Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
File: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft (raw, json)
Hash identifier: fHmPldw9VJb1Nok53qbgn66C6rZdhMC9H3ma0dXr1n4=
Subject key identifier: 00:4B:A0:E6:A1:37:0A:43:78:AC:C5:EE:4B:AE:2F:13:E3:CA:8E:55
Authority key identifier: 57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
Certificate issuer: /CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Certificate serial: 019A4E864480E311000B3B580BAF7426525B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 11:00:13 +0000
Manifest this update: Tue 04 Nov 2025 11:00:13 +0000
Manifest next update: Wed 05 Nov 2025 11:00:13 +0000
Files and hashes: 1: Mdhc0HErAhKi4LnGQpbnvACoaqA.roa (hash: +lWO/9SWCJf5PkUWv0wqllxzcN5TlPPfmkgBPh2/u3g=)
2: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl (hash: 6BEtAPbkLvyEVZA0hG/M+XTyGX+FmTBWYl/mr/3o2UM=)
3: VUyZ_zKhYSMF7CpPOWFsSapK1tk.roa (hash: fLzRsJYT3JBvdVXuFhvXEM3hZiRHVYIv+xDZIaxAjAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:44:80:e3:11:00:0b:3b:58:0b:af:74:26:52:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Validity
Not Before: Nov 4 11:00:13 2025 GMT
Not After : Nov 5 11:00:13 2025 GMT
Subject: CN=004ba0e6a1370a4378acc5ee4bae2f13e3ca8e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:b2:1c:65:84:69:ad:42:72:8b:d5:45:35:
27:95:ce:7c:32:28:a1:58:c4:1d:21:83:6c:ea:2e:
df:cd:2e:47:62:15:52:55:a6:d1:9c:30:36:92:d6:
1e:34:28:70:76:52:f2:42:7f:06:40:2b:4c:6c:05:
f6:9b:3b:9a:de:f7:41:94:18:ed:1e:79:7b:9f:6b:
ad:08:e8:11:98:2c:c3:4d:5f:11:86:8e:2d:df:4f:
6b:19:0e:36:c6:3f:2a:9e:78:5c:7d:75:6e:d0:05:
8b:05:0d:46:26:23:90:22:a1:ce:b6:f1:04:4b:c3:
d0:c7:37:1a:0d:ee:24:a1:13:55:20:61:8f:e6:a6:
d3:69:ee:e0:6d:24:06:b1:81:bc:72:80:4a:e3:4f:
55:68:f2:92:b7:54:66:79:f3:f2:14:54:2e:1e:ab:
02:48:f8:67:eb:c7:4e:5e:c4:0d:56:80:c3:5b:c9:
39:f7:67:98:86:01:17:70:73:e3:f1:a1:85:3d:a6:
f3:8f:46:c8:a6:d0:d5:c5:26:c4:16:53:4a:ba:46:
a2:23:90:c4:74:03:77:35:d9:64:1a:57:4f:7d:50:
93:2f:98:28:aa:47:cd:d2:24:10:6a:96:f0:e0:1d:
cd:06:62:b7:0c:18:7f:0b:ff:fb:16:e8:71:6b:49:
16:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4B:A0:E6:A1:37:0A:43:78:AC:C5:EE:4B:AE:2F:13:E3:CA:8E:55
X509v3 Authority Key Identifier:
keyid:57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b7:fb:85:98:f3:bf:19:87:5b:e8:0d:c2:83:d9:a0:00:4c:
