Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
File: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft (raw, json)
Hash identifier: NG/3RUmfAv79LIwt8sjlMk7fh5aHQJMvbGofd2Anlqk=
Subject key identifier: 56:FC:38:A4:E5:9E:9E:DB:40:54:76:57:9E:3C:A7:69:02:5E:7E:A2
Authority key identifier: BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
Certificate issuer: /CN=bf56ba98c6745a63026d78fc284722399d2eb849
Certificate serial: 019A71B7D4D1CC3B843E282E4759BDD99F50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
Manifest number: 115A
Signing time: Tue 11 Nov 2025 07:01:04 +0000
Manifest this update: Tue 11 Nov 2025 07:01:04 +0000
Manifest next update: Wed 12 Nov 2025 07:01:04 +0000
Files and hashes: 1: 5XEV-gEMIErGK0axVAW_a3kFgdQ.roa (hash: zrBYoY+XDrWBTYUlEabBJW1Q13TMvp0kauzANBjQtoQ=)
2: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl (hash: Qim3YK37NJ4DLtso+wKmHSUyQ4PJ+25EPxY4WNkraFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d4:d1:cc:3b:84:3e:28:2e:47:59:bd:d9:9f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf56ba98c6745a63026d78fc284722399d2eb849
Validity
Not Before: Nov 11 07:01:04 2025 GMT
Not After : Nov 12 07:01:04 2025 GMT
Subject: CN=56fc38a4e59e9edb405476579e3ca769025e7ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:6d:0c:44:f2:06:a5:06:9a:94:b5:9c:1f:
2e:ed:35:39:1c:ce:6a:cf:89:db:2c:4b:83:1a:de:
68:24:ad:f2:9f:5b:76:7a:6c:d2:85:2e:cb:1b:a9:
e5:f1:87:cc:ad:2a:ca:ff:65:b4:62:98:df:76:9a:
d0:73:35:05:2b:91:f1:5e:e8:08:36:8e:af:db:23:
24:b0:cc:56:90:b1:84:da:98:9b:ed:f9:2a:00:e5:
10:05:21:e1:7d:26:12:17:46:4f:b1:3c:51:f3:86:
55:54:a2:62:6a:ec:98:dc:6d:11:93:34:e9:55:8c:
27:a9:e3:25:69:17:fe:96:1a:c1:80:b1:27:b6:51:
c9:b8:12:15:57:61:37:00:eb:95:96:11:5e:c0:a5:
89:91:53:2a:ee:ba:2f:ae:0a:f5:cb:e0:e1:b0:03:
c6:7c:6c:f5:03:67:bc:2a:a8:db:28:ad:ef:15:8c:
a0:08:bb:62:27:32:04:6c:06:27:00:c4:1d:74:0f:
8e:9e:e0:de:b7:d6:e8:f2:db:1b:de:fd:57:53:f6:
23:c6:13:62:27:3f:e2:ac:35:b3:c5:09:83:1a:e3:
02:cf:86:2c:08:f7:e2:46:22:59:45:7e:dc:5a:c8:
a7:9f:02:a1:90:6d:5d:ed:1c:82:8c:b8:fa:33:10:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FC:38:A4:E5:9E:9E:DB:40:54:76:57:9E:3C:A7:69:02:5E:7E:A2
X509v3 Authority Key Identifier:
keyid:BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f7:60:91:72:83:5f:d0:63:3f:99:bd:c3:a7:2b:90:22:3f:
4a:19:1d:80:1c:e1:fb:77:0d:b0:b1:a9:ea:61:77:7e:df:84:
e7:f7:bd:b4:23:be:0f:70:0a:87:a1:c0:d6:a5:b5:44:fa:ad:
d8:6a:20:3b:3b:28:cb:cf:7c:12:9d:11:d0:d1:ec:1e:65:59:
97:f6:3c:6a:9a:fc:43:f5:fc:58:bf:91:7b:03:e2:73:9a:b1:
97:48:51:cc:39:38:0d:04:fc:b6:67:88:af:fe:57:b3:24:02:
ef:2d:37:5f:78:e4:7d:e4:d0:a7:7a:a4:16:6f:67:94:64:40:
89:00:6e:0e:3d:3c:ca:95:3b:d3:ae:6e:a2:17:23:86:a9:4c:
3a:ce:38:04:0a:08:e4:ea:07:cb:eb:95:09:0e:f8:ba:bf:71:
77:79:1a:38:1e:15:7a:e2:9b:4b:5d:06:4b:1b:ff:bb:a6:58:
37:d1:9e:7d:b9:02:8f:81:53:29:db:a0:76:09:27:3e:1d:a3:
31:47:17:d1:6d:b0:f4:f1:b2:9d:3b:0a:e8:c1:f3:5d:0e:39:
3d:db:28:5b:74:a7:a5:b0:df:e4:4f:c1:ca:e9:48:4e:4d:8b:
4e:18:e3:47:f8:a1:a9:ee:68:22:52:01:1a:4f:47:62:ad:45:
97:24:d5:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt9TRzDuEPiguR1m92Z9QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNTZiYTk4YzY3NDVhNjMwMjZkNzhmYzI4NDcyMjM5OWQy
ZWI4NDkwHhcNMjUxMTExMDcwMTA0WhcNMjUxMTEyMDcwMTA0WjAzMTEwLwYDVQQD
Eyg1NmZjMzhhNGU1OWU5ZWRiNDA1NDc2NTc5ZTNjYTc2OTAyNWU3ZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJhtDETyBqUGmpS1nB8u7TU5HM5q
z4nbLEuDGt5oJK3yn1t2emzShS7LG6nl8YfMrSrK/2W0YpjfdprQczUFK5HxXugI
No6v2yMksMxWkLGE2pib7fkqAOUQBSHhfSYSF0ZPsTxR84ZVVKJiauyY3G0RkzTp
VYwnqeMlaRf+lhrBgLEntlHJuBIVV2E3AOuVlhFewKWJkVMq7rovrgr1y+DhsAPG
fGz1A2e8KqjbKK3vFYygCLtiJzIEbAYnAMQddA+OnuDet9bo8tsb3v1XU/YjxhNi
Jz/irDWzxQmDGuMCz4YsCPfiRiJZRX7cWsinnwKhkG1d7RyCjLj6MxA7zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFb8OKTlnp7bQFR2V548p2kCXn6iMB8GA1UdIwQY
MBaAFL9WupjGdFpjAm14/ChHIjmdLrhJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjFhNm1NWjBXbU1DYlhqOEtFY2lPWjB1dUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMzQzZDItNTI1My00MjQzLWEwMWYt
NTg3ZmM4NGFjZWZlLzEvdjFhNm1NWjBXbU1DYlhqOEtFY2lPWjB1dUVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMzQzZDItNTI1My00MjQzLWEwMWYtNTg3ZmM4NGFjZWZl
LzEvdjFhNm1NWjBXbU1DYlhqOEtFY2lPWjB1dUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArfdgkXKD
X9BjP5m9w6crkCI/ShkdgBzh+3cNsLGp6mF3ft+E5/e9tCO+D3AKh6HA1qW1RPqt
2GogOzsoy898Ep0R0NHsHmVZl/Y8apr8Q/X8WL+RewPic5qxl0hRzDk4DQT8tmeI
r/5XsyQC7y03X3jkfeTQp3qkFm9nlGRAiQBuDj08ypU7065uohcjhqlMOs44BAoI
5OoHy+uVCQ74ur9xd3kaOB4VeuKbS10GSxv/u6ZYN9GefbkCj4FTKdugdgknPh2j
MUcX0W2w9PGynTsK6MHzXQ45PdsoW3SnpbDf5E/ByulITk2LThjjR/ihqe5oIlIB
Gk9HYq1FlyTV4A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:16 2025 by rpki-client