Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
File: Rv57VnIiRRFtQjS-SEoCpIod3h8.mft (raw, json)
Hash identifier: zc1YHmdYibfUYzyw4oDpinMstn4yg1IZNWGzvB9HjSQ=
Subject key identifier: 43:1D:52:DF:60:AC:D6:21:38:1E:04:DE:77:D7:5F:72:A5:8C:A9:6E
Authority key identifier: 46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
Certificate issuer: /CN=46fe7b56722245116d4234be484a02a48a1dde1f
Certificate serial: 019A26D4640A7E7438236F635DF62DD5CAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
Manifest number: 107B
Signing time: Mon 27 Oct 2025 18:00:44 +0000
Manifest this update: Mon 27 Oct 2025 18:00:44 +0000
Manifest next update: Tue 28 Oct 2025 18:00:44 +0000
Files and hashes: 1: IhchjAlH7wZG7kzQTy4JNv3HhP8.roa (hash: MX+poTln1XfrF458aN+rzETZ5ejTHBJDcPW84QX3+eg=)
2: Rv57VnIiRRFtQjS-SEoCpIod3h8.crl (hash: 5m8mDc5AzJfIknVNrHRAwo4CupTtB/VhtVlTbc19bzM=)
3: m7K3o6zKpvccw8S7oHzkq7OVkd4.roa (hash: GgfDl73eI/b08tNz06PPsn6okyEEe2tBCJUd3Gjwvrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:64:0a:7e:74:38:23:6f:63:5d:f6:2d:d5:ca:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fe7b56722245116d4234be484a02a48a1dde1f
Validity
Not Before: Oct 27 18:00:44 2025 GMT
Not After : Oct 28 18:00:44 2025 GMT
Subject: CN=431d52df60acd621381e04de77d75f72a58ca96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:16:b3:4c:9f:eb:c4:5c:de:1f:82:75:0b:
49:8f:7c:42:d5:3c:7b:f8:e9:11:cb:a3:1e:04:ab:
60:34:43:a2:90:1b:c0:60:58:6c:d1:d5:08:72:db:
87:fb:d9:4d:62:fa:c6:38:8e:a0:be:7f:59:e3:88:
4a:93:74:e8:3a:c3:1b:36:d9:e0:ec:c9:f0:38:59:
98:bb:46:d7:f7:f2:e5:eb:df:3b:64:ab:bd:97:6e:
d4:c7:b7:83:28:1e:5b:f6:4f:a1:2a:33:d3:35:02:
33:cb:94:87:97:31:49:43:13:e9:48:14:8f:ba:9e:
61:a0:83:40:40:68:5e:65:0a:a9:eb:11:19:d9:b6:
d0:55:40:11:24:3a:89:13:38:b2:5b:f1:92:b3:7f:
5c:df:f6:e4:b5:e4:f2:29:fc:78:01:76:f7:45:33:
87:0e:58:16:7d:12:cd:81:29:41:6c:06:31:d3:ef:
46:5a:08:72:d8:6c:e4:91:a5:1e:cf:42:d4:e2:e7:
6f:e7:53:23:11:97:dc:39:21:fa:2b:7d:c0:58:2f:
9d:6e:59:d2:85:2f:eb:82:5a:08:85:67:72:8c:2d:
8c:0c:b9:4b:18:c7:e7:b0:61:9d:cc:56:12:ef:5e:
24:68:c5:36:67:64:b2:75:38:bc:d4:5f:39:ce:de:
aa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1D:52:DF:60:AC:D6:21:38:1E:04:DE:77:D7:5F:72:A5:8C:A9:6E
X509v3 Authority Key Identifier:
