Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
File: C155jbbo9XxfSkRRUJAd7oqW1eU.mft (raw, json)
Hash identifier: 4VcJXXmzV9vGaSrChiD3T3OJolyWmeCm2eNFlNPaZAI=
Subject key identifier: 67:DF:80:04:28:87:86:0C:F0:48:B0:7E:02:35:99:35:A5:79:2B:47
Authority key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
Certificate issuer: /CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Certificate serial: 019A72259C11979B8822A7777711686F9BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
Manifest number: 0D0D
Signing time: Tue 11 Nov 2025 09:00:58 +0000
Manifest this update: Tue 11 Nov 2025 09:00:58 +0000
Manifest next update: Wed 12 Nov 2025 09:00:58 +0000
Files and hashes: 1: C155jbbo9XxfSkRRUJAd7oqW1eU.crl (hash: z8zioHeQehyLl1SW1jYNqTkvxjhCC53dvmgWlq02RXM=)
2: c7WoeWfnIdPF1gkZ7r90pN58Y2c.roa (hash: wpEquj9Ig8LsCQE7Y+MbSVtYeoDlqqJ8cepm+207hA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9c:11:97:9b:88:22:a7:77:77:11:68:6f:9b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Validity
Not Before: Nov 11 09:00:58 2025 GMT
Not After : Nov 12 09:00:58 2025 GMT
Subject: CN=67df80042887860cf048b07e02359935a5792b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:51:97:f5:db:1c:1b:8a:96:d0:8b:97:cd:
3d:c8:e0:78:65:ff:65:d4:76:3b:99:93:cf:3d:89:
14:eb:9c:9f:3e:c1:17:74:27:2a:7f:b4:e2:13:2c:
a7:7b:be:5f:99:e8:61:01:4b:b4:fd:6e:22:37:f9:
d1:78:32:cf:fe:30:c4:5f:5b:db:cb:2a:ed:27:9e:
3a:9e:3f:05:ae:fa:2f:0f:01:f4:fc:65:24:40:a9:
0c:e4:c6:31:48:6e:a7:02:ec:3b:8e:61:13:9f:87:
d9:73:f8:13:26:70:aa:76:ab:4e:55:5c:69:dc:f7:
80:ef:03:65:33:cf:50:f2:94:5d:6d:37:d5:b9:d4:
90:f2:ca:27:df:bb:cd:da:99:69:4a:9f:e8:71:05:
aa:9a:b7:58:54:87:24:24:55:63:de:ac:34:a3:99:
d2:d4:bc:e0:8b:ef:43:3e:e9:fa:3b:a2:bd:21:d8:
9c:b4:4b:2f:03:5a:04:7c:7d:c5:e1:c2:9b:72:e7:
24:e2:c6:ea:1d:2f:6f:59:62:53:72:a3:d4:7b:a4:
41:df:39:e1:1b:7d:e2:ad:24:d1:9d:30:d4:47:ae:
50:1a:4f:6a:2c:04:03:44:7b:68:2e:6c:9d:9c:b4:
3a:9c:0d:a1:61:ea:94:61:c0:06:32:08:52:6c:74:
43:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DF:80:04:28:87:86:0C:F0:48:B0:7E:02:35:99:35:A5:79:2B:47
X509v3 Authority Key Identifier:
keyid:0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:32:7f:b8:8a:94:f6:da:dc:b8:6d:d0:c6:e7:45:2f:0f:14:
f3:10:27:0d:3e:ca:5e:3f:d7:e5:6c:e7:38:66:51:9c:d0:7c:
