:
3d:eb:57:7c:ed:19:6c:53:14:cc:a1:d5:d9:b9:29:7e:af:79:
c4:99:9c:d2:53:bb:6c:ae:7b:02:e6:46:b6:a6:3f:93:a5:41:
9c:36:46:bc:00:24:76:0c:42:74:d4:c3:ee:01:8c:7e:65:0d:
3f:63:51:ee:d4:29:e5:75:ef:72:63:3d:3f:ac:33:2f:a4:a0:
45:dc:ba:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuQTvk1S/eSmdQmi7ob6EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmM2VmN2JiNmE0NmJhZjRkYjFiYWViN2RmMjRhNDBjMWQ0
YzE1NGYwHhcNMjUxMTExMDcwMjIxWhcNMjUxMTEyMDcwMjIxWjAzMTEwLwYDVQQD
EyhjNGJlYjdiNzU0MmU4ZTJjZjMxYTAyYjg2NjYxOGIzNzc2NWMxZWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucg9LVkuEZLhH3L7dtReWI+TJu5u
utryiTcqe6ylZiRiyfoKznCMXt4NCe7bOPF9jb1hv/PD9a5Z9senB2AEiVBsPHii
hxeydKEws0fm+yCJWm0+ZACdMeo4uvN8VOVm7aZIOtDY0FxdA9wkIzA8dIiAE1EF
V3+s8gbB8Tf12gTGRZcru5FkqFi4whKY6+1nHI1urEqwXdFddZUa+bu1uYoTMjk6
pc+6Sm0T2/XB0xyzFeR5rf0VQJUmerdrX/weDmWyeXLD+IjqEz+XuVJbWQZxNZDw
oO744Y1em0dlYaj+NiIgk3tkWIngBZyCzpxEzrATvgIwzaK5YAKlu0ZIbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMS+t7dULo4s8xoCuGZhizd2XB68MB8GA1UdIwQY
MBaAFP8+97tqRrr02xuut98kpAwdTBVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3o3M3UycEd1dlRiRzY2MzN5U2tEQjFNRlU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82ODcxYTAtYWZiMi00NWFiLWFkZGUt
NjJiZTFmMDJhYjBjLzEvX3o3M3UycEd1dlRiRzY2MzN5U2tEQjFNRlU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82ODcxYTAtYWZiMi00NWFiLWFkZGUtNjJiZTFmMDJhYjBj
LzEvX3o3M3UycEd1dlRiRzY2MzN5U2tEQjFNRlU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsFxR1LQI
A8udJthHkqk1N/1v650OxHKT+HULW17Nks9yrGxz+og3DdZv9MN4T6mYd8bpH71y
Bom6I0EdRs4LQYujhRAsmnEHU7edullBQGUZrbrPF9F0jWTfgdZnT6GrSUhanjdG
C/yoEwrWBFo5aaxMEZnShgXz/+0uIRuRtYqsGik0+ZTTFKDLjUQEocywOXvUVS9+
KtnDjXsFMHt/KHFJL3S5ncnE3PQccFgJKdLw3c1PPetXfO0ZbFMUzKHV2bkpfq95
xJmc0lO7bK57AuZGtqY/k6VBnDZGvAAkdgxCdNTD7gGMfmUNP2NR7tQp5XXvcmM9
P6wzL6SgRdy6ag==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:14 2025 by rpki-client