Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
File: t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft (raw, json)
Hash identifier: 69YYhQNiI51PEBIZdIKWMjhdd4eLQJnBAiA0VqRTGxg=
Subject key identifier: 1E:05:D1:A4:B7:F1:CB:C4:66:68:5C:24:C2:51:6D:16:A0:69:6A:E0
Authority key identifier: B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
Certificate issuer: /CN=b780b3b9e096221629fe47e102ac522da03979c4
Certificate serial: 019A71B80721D99CFBE7323E7FC1ABB0077E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:17 +0000
Manifest this update: Tue 11 Nov 2025 07:01:17 +0000
Manifest next update: Wed 12 Nov 2025 07:01:17 +0000
Files and hashes: 1: BHkKvb2qZLeD_4QIPrmVYJe4E6w.roa (hash: 4HUs5FjtfJoQCq5RfZkLp2netiRG+jQlol4wXGJfij4=)
2: t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl (hash: Wm7pLbXxL9zrFFXSPBvBIRmrhOYYHo/raHd0He9Wllg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:07:21:d9:9c:fb:e7:32:3e:7f:c1:ab:b0:07:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b780b3b9e096221629fe47e102ac522da03979c4
Validity
Not Before: Nov 11 07:01:17 2025 GMT
Not After : Nov 12 07:01:17 2025 GMT
Subject: CN=1e05d1a4b7f1cbc466685c24c2516d16a0696ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:0a:2b:61:ce:18:32:89:9a:84:50:7b:25:
1f:70:d8:a2:07:91:56:b2:cc:e7:00:df:4f:4b:6a:
18:55:ff:17:f8:77:92:e8:7f:a4:82:a6:d7:f9:46:
9a:66:ab:b0:b6:c9:18:3c:3d:17:97:fe:7a:dc:a0:
4b:ac:30:59:cb:69:62:32:70:5e:b6:d0:0b:65:95:
e4:e3:89:4b:3f:15:45:23:45:fe:7a:22:32:79:e9:
5e:8e:79:35:29:bb:c3:dd:67:60:06:98:3a:c7:42:
86:a8:d7:bb:08:90:18:da:7d:94:e2:fd:75:63:25:
ec:7f:ba:10:6f:35:93:52:57:5b:d7:ea:84:95:78:
68:68:60:77:18:84:84:d2:d7:9b:ed:30:4c:93:ad:
ce:a8:8a:e7:15:30:60:4b:ca:e1:73:f1:5b:e9:66:
b6:a1:b8:d9:85:de:c0:4b:77:c2:43:94:fc:32:74:
b1:d9:1a:e1:c6:37:41:ee:0e:dc:d5:4d:4f:a4:de:
9d:68:a1:5d:db:b7:ed:e6:58:9c:4c:9f:dc:b0:a7:
e6:cd:e2:6f:ee:1a:cc:0e:a3:50:b8:e7:18:88:38:
ef:86:a6:69:dc:ff:2a:f0:67:3b:e7:a8:0f:a1:9f:
1f:ac:4b:10:ee:7d:3c:03:e5:21:04:03:2c:5a:20:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:05:D1:A4:B7:F1:CB:C4:66:68:5C:24:C2:51:6D:16:A0:69:6A:E0
X509v3 Authority Key Identifier:
keyid:B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c8:e6:83:71:80:de:60:a1:49:88:a6:30:17:67:58:73:12:
b0:2c:8c:8f:d9:41:e0:ae:ae:0d:22:dd:3a:04:55:73:ea:49:
