Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
File: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json)
Hash identifier: aEZB4lRYyYa4GsxeYSVFR1gYK67Kfep6V3kveTJSFvo=
Subject key identifier: 43:F8:86:E6:83:2D:BC:2B:19:2A:D2:19:88:11:11:15:EA:9D:F7:2B
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Certificate issuer: /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial: 019A70DC3E2904002BF02843F50F9FB868E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 03:01:13 +0000
Manifest this update: Tue 11 Nov 2025 03:01:13 +0000
Manifest next update: Wed 12 Nov 2025 03:01:13 +0000
Files and hashes: 1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: ofsbxu4tC2o1/6JGAcGCMVfX3W5jUiplwzIe92KrC6w=)
2: QkxLvU8YDu4oULS0kxiCVhyfd8E.roa (hash: K9WP596tCXV0nIPIOmpyOTvsvplxAvnAucKosmkCUac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:3e:29:04:00:2b:f0:28:43:f5:0f:9f:b8:68:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Validity
Not Before: Nov 11 03:01:13 2025 GMT
Not After : Nov 12 03:01:13 2025 GMT
Subject: CN=43f886e6832dbc2b192ad21988111115ea9df72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:51:84:a7:66:0b:af:79:03:40:77:ef:44:
8e:a9:a5:74:7d:5a:53:39:08:19:1c:19:02:69:6b:
25:94:f2:47:51:00:9c:42:bc:19:5a:52:92:98:cf:
c6:f6:55:d7:ca:47:fa:fc:31:13:1e:41:7d:88:ca:
df:62:a3:57:09:27:b1:cd:a6:47:54:54:9a:53:7b:
f7:fe:68:80:fd:a7:f7:bf:97:5a:6b:44:06:e1:91:
39:29:05:82:10:f2:ef:f9:75:e2:4c:6a:50:50:f1:
ca:af:21:1f:64:25:c2:1f:91:1f:76:3e:81:19:11:
06:b0:3e:eb:49:a6:95:9a:b7:29:d0:0d:72:b4:8e:
c6:24:11:a7:41:82:58:5d:78:01:5c:f1:41:7f:a2:
6f:58:47:12:3a:df:c6:18:d9:2e:0b:3d:44:d2:cc:
74:c8:fd:88:b8:90:99:a3:02:8c:e8:b4:ec:5c:be:
41:c3:51:21:4c:d4:ff:9d:eb:e9:7a:b2:a2:2e:c4:
11:7e:45:2c:01:5d:80:28:58:29:2f:de:6f:a3:80:
d5:db:7f:e0:a4:72:fc:08:07:11:d6:be:df:3c:17:
ed:49:a1:c9:0b:2e:9b:4d:ae:53:90:6e:0a:d5:29:
df:af:cd:f3:15:80:19:d6:6e:a0:e2:83:ae:fe:d6:
0d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F8:86:E6:83:2D:BC:2B:19:2A:D2:19:88:11:11:15:EA:9D:F7:2B
X509v3 Authority Key Identifier:
keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:da:ef:b2:2b:a4:ad:37:c7:f5:85:97:4d:be:2a:ce:45:77:
e6:2b:f3:d0:6c:81:b5:2b:21:ed:0d:54:06:2c:b7:93:0c:1a:
e6:17:9e:b3:f4:a7:a3:ff:04:d2:70:f0:c0:f5:a1:ce:e2:fe:
62:97:96:59:c6:77:f4:ed:34:ac:d9:6f:9c:e1:2b:38:72:1e:
82:62:d7:4e:c7:7b:bf:f6:03:2c:98:78:b1:72:b4:f1:02:91:
de:6d:50:07:31:2c:3c:ed:74:ab:f6:ed:c2:67:0e:77:80:c3:
f2:4c:1a:3e:1a:b2:d8:d2:4a:b4:bb:36:ac:a1:9d:87:07:ba:
c9:0f:d1:04:b5:3e:53:ec:7c:70:a2:93:90:31:49:bf:bd:20:
9a:ba:28:28:a4:19:f6:a8:7a:6a:4e:ad:f7:36:2d:2e:96:d0:
ac:77:43:20:66:bf:9c:45:47:9d:3f:15:98:b4:81:10:78:e3:
e9:ac:5d:95:f4:7f:c2:2d:c2:ae:91:25:23:54:e3:b9:ed:cc:
25:f9:38:62:cd:5e:ae:c6:2b:0d:c7:6f:dc:c2:5a:49:53:5a:
e9:1a:75:e6:5d:c3:a1:23:41:3a:60:ce:e7:47:fc:8a:23:40:
06:99:9f:eb:b5:46:05:80:0f:df:c6:c2:0a:8b:4b:e1:0e:0f:
06:ad:c6:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3D4pBAAr8ChD9Q+fuGjiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWE1MzkwYjhkNjgwMjE4MDNlN2JlOWZjZjVlOGUxMzkz
YWMwNDMwHhcNMjUxMTExMDMwMTEzWhcNMjUxMTEyMDMwMTEzWjAzMTEwLwYDVQQD
Eyg0M2Y4ODZlNjgzMmRiYzJiMTkyYWQyMTk4ODExMTExNWVhOWRmNzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYxRhKdmC695A0B370SOqaV0fVpT
OQgZHBkCaWsllPJHUQCcQrwZWlKSmM/G9lXXykf6/DETHkF9iMrfYqNXCSexzaZH
VFSaU3v3/miA/af3v5daa0QG4ZE5KQWCEPLv+XXiTGpQUPHKryEfZCXCH5Efdj6B
GREGsD7rSaaVmrcp0A1ytI7GJBGnQYJYXXgBXPFBf6JvWEcSOt/GGNkuCz1E0sx0
yP2IuJCZowKM6LTsXL5Bw1EhTNT/nevperKiLsQRfkUsAV2AKFgpL95vo4DV23/g
pHL8CAcR1r7fPBftSaHJCy6bTa5TkG4K1Snfr83zFYAZ1m6g4oOu/tYNXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEP4huaDLbwrGSrSGYgRERXqnfcrMB8GA1UdIwQY
MBaAFAtaU5C41oAhgD576fz16OE5OsBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEt
ZTdjZDE4ODU1ZTJjLzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEtZTdjZDE4ODU1ZTJj
LzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqtrvsiuk
rTfH9YWXTb4qzkV35ivz0GyBtSsh7Q1UBiy3kwwa5hees/Sno/8E0nDwwPWhzuL+
YpeWWcZ39O00rNlvnOErOHIegmLXTsd7v/YDLJh4sXK08QKR3m1QBzEsPO10q/bt
wmcOd4DD8kwaPhqy2NJKtLs2rKGdhwe6yQ/RBLU+U+x8cKKTkDFJv70gmrooKKQZ
9qh6ak6t9zYtLpbQrHdDIGa/nEVHnT8VmLSBEHjj6axdlfR/wi3CrpElI1Tjue3M
Jfk4Ys1ersYrDcdv3MJaSVNa6Rp15l3DoSNBOmDO50f8iiNABpmf67VGBYAP38bC
CotL4Q4PBq3GyA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:16 2025 by rpki-client