Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
File: R60fV24_cbT2wzkfL6ND1Qi2se4.mft (raw, json)
Hash identifier: B6cqG/thta9YLJp2+2eBlKAatkrfeKz85ANo8qtsLhg=
Subject key identifier: 3B:89:6C:C3:6F:E5:C3:2F:7F:CE:05:80:A3:EC:4F:E9:B0:C5:B0:6D
Authority key identifier: 47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
Certificate issuer: /CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Certificate serial: 019A725C6F82C8CEC5E58B9D68A4A1C6C037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 10:00:51 +0000
Manifest this update: Tue 11 Nov 2025 10:00:51 +0000
Manifest next update: Wed 12 Nov 2025 10:00:51 +0000
Files and hashes: 1: R60fV24_cbT2wzkfL6ND1Qi2se4.crl (hash: BstgJwpdHCJ3GxIVDv2Fzr1VMJQYzgeW/FHMQpAUouc=)
2: aO3r11e9FzxFIAvzci6U1ugRCX4.roa (hash: RN1LPTFZ9dixQeq/j0V0Euzw3FqtnyCrfR7culnL03E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:6f:82:c8:ce:c5:e5:8b:9d:68:a4:a1:c6:c0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Validity
Not Before: Nov 11 10:00:51 2025 GMT
Not After : Nov 12 10:00:51 2025 GMT
Subject: CN=3b896cc36fe5c32f7fce0580a3ec4fe9b0c5b06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:91:76:f2:10:c4:57:20:32:4e:82:1c:b1:
19:fb:41:64:9c:b5:85:68:0b:c2:32:e9:8e:44:14:
1e:2e:78:83:23:ff:42:1c:d7:a3:13:8b:13:c0:e0:
a3:c1:e1:5e:8e:b5:93:e1:17:46:e7:37:83:6e:aa:
29:e9:f2:03:d5:87:76:f9:fe:6f:79:0c:80:ce:39:
63:81:85:03:4c:d7:32:28:a5:17:d7:e3:f9:db:b6:
e6:fe:e9:f4:0e:24:d9:f5:3e:b8:e8:90:11:99:3b:
e8:87:8f:3d:c6:9a:b6:f7:44:15:7e:f5:4e:44:d4:
82:1c:16:7e:c1:e2:f4:67:c1:a2:7c:8a:b6:0a:26:
16:aa:ec:d1:42:68:73:40:9e:63:72:97:d2:c6:b1:
33:5c:de:fa:d0:a1:93:ca:b8:5f:6b:b3:51:0e:df:
e4:11:cc:27:3b:f5:49:ae:11:37:44:65:fe:42:07:
4f:dd:fb:10:70:8e:ff:66:be:4a:0d:31:be:f4:51:
7b:18:6b:f0:a1:66:32:af:05:2a:6f:e2:b1:d7:47:
b2:d7:14:da:e9:49:f9:d7:3e:23:9d:65:60:ff:64:
1c:3e:e3:05:fd:58:35:46:83:b2:30:d0:ca:06:e8:
d8:a2:22:0d:86:36:14:9b:07:dc:49:90:66:0d:4c:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:89:6C:C3:6F:E5:C3:2F:7F:CE:05:80:A3:EC:4F:E9:B0:C5:B0:6D
X509v3 Authority Key Identifier:
keyid:47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ec:22:21:45:fd:4c:20:82:ab:e2:92:f2:ed:7e:0a:ee:43:
88:b4:49:c0:47:5d:c7:ff:34:0e:a3:fc:09:a6:a2:45:1c:b4:
53:0d:a6:05:9b:4e:4a:41:0f:e9:e3:cf:b3:26:ca:f2:dc:21:
