Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
File: 0lE5LNfm5ApFwbikR5iA7vlg8zA.mft (raw, json)
Hash identifier: IRwQgD/c74o146BMXhMxTEGbHcl1r7hTXLNHNhwpsEM=
Subject key identifier: F4:30:80:9C:09:7E:DC:87:22:CC:42:D1:D3:E6:9A:AA:CE:2D:7A:FF
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial: 019A725C833532CC012DECFE349CFEA0338F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:00:56 +0000
Manifest this update: Tue 11 Nov 2025 10:00:56 +0000
Manifest next update: Wed 12 Nov 2025 10:00:56 +0000
Files and hashes: 1: 0lE5LNfm5ApFwbikR5iA7vlg8zA.crl (hash: jPU9bxvaxoaNRB4752Fdp+oqv/WLvDUkCf2RYc8T09o=)
2: FJ052FCXxgY8148DvYkO__En3kw.roa (hash: JLmqR8aNA75wEnRdZMPO0CuZGQnOp6G+B6BOZat9Lxk=)
3: ja-2ssrlTJp2pStih2G9Qb0Qy5c.roa (hash: QTsSWZKA6bZq44kgpQ1aopr0h9GiEKlR3CEv28RO574=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:83:35:32:cc:01:2d:ec:fe:34:9c:fe:a0:33:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Validity
Not Before: Nov 11 10:00:56 2025 GMT
Not After : Nov 12 10:00:56 2025 GMT
Subject: CN=f430809c097edc8722cc42d1d3e69aaace2d7aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b0:2c:0d:8d:c0:98:17:08:c6:71:25:d3:55:
8f:f6:ca:c1:18:74:3b:e7:3d:e8:f1:18:db:df:21:
b2:0d:be:ef:41:56:9e:b9:65:61:43:33:9d:e8:71:
4a:75:1b:78:70:9c:67:43:80:13:12:3f:c0:3e:18:
64:e6:a7:ac:a0:15:87:46:bf:2e:9b:d2:b9:61:0c:
f6:dd:6c:f1:0f:6b:64:c5:d2:30:47:f0:88:2f:55:
43:c0:62:5c:23:14:19:5e:bb:d5:ba:ad:f6:94:9c:
62:98:98:19:60:bc:b6:21:2d:00:ee:f9:38:78:fc:
44:f8:11:aa:3c:fd:85:d9:0b:90:58:11:c5:f2:96:
07:d9:0b:71:c9:ca:50:a7:02:81:53:d7:38:78:55:
01:23:56:0d:44:1e:77:36:68:0d:3c:0a:8c:7b:51:
46:fe:da:8d:4f:78:49:3c:88:51:89:71:7e:73:33:
21:59:0c:02:79:8f:8f:0f:3d:b2:2c:7f:01:ad:37:
f9:e6:6b:a3:fd:0b:b6:f1:0a:0b:ec:21:27:a8:ad:
22:1f:da:5e:66:0d:ff:d5:45:6c:9b:7e:49:db:aa:
0f:de:d0:11:ca:6d:e2:55:aa:c1:bb:6f:38:c4:e4:
6c:06:96:4f:0a:97:05:8c:d1:30:26:43:10:73:d2:
2f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:30:80:9C:09:7E:DC:87:22:CC:42:D1:D3:E6:9A:AA:CE:2D:7A:FF
X509v3 Authority Key Identifier:
keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2b:25:f5:e4:a6:5c:04:fb:29:99:c3:62:8a:08:cc:88:b1:
96:4b:bc:fe:56:73:0e:07:be:44:d4:49:99:6f:08:0e:1b:5d:
04:61:ca:1d:52:6d:50:1a:6c:d6:d0:81:d2:80:8b:e5:29:52:
cb:41:a7:91:d0:09:53:c1:ae:63:fe:65:db:3f:fc:8a:6a:41:
ff:a3:17:ae:5a:24:73:e6:2b:ae:b9:94:8d:50:80:47:9d:b3:
29:a6:1e:bf:45:04:04:53:e4:32:2d:4d:1c:37:46:ad:c7:46:
59:c7:a2:29:73:e0:83:09:9d:b7:2c:92:5e:53:a1:44:6f:d1:
96:1b:86:bd:ea:7a:11:86:55:8d:05:84:f3:96:9c:3d:25:d9:
7a:29:0d:3d:73:11:d1:22:c9:95:fb:0c:c2:9c:ec:50:8f:6f:
58:a4:ee:f0:2e:db:d5:d5:0b:18:00:4a:bb:31:74:30:a6:12:
d5:7d:77:3a:37:1a:5c:f3:35:3d:5f:62:51:5a:1b:bd:05:53:
bd:84:a4:45:10:cb:ec:7c:ee:a2:82:b2:ed:19:62:30:5e:41:
60:af:ba:72:72:7f:15:86:48:c3:e3:57:40:cf:b2:c2:99:c4:
74:dd:f0:e6:3f:47:4e:53:52:9e:05:e3:fe:e5:7c:92:ec:dc:
a6:a5:c1:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXIM1MswBLez+NJz+oDOPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNTEzOTJjZDdlNmU0MGE0NWMxYjhhNDQ3OTg4MGVlZjk2
MGYzMzAwHhcNMjUxMTExMTAwMDU2WhcNMjUxMTEyMTAwMDU2WjAzMTEwLwYDVQQD
EyhmNDMwODA5YzA5N2VkYzg3MjJjYzQyZDFkM2U2OWFhYWNlMmQ3YWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17AsDY3AmBcIxnEl01WP9srBGHQ7
5z3o8Rjb3yGyDb7vQVaeuWVhQzOd6HFKdRt4cJxnQ4ATEj/APhhk5qesoBWHRr8u
m9K5YQz23WzxD2tkxdIwR/CIL1VDwGJcIxQZXrvVuq32lJximJgZYLy2IS0A7vk4
ePxE+BGqPP2F2QuQWBHF8pYH2QtxycpQpwKBU9c4eFUBI1YNRB53NmgNPAqMe1FG
/tqNT3hJPIhRiXF+czMhWQwCeY+PDz2yLH8BrTf55muj/Qu28QoL7CEnqK0iH9pe
Zg3/1UVsm35J26oP3tARym3iVarBu284xORsBpZPCpcFjNEwJkMQc9IvKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQwgJwJftyHIsxC0dPmmqrOLXr/MB8GA1UdIwQY
MBaAFNJROSzX5uQKRcG4pEeYgO75YPMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMzRkYmItOWZlNC00YmI4LWE5NzQt
ZGYxZDUyMDVjNWQwLzEvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yMzRkYmItOWZlNC00YmI4LWE5NzQtZGYxZDUyMDVjNWQw
LzEvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGysl9eSm
XAT7KZnDYooIzIixlku8/lZzDge+RNRJmW8IDhtdBGHKHVJtUBps1tCB0oCL5SlS
y0GnkdAJU8GuY/5l2z/8impB/6MXrlokc+YrrrmUjVCAR52zKaYev0UEBFPkMi1N
HDdGrcdGWceiKXPggwmdtyySXlOhRG/RlhuGvep6EYZVjQWE85acPSXZeikNPXMR
0SLJlfsMwpzsUI9vWKTu8C7b1dULGABKuzF0MKYS1X13OjcaXPM1PV9iUVobvQVT
vYSkRRDL7HzuooKy7RliMF5BYK+6cnJ/FYZIw+NXQM+ywpnEdN3w5j9HTlNSngXj
/uV8kuzcpqXBTQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:11 2025 by rpki-client