Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
File: RFJjMnSx2IapJ1f2UhnC51RuzfU.mft (raw, json)
Hash identifier: cTwbRp21dOLEMXPySGyA1aGk4qzwWBTb4qJvEQlSKAs=
Subject key identifier: DD:DB:D8:06:20:3E:17:5B:87:9C:10:DF:06:5F:2F:F7:75:0B:5D:CE
Authority key identifier: 44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
Certificate issuer: /CN=4452633274b1d886a92757f65219c2e7546ecdf5
Certificate serial: 019A70DC35AB09CE3041F19C9662BF92F02E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 03:01:11 +0000
Manifest this update: Tue 11 Nov 2025 03:01:11 +0000
Manifest next update: Wed 12 Nov 2025 03:01:11 +0000
Files and hashes: 1: 1-2BRV4sfO38uFELp8sV79L0B1lw.roa (hash: APyNfY72IzRC6P6hQGMuA+VkTRyCwcNbDRlCp4K0Vjw=)
2: RFJjMnSx2IapJ1f2UhnC51RuzfU.crl (hash: BiVdi6wMurl1+egDclWha7FUvVhJUGTyuwr1JLsIf8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:35:ab:09:ce:30:41:f1:9c:96:62:bf:92:f0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4452633274b1d886a92757f65219c2e7546ecdf5
Validity
Not Before: Nov 11 03:01:11 2025 GMT
Not After : Nov 12 03:01:11 2025 GMT
Subject: CN=dddbd806203e175b879c10df065f2ff7750b5dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:a7:52:ce:54:51:a7:a2:04:68:02:ca:66:
22:16:62:c6:2a:34:33:42:b3:b5:57:68:77:28:2f:
70:75:0f:62:3d:2a:ad:63:ca:44:bf:20:c7:6a:61:
5c:c7:bd:d0:3b:e7:9f:af:31:c7:a8:76:9e:19:3d:
bf:33:08:1e:30:5a:4a:bd:70:1f:89:c1:94:f5:b9:
ce:f6:ac:7d:79:4a:d9:b8:43:fe:3e:34:61:9b:7a:
87:2d:54:39:80:c4:65:0e:8e:0d:7a:ad:2c:cb:6e:
17:cb:db:d5:e1:fe:27:26:6f:9a:ae:43:41:b4:a8:
74:76:fa:f5:a3:b9:15:11:25:9d:7f:f7:d9:9b:a4:
8a:3c:c6:99:cc:cf:20:a0:37:69:bd:a6:6d:24:4a:
ae:46:81:b9:48:ca:4b:7e:2a:7a:db:14:f3:bd:3c:
31:7a:0b:7e:1f:6f:9e:6b:5c:6c:5a:0f:49:d2:9a:
23:37:43:cd:b0:d2:41:09:d2:03:b5:40:0f:8d:a4:
99:a3:b7:58:12:00:ac:94:20:b5:28:1b:d8:18:a8:
dc:d3:43:61:00:83:c5:f0:e0:ea:9c:a2:cf:28:d1:
61:da:99:49:c9:fd:59:28:54:9a:36:a5:7d:67:90:
fd:28:b1:35:71:d6:f4:f9:25:b8:1b:c2:15:10:5a:
49:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DB:D8:06:20:3E:17:5B:87:9C:10:DF:06:5F:2F:F7:75:0B:5D:CE
X509v3 Authority Key Identifier:
keyid:44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:18:e5:3d:e0:f0:f4:fa:10:8d:ce:67:55:23:9c:af:76:31:
cb:2c:ed:d4:a2:b8:7f:07:73:f3:d7:f0:9d:63:eb:5f:59:82:
