Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File: 43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier: UKX/27L9lSpxO7eZfOXrUtL5r3M4+RIhkd8IT/yEOic=
Subject key identifier: 3F:B0:29:BC:2A:7C:64:77:A4:DC:7D:DD:CB:4E:8F:58:FA:0B:DE:EF
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer: /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial: 019A71B8E9172FE746EF6A69FFF6CAD904C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number: 164E
Signing time: Tue 11 Nov 2025 07:02:14 +0000
Manifest this update: Tue 11 Nov 2025 07:02:14 +0000
Manifest next update: Wed 12 Nov 2025 07:02:14 +0000
Files and hashes: 1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: i1gqbf/T30ml5zxAupJhuEpiSlrW1jzXbtmwk4GuirE=)
2: LktO0B8qjGLInxw3N5jX_ouyGv4.roa (hash: 0acgVKGcL/QrYT0G9rMKO5SvHbTzsdzBy14zEKR/PS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e9:17:2f:e7:46:ef:6a:69:ff:f6:ca:d9:04:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
Validity
Not Before: Nov 11 07:02:14 2025 GMT
Not After : Nov 12 07:02:14 2025 GMT
Subject: CN=3fb029bc2a7c6477a4dc7dddcb4e8f58fa0bdeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:22:ff:71:dd:4b:6b:3a:ce:d3:84:7d:00:
cd:4b:2a:1a:a6:5e:82:1e:38:42:5a:0f:ba:25:19:
4e:f8:01:d0:c6:b6:b7:db:32:6e:11:4f:81:4b:ac:
ae:47:e6:bf:39:86:bb:77:36:a7:00:74:c5:20:aa:
50:b4:91:fe:a0:78:5d:be:8d:2d:89:34:52:ff:bd:
d1:0e:96:ef:c4:6d:0c:e4:cf:7a:3d:3d:58:c9:33:
e7:38:11:59:eb:70:d8:63:9b:72:fc:7a:d7:a4:58:
64:a2:cb:1a:9a:73:8d:df:c0:78:72:8f:2f:a6:67:
a5:af:db:18:36:8a:c5:42:33:7d:fb:13:28:c7:0c:
9a:cd:2b:e4:f8:ca:f1:72:28:a8:17:8b:93:76:4d:
f6:27:54:17:35:24:e9:b6:c1:83:fe:ff:fe:72:74:
5e:01:4f:5b:6b:9c:97:5f:10:80:37:d5:c0:88:48:
b0:6a:13:67:f1:f8:d5:b4:6b:d8:14:b0:82:13:1b:
6e:78:97:95:7a:9c:3d:18:7e:d5:10:a4:9e:ed:0f:
21:86:3d:b1:6d:5a:6c:34:8d:f9:75:e2:19:0d:01:
b2:64:95:84:ab:a9:2d:16:6f:4b:e3:c3:03:43:e7:
9a:18:db:8b:59:1f:b2:a1:4d:26:3c:88:28:be:53:
c8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B0:29:BC:2A:7C:64:77:A4:DC:7D:DD:CB:4E:8F:58:FA:0B:DE:EF
X509v3 Authority Key Identifier:
keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6b:79:2f:05:b7:e0:68:5d:67:52:32:7c:a3:ca:b7:ab:95:
cc:bd:69:22:03:d6:18:ac:0d:e7:dc:be:04:b3:75:11:b2:33:
d7:1d:dd:0b:a6:8a:78:08:42:14:bd:19:84:e8:c7:76:72:46:
f6:7d:21:df:c7:69:7c:b0:88:fb:77:c1:45:7d:b3:26:c5:67:
55:bb:d6:42:b6:93:f5:9f:f4:cf:44:e8:53:44:96:76:55:86:
8a:dd:95:62:23:4d:15:b3:29:d6:4a:96:77:1a:6b:82:be:57:
3d:0a:e4:05:c5:8c:95:d3:a6:15:c7:f2:7c:2d:9f:77:82:82:
47:b6:97:a4:64:c9:38:89:5b:27:4b:a1:55:e5:7e:34:c6:9c:
05:d7:65:f2:5b:12:91:58:20:07:08:cb:52:7d:3b:5b:df:54:
25:7e:b6:87:34:c8:2b:15:20:49:44:c3:0c:b5:fa:71:fd:c1:
1b:c9:06:3d:f6:04:5e:dc:ea:d6:0e:f4:c6:1e:16:5e:95:88:
d3:cf:3f:24:ab:7e:a5:c6:77:fc:4f:bb:f5:77:27:5b:71:99:
04:f9:21:99:af:78:19:7c:e0:60:04:74:36:66:26:af:68:97:
4f:9e:51:f0:18:f8:fd:b2:98:93:c9:95:d8:f4:85:16:c3:8b:
90:29:29:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuOkXL+dG72pp//bK2QTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzg2NTg3YWQ0NzIwNWE4MTEyOGU1NzhjOTBjYWVlMWU0
ODgyOGIwHhcNMjUxMTExMDcwMjE0WhcNMjUxMTEyMDcwMjE0WjAzMTEwLwYDVQQD
EygzZmIwMjliYzJhN2M2NDc3YTRkYzdkZGRjYjRlOGY1OGZhMGJkZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUsi/3HdS2s6ztOEfQDNSyoapl6C
HjhCWg+6JRlO+AHQxra32zJuEU+BS6yuR+a/OYa7dzanAHTFIKpQtJH+oHhdvo0t
iTRS/73RDpbvxG0M5M96PT1YyTPnOBFZ63DYY5ty/HrXpFhkossamnON38B4co8v
pmelr9sYNorFQjN9+xMoxwyazSvk+MrxciioF4uTdk32J1QXNSTptsGD/v/+cnRe
AU9ba5yXXxCAN9XAiEiwahNn8fjVtGvYFLCCExtueJeVepw9GH7VEKSe7Q8hhj2x
bVpsNI35deIZDQGyZJWEq6ktFm9L48MDQ+eaGNuLWR+yoU0mPIgovlPITwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+wKbwqfGR3pNx93ctOj1j6C97vMB8GA1UdIwQY
MBaAFON4ZYetRyBagRKOV4yQyu4eSIKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iYjZhN2MtMzFhNC00ZDMzLWE4NTMt
MDdjYzQ2ZTYzYjUwLzEvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9iYjZhN2MtMzFhNC00ZDMzLWE4NTMtMDdjYzQ2ZTYzYjUw
LzEvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWt5LwW3
4GhdZ1IyfKPKt6uVzL1pIgPWGKwN59y+BLN1EbIz1x3dC6aKeAhCFL0ZhOjHdnJG
9n0h38dpfLCI+3fBRX2zJsVnVbvWQraT9Z/0z0ToU0SWdlWGit2VYiNNFbMp1kqW
dxprgr5XPQrkBcWMldOmFcfyfC2fd4KCR7aXpGTJOIlbJ0uhVeV+NMacBddl8lsS
kVggBwjLUn07W99UJX62hzTIKxUgSUTDDLX6cf3BG8kGPfYEXtzq1g70xh4WXpWI
088/JKt+pcZ3/E+79XcnW3GZBPkhma94GXzgYAR0NmYmr2iXT55R8Bj4/bKYk8mV
2PSFFsOLkCkpww==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:49 2025 by rpki-client