Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
File: t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json)
Hash identifier: DiBagyqL5MAEsc0Rakj953g51T42SW/7UTMBcbhMqVE=
Subject key identifier: 80:14:05:7A:38:29:4A:BD:A6:1D:42:78:10:05:8D:30:16:60:85:96
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial: 019A71EEBC20147B8231E1B55D42D17ABD83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
Manifest number: 1170
Signing time: Tue 11 Nov 2025 08:01:02 +0000
Manifest this update: Tue 11 Nov 2025 08:01:02 +0000
Manifest next update: Wed 12 Nov 2025 08:01:02 +0000
Files and hashes: 1: YBLZGJHJKH4DoV9XrJh7KrLAY0g.roa (hash: L0o/zjJZLOmk6cpaT73kurdvyrzNoMlbhiuzTQLNAKg=)
2: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: 5/WNjrtpMa9k67KNvsbhTVd5z1/JYBOT8b/7iJXdx0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:bc:20:14:7b:82:31:e1:b5:5d:42:d1:7a:bd:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
Validity
Not Before: Nov 11 08:01:02 2025 GMT
Not After : Nov 12 08:01:02 2025 GMT
Subject: CN=8014057a38294abda61d427810058d3016608596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:59:7a:b1:88:54:22:94:1b:55:cf:d3:ba:
b0:ae:01:41:f7:55:e2:6f:78:8e:79:4a:f7:f2:f4:
b7:01:24:77:48:e7:d7:61:62:67:f0:68:b1:ae:cb:
fd:12:3f:ba:73:07:02:53:dc:e7:41:2d:ae:2e:50:
a3:74:97:57:3b:36:54:17:a5:38:4a:72:9b:23:00:
0e:d3:82:3c:c8:c2:bc:81:64:06:f7:6a:b3:e1:6f:
72:3e:83:f8:5d:e0:0f:5d:cd:db:5a:ec:2d:ff:02:
a3:6a:5d:08:78:85:b7:80:02:05:87:79:0d:77:22:
2d:71:5a:b1:2e:4b:b1:b5:84:c4:e8:fa:0f:92:02:
b1:b8:fc:09:98:64:d2:c8:b4:21:ac:03:72:51:14:
3d:9d:3a:a2:11:70:d2:78:9b:66:f0:23:8a:72:c5:
3f:3d:2b:43:86:dd:94:58:85:88:c3:0c:6d:1d:4e:
b1:2e:c4:4c:a1:65:bd:ad:9b:e1:7e:19:75:28:8b:
c7:ab:56:8b:f1:06:f1:cc:f8:46:79:c7:67:72:b6:
3d:4f:c5:49:bd:c3:ba:73:66:0f:a0:d7:2f:d3:9f:
e4:09:29:5c:04:a7:46:97:5a:4c:52:ea:ad:5f:71:
b6:af:d5:3e:3b:e4:80:9f:39:ee:49:2c:6e:8a:cf:
da:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:14:05:7A:38:29:4A:BD:A6:1D:42:78:10:05:8D:30:16:60:85:96
X509v3 Authority Key Identifier:
keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:35:2d:ec:bc:4d:64:c7:73:45:0d:af:a1:f6:3d:4b:25:42:
0f:88:c6:bd:a0:4d:c9:51:0b:17:93:bc:9d:94:50:26:6c:d6:
24:d6:ee:b9:fa:4b:bb:d8:ae:a4:da:da:3d:7d:06:7f:d6:b3:
3d:40:45:30:64:7d:6d:90:8a:14:52:ae:75:81:83:94:e6:ca:
a2:05:c3:87:53:9a:f5:f0:8f:91:bf:f6:9d:a0:65:f8:a6:8a:
b7:a6:3d:4d:29:a2:79:58:1f:2f:92:46:32:2b:02:60:50:33:
f6:d6:82:40:b6:74:e9:14:2d:d4:e9:1b:e4:ff:1a:8c:74:09:
e5:3e:b1:21:a4:1a:b2:7d:d3:93:64:68:37:c9:e4:f8:b0:f4:
1a:87:18:1f:64:87:3d:dd:ae:58:76:be:b5:77:6d:71:52:ba:
a3:92:f9:bc:ce:35:86:ca:6d:c3:73:a1:20:02:28:48:e6:72:
a7:20:93:7e:9e:af:2e:7a:bb:be:e0:c5:90:89:40:f1:77:f4:
3c:d4:ce:57:a0:c6:d5:14:36:52:d1:88:72:5d:ed:72:73:8b:
32:ea:08:bb:c9:6d:1e:1e:97:21:a4:69:e7:67:e6:29:fd:fc:
55:0e:ed:a5:05:fb:be:66:5c:56:fa:e2:0b:d7:cf:3a:33:eb:
e9:62:9a:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7rwgFHuCMeG1XULRer2DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NDQzMDk5MDgyNjllNTM4YjJiNGZhOTYzMzcwYzllYzIw
NzdhNzgwHhcNMjUxMTExMDgwMTAyWhcNMjUxMTEyMDgwMTAyWjAzMTEwLwYDVQQD
Eyg4MDE0MDU3YTM4Mjk0YWJkYTYxZDQyNzgxMDA1OGQzMDE2NjA4NTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjFZerGIVCKUG1XP07qwrgFB91Xi
b3iOeUr38vS3ASR3SOfXYWJn8Gixrsv9Ej+6cwcCU9znQS2uLlCjdJdXOzZUF6U4
SnKbIwAO04I8yMK8gWQG92qz4W9yPoP4XeAPXc3bWuwt/wKjal0IeIW3gAIFh3kN
dyItcVqxLkuxtYTE6PoPkgKxuPwJmGTSyLQhrANyURQ9nTqiEXDSeJtm8COKcsU/
PStDht2UWIWIwwxtHU6xLsRMoWW9rZvhfhl1KIvHq1aL8QbxzPhGecdncrY9T8VJ
vcO6c2YPoNcv05/kCSlcBKdGl1pMUuqtX3G2r9U+O+SAnznuSSxuis/aywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAUBXo4KUq9ph1CeBAFjTAWYIWWMB8GA1UdIwQY
MBaAFLdEMJkIJp5TiytPqWM3DJ7CB3p4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NjUyZTgtNWQyMC00MmY2LWE3Mzkt
ZDU0OTIxNjA0ZWNkLzEvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80NjUyZTgtNWQyMC00MmY2LWE3MzktZDU0OTIxNjA0ZWNk
LzEvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDUt7LxN
ZMdzRQ2vofY9SyVCD4jGvaBNyVELF5O8nZRQJmzWJNbuufpLu9iupNraPX0Gf9az
PUBFMGR9bZCKFFKudYGDlObKogXDh1Oa9fCPkb/2naBl+KaKt6Y9TSmieVgfL5JG
MisCYFAz9taCQLZ06RQt1Okb5P8ajHQJ5T6xIaQasn3Tk2RoN8nk+LD0GocYH2SH
Pd2uWHa+tXdtcVK6o5L5vM41hsptw3OhIAIoSOZypyCTfp6vLnq7vuDFkIlA8Xf0
PNTOV6DG1RQ2UtGIcl3tcnOLMuoIu8ltHh6XIaRp52fmKf38VQ7tpQX7vmZcVvri
C9fPOjPr6WKa2Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:26 2025 by rpki-client