e6:77:5c:94:ff:bb:41:18:b2:e7:5d:33:88:e6:c1:78:12:72:
32:cf:2f:44:3a:4a:e0:73:03:31:8a:e0:a4:9f:a3:9c:7f:bb:
31:91:e0:97:7f:2d:15:29:d9:06:ea:b4:c9:0d:8c:ed:99:48:
54:b5:54:b6:b7:3a:4d:e4:b8:71:1f:1b:d8:9d:d4:7e:ba:51:
a0:da:03:21:bb:38:0f:f8:13:f4:af:53:df:22:12:70:32:21:
bb:0f:f6:93:06:9f:76:32:a0:18:7c:c9:8c:c5:c0:1a:79:28:
e5:87:26:75:04:8a:91:b6:b5:31:30:34:68:45:80:65:ee:f1:
8c:df:ca:d2:92:96:00:92:f6:a9:58:c8:e5:99:2a:c9:6b:7c:
a8:be:48:5b:68:ac:ba:f4:91:e8:13:04:2f:2d:7c:85:d2:f7:
e4:41:db:55:53:f8:d9:78:c1:10:e4:ea:89:56:85:a5:95:8c:
61:ea:56:68:75:37:1b:d5:7b:b1:d2:d0:8d:20:49:07:74:09:
f0:cd:1e:8a:fb:ae:d0:ae:9e:30:7f:6b:55:ef:cc:fe:3d:dd:
20:f2:77:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3DWrCc4wQfGclmK/kvAuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTI2MzMyNzRiMWQ4ODZhOTI3NTdmNjUyMTljMmU3NTQ2
ZWNkZjUwHhcNMjUxMTExMDMwMTExWhcNMjUxMTEyMDMwMTExWjAzMTEwLwYDVQQD
EyhkZGRiZDgwNjIwM2UxNzViODc5YzEwZGYwNjVmMmZmNzc1MGI1ZGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1qnUs5UUaeiBGgCymYiFmLGKjQz
QrO1V2h3KC9wdQ9iPSqtY8pEvyDHamFcx73QO+efrzHHqHaeGT2/MwgeMFpKvXAf
icGU9bnO9qx9eUrZuEP+PjRhm3qHLVQ5gMRlDo4Neq0sy24Xy9vV4f4nJm+arkNB
tKh0dvr1o7kVESWdf/fZm6SKPMaZzM8goDdpvaZtJEquRoG5SMpLfip62xTzvTwx
egt+H2+ea1xsWg9J0pojN0PNsNJBCdIDtUAPjaSZo7dYEgCslCC1KBvYGKjc00Nh
AIPF8ODqnKLPKNFh2plJyf1ZKFSaNqV9Z5D9KLE1cdb0+SW4G8IVEFpJ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3b2AYgPhdbh5wQ3wZfL/d1C13OMB8GA1UdIwQY
MBaAFERSYzJ0sdiGqSdX9lIZwudUbs31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZKak1uU3gySWFwSjFmMlVobkM1MVJ1emZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84ZTQ1MTgtMGRkMC00Y2JiLWJhNzgt
YmI4NmQ0YmEwMmRlLzEvUkZKak1uU3gySWFwSjFmMlVobkM1MVJ1emZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84ZTQ1MTgtMGRkMC00Y2JiLWJhNzgtYmI4NmQ0YmEwMmRl
LzEvUkZKak1uU3gySWFwSjFmMlVobkM1MVJ1emZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxjlPeDw
9PoQjc5nVSOcr3Yxyyzt1KK4fwdz89fwnWPrX1mC5ndclP+7QRiy510ziObBeBJy
Ms8vRDpK4HMDMYrgpJ+jnH+7MZHgl38tFSnZBuq0yQ2M7ZlIVLVUtrc6TeS4cR8b
2J3UfrpRoNoDIbs4D/gT9K9T3yIScDIhuw/2kwafdjKgGHzJjMXAGnko5YcmdQSK
kba1MTA0aEWAZe7xjN/K0pKWAJL2qVjI5ZkqyWt8qL5IW2isuvSR6BMELy18hdL3
5EHbVVP42XjBEOTqiVaFpZWMYepWaHU3G9V7sdLQjSBJB3QJ8M0eivuu0K6eMH9r
Ve/M/j3dIPJ3zg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:09 2025 by rpki-client