c1:af:a8:90:53:72:b4:b9:4b:96:e3:a4:13:e6:61:7d:d5:a5:
56:db:06:17:44:6e:81:76:b6:32:e2:2d:d5:ab:ef:fa:c3:de:
2d:bd:99:58:be:11:91:7a:2a:8f:76:4e:aa:dc:d1:52:2b:c0:
d2:38:ea:a3:8a:42:66:7e:d9:92:3f:30:06:94:8c:f3:fb:e5:
f2:03:fb:45:8c:bc:73:24:fc:da:bc:23:bd:ee:82:74:c3:ea:
7e:9a:39:c2:c1:c7:5f:d3:e1:57:05:7c:a9:46:bb:58:c1:71:
a5:cb:14:29:2c:e2:57:ec:2a:70:49:fd:09:01:a5:ee:ab:33:
d1:e0:b9:b2:52:f1:5e:33:fe:7d:96:bb:69:9d:2c:29:fe:8b:
e3:e0:6b:90:71:ab:1d:4f:ff:5c:63:48:7f:36:b3:d5:06:94:
93:5d:de:8e:7b:c7:fe:6f:bd:cf:f8:12:2a:cd:2e:06:5b:ce:
c0:79:d8:0a:5f:08:71:ed:65:58:9e:92:39:4d:06:52:59:8f:
b0:5d:d5:76:63:c3:be:d0:41:7a:c4:24:21:c2:58:df:87:d0:
53:94:d0:bf:29:9f:56:6c:43:34:56:03:e3:b0:bd:80:b5:1b:
02:77:1a:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhkSA4xEACztYC690JlJbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3N2MwY2Q1YTRjZmQ4M2Q0OTFkNjI3ZDhiMGZjY2I2NzBl
ODE1MzQwHhcNMjUxMTA0MTEwMDEzWhcNMjUxMTA1MTEwMDEzWjAzMTEwLwYDVQQD
EygwMDRiYTBlNmExMzcwYTQzNzhhY2M1ZWU0YmFlMmYxM2UzY2E4ZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLCyHGWEaa1CcovVRTUnlc58Miih
WMQdIYNs6i7fzS5HYhVSVabRnDA2ktYeNChwdlLyQn8GQCtMbAX2mzua3vdBlBjt
Hnl7n2utCOgRmCzDTV8Rho4t309rGQ42xj8qnnhcfXVu0AWLBQ1GJiOQIqHOtvEE
S8PQxzcaDe4koRNVIGGP5qbTae7gbSQGsYG8coBK409VaPKSt1RmefPyFFQuHqsC
SPhn68dOXsQNVoDDW8k592eYhgEXcHPj8aGFPabzj0bIptDVxSbEFlNKukaiI5DE
dAN3NdlkGldPfVCTL5goqkfN0iQQapbw4B3NBmK3DBh/C//7Fuhxa0kWBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABLoOahNwpDeKzF7kuuLxPjyo5VMB8GA1UdIwQY
MBaAFFd8DNWkz9g9SR1ifYsPzLZw6BU0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjN3TTFhVFAyRDFKSFdKOWl3X010bkRvRlRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wMTFiNWQtNjUyZS00NTJhLTk2Yzkt
ZDhlYzJjYmNhZDI2LzEvVjN3TTFhVFAyRDFKSFdKOWl3X010bkRvRlRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8wMTFiNWQtNjUyZS00NTJhLTk2YzktZDhlYzJjYmNhZDI2
LzEvVjN3TTFhVFAyRDFKSFdKOWl3X010bkRvRlRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbf7hZjz
vxmHW+gNwoPZoABMwa+okFNytLlLluOkE+ZhfdWlVtsGF0RugXa2MuIt1avv+sPe
Lb2ZWL4RkXoqj3ZOqtzRUivA0jjqo4pCZn7Zkj8wBpSM8/vl8gP7RYy8cyT82rwj
ve6CdMPqfpo5wsHHX9PhVwV8qUa7WMFxpcsUKSziV+wqcEn9CQGl7qsz0eC5slLx
XjP+fZa7aZ0sKf6L4+BrkHGrHU//XGNIfzaz1QaUk13ejnvH/m+9z/gSKs0uBlvO
wHnYCl8Ice1lWJ6SOU0GUlmPsF3VdmPDvtBBesQkIcJY34fQU5TQvymfVmxDNFYD
47C9gLUbAnca0w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:27 2025 by rpki-client