keyid:46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:32:c5:19:f6:8e:a8:73:0a:ef:f9:d8:79:46:fd:fa:a1:ab:
17:38:1e:2c:56:f0:a4:ba:ea:7c:a3:32:f9:7e:01:f5:3e:90:
09:66:47:ea:e8:5c:f8:c0:25:92:95:91:45:86:69:09:98:aa:
fa:fc:5d:25:c0:96:8b:0e:c9:d7:dd:9e:f3:77:7b:6f:01:a5:
aa:39:ac:ea:a1:db:88:a0:58:eb:ea:80:16:3e:21:1d:03:1b:
8d:6b:71:93:26:83:66:c6:a2:6b:d0:69:09:05:2b:dc:f2:85:
b2:1e:60:78:c4:5d:31:03:6e:53:ce:65:bd:62:2a:82:d4:8a:
30:70:9a:56:3d:42:e1:5d:b0:94:e1:94:35:5c:65:c6:8e:3b:
53:ee:5a:c1:58:7e:41:7f:e7:d8:6b:8e:32:10:5b:fb:cf:24:
e5:46:3f:ab:f3:ae:90:7a:42:63:26:16:e1:1b:ac:e9:10:54:
98:b4:52:1b:0a:b7:24:21:8b:67:a3:ae:49:1f:1a:9e:90:61:
b5:6e:c4:08:a5:05:34:45:06:01:2e:12:02:e1:e5:fd:0b:60:
ad:c4:b5:f8:ea:39:ca:5a:ce:ea:84:34:cd:9a:e7:c4:9f:d7:
99:22:45:9e:1b:e2:5b:15:8e:ac:ab:98:2e:81:90:88:92:0a:
e0:cc:f9:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZom1GQKfnQ4I29jXfYt1crpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZmU3YjU2NzIyMjQ1MTE2ZDQyMzRiZTQ4NGEwMmE0OGEx
ZGRlMWYwHhcNMjUxMDI3MTgwMDQ0WhcNMjUxMDI4MTgwMDQ0WjAzMTEwLwYDVQQD
Eyg0MzFkNTJkZjYwYWNkNjIxMzgxZTA0ZGU3N2Q3NWY3MmE1OGNhOTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj4Ws0yf68Rc3h+CdQtJj3xC1Tx7
+OkRy6MeBKtgNEOikBvAYFhs0dUIctuH+9lNYvrGOI6gvn9Z44hKk3ToOsMbNtng
7MnwOFmYu0bX9/Ll6987ZKu9l27Ux7eDKB5b9k+hKjPTNQIzy5SHlzFJQxPpSBSP
up5hoINAQGheZQqp6xEZ2bbQVUARJDqJEziyW/GSs39c3/bkteTyKfx4AXb3RTOH
DlgWfRLNgSlBbAYx0+9GWghy2GzkkaUez0LU4udv51MjEZfcOSH6K33AWC+dblnS
hS/rgloIhWdyjC2MDLlLGMfnsGGdzFYS714kaMU2Z2SydTi81F85zt6qlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMdUt9grNYhOB4E3nfXX3KljKluMB8GA1UdIwQY
MBaAFEb+e1ZyIkURbUI0vkhKAqSKHd4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85MDgxNDMtZjkxNi00NzE4LThmOTct
NGJkMzM5MmQ1NWQxLzEvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85MDgxNDMtZjkxNi00NzE4LThmOTctNGJkMzM5MmQ1NWQx
LzEvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApTLFGfaO
qHMK7/nYeUb9+qGrFzgeLFbwpLrqfKMy+X4B9T6QCWZH6uhc+MAlkpWRRYZpCZiq
+vxdJcCWiw7J192e83d7bwGlqjms6qHbiKBY6+qAFj4hHQMbjWtxkyaDZsaia9Bp
CQUr3PKFsh5geMRdMQNuU85lvWIqgtSKMHCaVj1C4V2wlOGUNVxlxo47U+5awVh+
QX/n2GuOMhBb+88k5UY/q/OukHpCYyYW4Rus6RBUmLRSGwq3JCGLZ6OuSR8anpBh
tW7ECKUFNEUGAS4SAuHl/QtgrcS1+Oo5ylrO6oQ0zZrnxJ/XmSJFnhviWxWOrKuY
LoGQiJIK4Mz5Ag==
-----END CERTIFICATE-----
Generated at Mon Oct 27 20:34:25 2025 by rpki-client