c4:cd:c1:ec:91:e8:d2:a3:1b:f4:74:72:34:d7:5c:ab:c1:dc:
e9:04:32:ea:e5:f1:d2:9f:b5:f7:3e:87:b0:49:1a:fa:e8:23:
76:05:86:4f:1d:d9:37:54:0b:73:8a:f6:32:d7:e4:a3:22:69:
8f:3a:7e:d6:4e:a9:33:29:4e:ed:6e:a9:9c:19:39:84:a8:f4:
14:0d:50:bd:64:57:b9:d9:83:f4:72:2a:b8:77:73:e7:e2:4e:
5f:28:30:a4:c1:06:5c:38:e8:ec:44:4e:75:7b:c1:93:b8:21:
23:85:4a:c7:3a:68:5f:3a:ae:6e:bd:60:e7:cb:42:e7:19:2c:
12:1d:3a:d4:76:e5:f1:f7:1a:56:cc:9a:66:c7:86:92:1d:0a:
e5:d0:d0:12:91:b3:68:e7:a1:38:c9:ab:18:9c:56:c8:73:53:
97:47:56:4f:4c:4d:24:16:55:07:c7:59:ab:2c:69:c1:b0:3f:
ac:1d:56:79:63:9d:34:9f:e1:f2:57:31:33:34:90:13:44:0b:
ec:9f:1e:68:ea:f1:02:82:81:7b:d2:8d:14:4d:56:b9:df:73:
ba:e5:51:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuAch2Zz75zI+f8GrsAd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODBiM2I5ZTA5NjIyMTYyOWZlNDdlMTAyYWM1MjJkYTAz
OTc5YzQwHhcNMjUxMTExMDcwMTE3WhcNMjUxMTEyMDcwMTE3WjAzMTEwLwYDVQQD
EygxZTA1ZDFhNGI3ZjFjYmM0NjY2ODVjMjRjMjUxNmQxNmEwNjk2YWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySoKK2HOGDKJmoRQeyUfcNiiB5FW
ssznAN9PS2oYVf8X+HeS6H+kgqbX+UaaZquwtskYPD0Xl/563KBLrDBZy2liMnBe
ttALZZXk44lLPxVFI0X+eiIyeelejnk1KbvD3WdgBpg6x0KGqNe7CJAY2n2U4v11
YyXsf7oQbzWTUldb1+qElXhoaGB3GISE0teb7TBMk63OqIrnFTBgS8rhc/Fb6Wa2
objZhd7AS3fCQ5T8MnSx2RrhxjdB7g7c1U1PpN6daKFd27ft5licTJ/csKfmzeJv
7hrMDqNQuOcYiDjvhqZp3P8q8Gc756gPoZ8frEsQ7n08A+UhBAMsWiCXewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4F0aS38cvEZmhcJMJRbRagaWrgMB8GA1UdIwQY
MBaAFLeAs7ngliIWKf5H4QKsUi2gOXnEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRDenVlQ1dJaFlwX2tmaEFxeFNMYUE1ZWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xZjMxMTctZjJhMS00MzIyLWI2M2Qt
ZjdlZGIyNjg4NjUyLzEvdDRDenVlQ1dJaFlwX2tmaEFxeFNMYUE1ZWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xZjMxMTctZjJhMS00MzIyLWI2M2QtZjdlZGIyNjg4NjUy
LzEvdDRDenVlQ1dJaFlwX2tmaEFxeFNMYUE1ZWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnsjmg3GA
3mChSYimMBdnWHMSsCyMj9lB4K6uDSLdOgRVc+pJxM3B7JHo0qMb9HRyNNdcq8Hc
6QQy6uXx0p+19z6HsEka+ugjdgWGTx3ZN1QLc4r2MtfkoyJpjzp+1k6pMylO7W6p
nBk5hKj0FA1QvWRXudmD9HIquHdz5+JOXygwpMEGXDjo7EROdXvBk7ghI4VKxzpo
Xzqubr1g58tC5xksEh061Hbl8fcaVsyaZseGkh0K5dDQEpGzaOehOMmrGJxWyHNT
l0dWT0xNJBZVB8dZqyxpwbA/rB1WeWOdNJ/h8lcxMzSQE0QL7J8eaOrxAoKBe9KN
FE1Wud9zuuVRIA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:54 2025 by rpki-client