9f:cc:b3:71:78:ab:47:8b:fd:43:08:9b:b3:fd:f8:a8:71:9e:
00:7c:4f:07:b6:0e:57:0c:ce:9b:0e:f1:dd:9e:f5:37:09:1b:
68:8a:91:33:03:79:ae:19:16:1b:3f:86:82:42:e9:89:66:49:
48:d7:da:dd:a9:f1:08:20:d7:b7:6c:c4:25:0d:a5:0f:97:79:
56:70:dc:5e:c1:cd:96:a4:eb:e1:ab:2c:1a:7b:e8:ee:94:6f:
da:86:5d:fe:43:01:84:69:02:3e:0b:67:a0:38:81:ab:ee:b3:
e7:a0:0e:70:31:fb:c2:76:32:94:be:8c:ca:cc:1c:9a:fb:bc:
63:95:67:86:f1:5e:d5:57:c6:92:fb:9c:31:ad:fc:b3:87:c0:
9e:c9:a3:82:f4:2d:e8:d6:31:4a:db:71:02:fc:79:99:43:3c:
69:3b:66:05:1d:ae:75:45:22:47:5b:64:7d:f1:2c:da:d1:43:
ef:0b:ae:09:d2:68:ba:5f:c2:06:b3:33:3b:39:e9:dd:f5:2e:
d3:35:f9:77:9f:a8:b1:d4:1f:6f:86:22:aa:1c:1d:cb:46:3c:
87:7e:75:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJZwRl5uIIqd3dxFob5uqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWU3OThkYjZlOGY1N2M1ZjRhNDQ1MTUwOTAxZGVlOGE5
NmQ1ZTUwHhcNMjUxMTExMDkwMDU4WhcNMjUxMTEyMDkwMDU4WjAzMTEwLwYDVQQD
Eyg2N2RmODAwNDI4ODc4NjBjZjA0OGIwN2UwMjM1OTkzNWE1NzkyYjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvRRl/XbHBuKltCLl809yOB4Zf9l
1HY7mZPPPYkU65yfPsEXdCcqf7TiEyyne75fmehhAUu0/W4iN/nReDLP/jDEX1vb
yyrtJ546nj8FrvovDwH0/GUkQKkM5MYxSG6nAuw7jmETn4fZc/gTJnCqdqtOVVxp
3PeA7wNlM89Q8pRdbTfVudSQ8son37vN2plpSp/ocQWqmrdYVIckJFVj3qw0o5nS
1Lzgi+9DPun6O6K9IdictEsvA1oEfH3F4cKbcuck4sbqHS9vWWJTcqPUe6RB3znh
G33irSTRnTDUR65QGk9qLAQDRHtoLmydnLQ6nA2hYeqUYcAGMghSbHRDswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGffgAQoh4YM8EiwfgI1mTWleStHMB8GA1UdIwQY
MBaAFAteeY226PV8X0pEUVCQHe6KltXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzE1NWpiYm85WHhmU2tSUlVKQWQ3b3FXMWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kNjc5ZjItNDE0ZS00NTM4LTljNjAt
Mjk1NjExYWE3ZTkyLzEvQzE1NWpiYm85WHhmU2tSUlVKQWQ3b3FXMWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kNjc5ZjItNDE0ZS00NTM4LTljNjAtMjk1NjExYWE3ZTky
LzEvQzE1NWpiYm85WHhmU2tSUlVKQWQ3b3FXMWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTJ/uIqU
9trcuG3QxudFLw8U8xAnDT7KXj/X5WznOGZRnNB8n8yzcXirR4v9Qwibs/34qHGe
AHxPB7YOVwzOmw7x3Z71NwkbaIqRMwN5rhkWGz+GgkLpiWZJSNfa3anxCCDXt2zE
JQ2lD5d5VnDcXsHNlqTr4assGnvo7pRv2oZd/kMBhGkCPgtnoDiBq+6z56AOcDH7
wnYylL6Myswcmvu8Y5VnhvFe1VfGkvucMa38s4fAnsmjgvQt6NYxSttxAvx5mUM8
aTtmBR2udUUiR1tkffEs2tFD7wuuCdJoul/CBrMzOznp3fUu0zX5d5+osdQfb4Yi
qhwdy0Y8h351uA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:48 2025 by rpki-client