Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
File: edQ3WEq9tIITYw3KpfAMnSw8wXk.mft (raw, json)
Hash identifier: 4xOrqozG3hpkAX3ysqfACqOxV++v6cdMkWgwV1t94xc=
Subject key identifier: 4F:D6:E7:56:72:85:84:BC:AC:ED:B4:AB:E9:0D:6A:E9:6E:50:4A:EF
Authority key identifier: 79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
Certificate issuer: /CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Certificate serial: 019A722625D22478ACCB728E09BD40AACB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
Manifest number: 11CE
Signing time: Tue 11 Nov 2025 09:01:33 +0000
Manifest this update: Tue 11 Nov 2025 09:01:33 +0000
Manifest next update: Wed 12 Nov 2025 09:01:33 +0000
Files and hashes: 1: _6bJkuzxLJMC8zZKQrB-nCnecco.roa (hash: GqXUAXRZkYfH9YlSLUwHS7QBNR7+ywl2PUwYOYs72Io=)
2: edQ3WEq9tIITYw3KpfAMnSw8wXk.crl (hash: boc3/yd2MG9QMM4a9LZ9i50HnqvDBLc5otTBfQIUFcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:25:d2:24:78:ac:cb:72:8e:09:bd:40:aa:cb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Validity
Not Before: Nov 11 09:01:33 2025 GMT
Not After : Nov 12 09:01:33 2025 GMT
Subject: CN=4fd6e756728584bcacedb4abe90d6ae96e504aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e9:b1:25:b1:8e:7c:04:d8:e6:ce:58:77:e7:
61:04:a6:f9:df:05:01:e1:34:c6:c9:18:18:bb:8a:
48:07:54:23:1c:29:a2:b2:e0:2a:94:c0:4a:69:dc:
17:b8:d1:8a:5b:da:7f:8a:ae:b8:f6:6f:bc:f7:ed:
ec:69:b9:c8:0e:a4:2e:4f:54:df:5c:b9:e6:a4:cf:
a0:8c:8d:8b:13:a6:8a:82:9c:44:1e:be:4c:c0:fd:
35:27:4b:27:b9:24:e7:2e:8d:b7:a3:79:b9:d7:5f:
04:7b:25:db:79:e7:19:ff:9e:87:5f:46:40:f6:6f:
76:93:68:cc:c6:2a:75:81:65:ae:7c:6d:e9:66:9d:
9c:5d:27:d5:6a:e0:c3:44:44:96:50:72:24:99:9e:
f4:65:fe:f8:15:19:98:df:61:61:62:82:71:d9:ec:
6f:e1:b3:9f:e8:8e:42:6e:15:92:a7:66:5d:9b:f0:
15:c6:34:00:b0:de:ef:ed:7e:6f:75:8f:1c:f8:79:
23:3f:71:71:06:11:aa:eb:d5:eb:02:9e:95:69:a4:
32:2c:ec:f1:57:f2:e0:45:7c:a7:5b:a8:d7:c6:8e:
f8:0d:02:42:42:73:49:98:f7:c4:69:7d:3d:f7:8c:
36:11:f0:27:ce:c3:31:3a:0b:5c:e9:b7:ef:b6:12:
b6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D6:E7:56:72:85:84:BC:AC:ED:B4:AB:E9:0D:6A:E9:6E:50:4A:EF
X509v3 Authority Key Identifier:
keyid:79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d1:8c:b3:8c:fa:9f:c0:f8:90:12:51:48:3c:67:32:f6:63:
d7:17:db:55:9a:92:c4:75:85:a8:a4:e3:e0:a8:e7:e9:5f:74:
