Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
File: cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json)
Hash identifier: k75gZzBjkGsH6DTDPhO77oLIzYGRu2hU5K0mrXR/wFI=
Subject key identifier: DC:A5:2E:8F:61:60:E2:55:96:BF:F7:E7:76:88:15:27:12:93:AB:59
Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Certificate serial: 019A71EE8CA964A7DDDF523375F4B3A205F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
Manifest number: 0173
Signing time: Tue 11 Nov 2025 08:00:50 +0000
Manifest this update: Tue 11 Nov 2025 08:00:50 +0000
Manifest next update: Wed 12 Nov 2025 08:00:50 +0000
Files and hashes: 1: Oplxdwrz2tj49hUWFKVUBYlZ3BU.roa (hash: GxmLkOEt5gK3qfSa1llVLKux6EH+FwaJgU6VGKajc/A=)
2: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: d6xf7yz5z7QuVqC2/4r3J3j5qSdYitzn9UvwGEomYJE=)
3: ghNDZNJhpYP_Htc1Wek-L5R4BeI.roa (hash: R8J6wlPRCV7dUDvscKB1CZV2169wkfxGRLHSAdA+H2w=)
4: l3EQEBZnleFof5yb88UhTSSdRTM.roa (hash: UQRjHQuRnFXbfdwyx6MJct5Sj+7na+HTqU/QptK8INI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8c:a9:64:a7:dd:df:52:33:75:f4:b3:a2:05:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Validity
Not Before: Nov 11 08:00:50 2025 GMT
Not After : Nov 12 08:00:50 2025 GMT
Subject: CN=dca52e8f6160e25596bff7e7768815271293ab59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6b:25:65:1b:ba:5b:35:a7:fd:76:77:92:9d:
87:62:48:fc:0f:29:4c:f2:2d:7f:60:72:10:04:da:
14:d4:ca:38:2e:fb:96:0f:e9:11:4d:0c:92:93:61:
da:2a:d9:56:7b:1b:f1:01:19:23:e0:45:d4:55:c2:
3f:69:c3:b7:ad:7a:69:3f:ee:07:a5:36:5c:08:de:
6e:2f:b8:a8:f6:58:b7:5c:a1:22:53:24:eb:cf:6b:
34:31:80:55:41:c4:bb:ad:d0:29:16:0f:1b:4a:23:
dc:70:b5:29:99:b8:32:7a:3e:0e:3d:70:f2:99:42:
5a:ab:38:69:a3:e1:f8:83:df:90:7d:ec:16:d4:5f:
4f:34:c3:10:1a:a6:e3:20:03:b5:66:1c:02:9f:d3:
74:ec:90:6a:6e:bd:42:db:14:f8:81:62:24:6b:51:
49:92:47:e5:8d:aa:23:81:8b:5b:fe:eb:d4:e0:af:
62:fa:84:7d:ed:a6:87:e7:95:16:ec:11:69:d8:82:
8a:80:a5:24:56:2e:1e:f2:a4:5f:71:89:95:f4:1b:
ed:4c:f3:21:6f:7c:70:02:90:9d:92:3f:01:bf:7f:
a2:f4:30:13:f2:ba:55:2a:40:0b:38:0f:ca:1f:b0:
70:ea:78:f0:dc:a9:86:98:9f:82:f6:c8:b8:6a:f0:
3b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A5:2E:8F:61:60:E2:55:96:BF:F7:E7:76:88:15:27:12:93:AB:59
X509v3 Authority Key Identifier:
keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5f:9c:89:19:5a:25:cc:88:46:3b:73:29:e4:84:1a:e8:1d:
7e:62:0f:4c:fa:4a:ae:b6:be:78:6d:6a:82:b4:a9:bd:08:22:
5d:ab:e8:37:92:a2:d9:86:15:bc:ee:10:c7:75:54:db:26:97:
15:68:50:47:dc:db:59:48:5a:ee:1e:9a:df:38:5d:59:a7:c1:
30:7a:2f:08:2f:82:ee:b5:2c:d5:b8:99:fd:fa:e8:43:a4:dc:
50:7b:ec:1a:e8:f6:fe:c3:9b:c1:07:92:a3:0c:dc:31:a9:90:
84:b2:4c:b7:97:41:60:3d:ea:39:4c:4b:aa:71:48:e8:10:cb:
2d:cb:55:2c:36:e1:02:32:5f:2c:b0:19:19:7d:24:61:ee:c8:
c9:40:65:b7:f4:86:e3:1d:f3:6b:95:9e:f2:66:b9:c3:55:bd:
99:3d:3a:f1:42:98:b7:2e:34:6f:93:d7:50:ec:51:d6:17:63:
a4:6f:68:5f:ae:f4:53:21:ce:58:4c:e1:9a:e6:5a:3a:4a:e2:
1a:f9:b8:e1:fd:6a:42:ee:91:ee:16:cd:0b:35:b0:e1:8e:92:
6f:ec:14:0a:b4:bd:0d:2e:95:a9:85:81:21:d9:b4:9c:ca:32:
e5:d3:95:43:26:d5:22:58:ce:b3:68:9a:60:10:1d:fc:ad:8b:
4d:67:2a:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7oypZKfd31IzdfSzogXwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNjc0NWFkOTIzNTNkYThhODBjYjJlMGQyMjlkNjhjMmVm
NTNkYjIwHhcNMjUxMTExMDgwMDUwWhcNMjUxMTEyMDgwMDUwWjAzMTEwLwYDVQQD
EyhkY2E1MmU4ZjYxNjBlMjU1OTZiZmY3ZTc3Njg4MTUyNzEyOTNhYjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52slZRu6WzWn/XZ3kp2HYkj8DylM
8i1/YHIQBNoU1Mo4LvuWD+kRTQySk2HaKtlWexvxARkj4EXUVcI/acO3rXppP+4H
pTZcCN5uL7io9li3XKEiUyTrz2s0MYBVQcS7rdApFg8bSiPccLUpmbgyej4OPXDy
mUJaqzhpo+H4g9+QfewW1F9PNMMQGqbjIAO1ZhwCn9N07JBqbr1C2xT4gWIka1FJ
kkfljaojgYtb/uvU4K9i+oR97aaH55UW7BFp2IKKgKUkVi4e8qRfcYmV9BvtTPMh
b3xwApCdkj8Bv3+i9DAT8rpVKkALOA/KH7Bw6njw3KmGmJ+C9si4avA7rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNylLo9hYOJVlr/353aIFScSk6tZMB8GA1UdIwQY
MBaAFHBnRa2SNT2oqAyy4NIp1owu9T2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTkt
ZTIxNzYzYzY3MmZhLzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTktZTIxNzYzYzY3MmZh
LzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoV+ciRla
JcyIRjtzKeSEGugdfmIPTPpKrra+eG1qgrSpvQgiXavoN5Ki2YYVvO4Qx3VU2yaX
FWhQR9zbWUha7h6a3zhdWafBMHovCC+C7rUs1biZ/froQ6TcUHvsGuj2/sObwQeS
owzcMamQhLJMt5dBYD3qOUxLqnFI6BDLLctVLDbhAjJfLLAZGX0kYe7IyUBlt/SG
4x3za5We8ma5w1W9mT068UKYty40b5PXUOxR1hdjpG9oX670UyHOWEzhmuZaOkri
Gvm44f1qQu6R7hbNCzWw4Y6Sb+wUCrS9DS6VqYWBIdm0nMoy5dOVQybVIljOs2ia
YBAd/K2LTWcqCw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:25 2025 by rpki-client