f3:e2:73:5a:c5:96:af:7b:b0:82:2b:43:61:91:92:dc:ec:66:
f8:86:24:eb:82:77:96:f3:a7:fb:0e:f5:04:f7:08:80:71:3d:
6b:8d:44:6f:e4:90:99:ea:c6:d0:e9:b3:c0:ad:1f:79:a1:b6:
70:21:e7:c3:bf:ea:f0:33:13:0d:8b:07:28:4a:37:71:01:ba:
f4:02:0b:af:e8:24:ee:fa:5b:ee:af:d7:7e:15:ac:3e:fe:26:
fa:e0:5d:85:e7:71:24:0a:7a:d9:cf:82:07:cf:c3:4d:cd:c4:
7c:ed:82:c4:95:b2:57:6f:23:50:61:c4:b9:02:f9:68:ea:ae:
e2:07:11:47:1f:9a:b7:4a:fe:77:8a:49:46:25:bd:e6:1c:22:
9c:4e:bf:2b:a6:9a:55:be:94:62:a0:37:f9:0e:23:d7:d0:92:
f9:93:ed:ff:8d:fa:c2:84:92:2a:44:2f:95:71:ee:5d:ab:9b:
57:90:be:f5:57:21:73:1e:68:68:6d:0d:d6:73:c2:49:ad:4d:
1f:a9:7a:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXG+CyM7F5YudaKShxsA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YWQxZjU3NmUzZjcxYjRmNmMzMzkxZjJmYTM0M2Q1MDhi
NmIxZWUwHhcNMjUxMTExMTAwMDUxWhcNMjUxMTEyMTAwMDUxWjAzMTEwLwYDVQQD
EygzYjg5NmNjMzZmZTVjMzJmN2ZjZTA1ODBhM2VjNGZlOWIwYzViMDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S+RdvIQxFcgMk6CHLEZ+0FknLWF
aAvCMumORBQeLniDI/9CHNejE4sTwOCjweFejrWT4RdG5zeDbqop6fID1Yd2+f5v
eQyAzjljgYUDTNcyKKUX1+P527bm/un0DiTZ9T646JARmTvoh489xpq290QVfvVO
RNSCHBZ+weL0Z8GifIq2CiYWquzRQmhzQJ5jcpfSxrEzXN760KGTyrhfa7NRDt/k
EcwnO/VJrhE3RGX+QgdP3fsQcI7/Zr5KDTG+9FF7GGvwoWYyrwUqb+Kx10ey1xTa
6Un51z4jnWVg/2QcPuMF/Vg1RoOyMNDKBujYoiINhjYUmwfcSZBmDUxF1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuJbMNv5cMvf84FgKPsT+mwxbBtMB8GA1UdIwQY
MBaAFEetH1duP3G09sM5Hy+jQ9UItrHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjYwZlYyNF9jYlQyd3prZkw2TkQxUWkyc2U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8yZTAyODYtNTYzOS00YTFjLThiZjIt
M2NjYjMwNzQwMjBmLzEvUjYwZlYyNF9jYlQyd3prZkw2TkQxUWkyc2U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8yZTAyODYtNTYzOS00YTFjLThiZjItM2NjYjMwNzQwMjBm
LzEvUjYwZlYyNF9jYlQyd3prZkw2TkQxUWkyc2U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuwiIUX9
TCCCq+KS8u1+Cu5DiLRJwEddx/80DqP8CaaiRRy0Uw2mBZtOSkEP6ePPsybK8twh
8+JzWsWWr3uwgitDYZGS3Oxm+IYk64J3lvOn+w71BPcIgHE9a41Eb+SQmerG0Omz
wK0feaG2cCHnw7/q8DMTDYsHKEo3cQG69AILr+gk7vpb7q/XfhWsPv4m+uBdhedx
JAp62c+CB8/DTc3EfO2CxJWyV28jUGHEuQL5aOqu4gcRRx+at0r+d4pJRiW95hwi
nE6/K6aaVb6UYqA3+Q4j19CS+ZPt/436woSSKkQvlXHuXaubV5C+9Vchcx5oaG0N
1nPCSa1NH6l6jA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:51 2025 by rpki-client