db:37:81:27:26:eb:6b:7c:0d:a4:6b:e8:a1:d0:57:55:17:a2:
38:41:e8:4c:79:a4:ad:15:5a:45:95:d8:58:2b:48:00:90:75:
bf:54:69:14:eb:ff:e5:39:72:3a:79:7d:f9:c6:fb:63:6a:2c:
90:c4:0e:c3:7f:23:12:b2:e5:d1:94:e0:75:19:d1:01:3d:a9:
ea:6e:d0:4e:80:ee:2c:e1:58:62:0e:06:d5:26:c7:13:6f:c0:
ae:5f:eb:4a:a5:62:04:a5:df:6f:64:d7:ba:56:97:11:c8:ef:
98:6f:28:37:f8:b8:f7:68:9c:7b:82:ee:99:82:6f:6f:80:81:
b4:6e:7b:17:a4:9b:70:0e:62:c4:a3:7d:fc:41:d1:50:e6:7b:
2e:21:d2:79:e3:83:83:44:fa:62:36:ca:0a:d4:b0:a9:00:6d:
b6:6d:0f:2e:69:f5:04:29:79:b5:db:34:7c:af:63:c5:89:d5:
b7:e1:34:f7:3c:ec:32:d3:e4:c1:e6:77:a7:63:82:93:91:89:
a4:c9:5a:6c:91:36:fa:a6:b0:5c:0b:c1:3c:cd:c6:73:5d:b1:
2f:45:64:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJiXSJHisy3KOCb1Aqst+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDQzNzU4NGFiZGI0ODIxMzYzMGRjYWE1ZjAwYzlkMmMz
Y2MxNzkwHhcNMjUxMTExMDkwMTMzWhcNMjUxMTEyMDkwMTMzWjAzMTEwLwYDVQQD
Eyg0ZmQ2ZTc1NjcyODU4NGJjYWNlZGI0YWJlOTBkNmFlOTZlNTA0YWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+mxJbGOfATY5s5Yd+dhBKb53wUB
4TTGyRgYu4pIB1QjHCmisuAqlMBKadwXuNGKW9p/iq649m+89+3sabnIDqQuT1Tf
XLnmpM+gjI2LE6aKgpxEHr5MwP01J0snuSTnLo23o3m5118EeyXbeecZ/56HX0ZA
9m92k2jMxip1gWWufG3pZp2cXSfVauDDRESWUHIkmZ70Zf74FRmY32FhYoJx2exv
4bOf6I5CbhWSp2Zdm/AVxjQAsN7v7X5vdY8c+HkjP3FxBhGq69XrAp6VaaQyLOzx
V/LgRXynW6jXxo74DQJCQnNJmPfEaX0994w2EfAnzsMxOgtc6bfvthK2+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/W51ZyhYS8rO20q+kNauluUErvMB8GA1UdIwQY
MBaAFHnUN1hKvbSCE2MNyqXwDJ0sPMF5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWRRM1dFcTl0SUlUWXczS3BmQU1uU3c4d1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNDk2YTQtY2M5Zi00NDE5LWFkODEt
YWFhMjM4MDk4MmJjLzEvZWRRM1dFcTl0SUlUWXczS3BmQU1uU3c4d1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zNDk2YTQtY2M5Zi00NDE5LWFkODEtYWFhMjM4MDk4MmJj
LzEvZWRRM1dFcTl0SUlUWXczS3BmQU1uU3c4d1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9GMs4z6
n8D4kBJRSDxnMvZj1xfbVZqSxHWFqKTj4Kjn6V902zeBJybra3wNpGvoodBXVRei
OEHoTHmkrRVaRZXYWCtIAJB1v1RpFOv/5TlyOnl9+cb7Y2oskMQOw38jErLl0ZTg
dRnRAT2p6m7QToDuLOFYYg4G1SbHE2/Arl/rSqViBKXfb2TXulaXEcjvmG8oN/i4
92ice4LumYJvb4CBtG57F6SbcA5ixKN9/EHRUOZ7LiHSeeODg0T6YjbKCtSwqQBt
tm0PLmn1BCl5tds0fK9jxYnVt+E09zzsMtPkweZ3p2OCk5GJpMlabJE2+qawXAvB
PM3Gc12xL0Vkcg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:12 2025 by rpki-client