Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
File: ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft (raw, json)
Hash identifier: d1t/3ovMrbvWCmntL+zWKpOTSI68EZ4N7scN06Wu1Jk=
Subject key identifier: C1:D6:F2:39:78:1B:1D:0C:AE:A2:5C:51:4E:9B:4C:E7:5C:CC:45:1D
Authority key identifier: B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
Certificate issuer: /CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Certificate serial: 019A4D3CDB425C06D8C8B095EEA85285B8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 05:00:25 +0000
Manifest this update: Tue 04 Nov 2025 05:00:25 +0000
Manifest next update: Wed 05 Nov 2025 05:00:25 +0000
Files and hashes: 1: 1-qjOvMD_gOLy6H4ikM5iY4VGQ8.roa (hash: x56Lu5EMx6deCo6ci/ec7JVHm+rQMFgfSVpjOag6Bkc=)
2: ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl (hash: da7BOp/BEnfPW/Qsi4NRqKc/s1WYtzMjEsWizrDekg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:db:42:5c:06:d8:c8:b0:95:ee:a8:52:85:b8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Validity
Not Before: Nov 4 05:00:25 2025 GMT
Not After : Nov 5 05:00:25 2025 GMT
Subject: CN=c1d6f239781b1d0caea25c514e9b4ce75ccc451d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:e8:cd:dd:ac:2c:e3:67:4a:d3:1c:ff:9d:
3f:6c:3d:34:29:9e:8e:9a:d1:42:45:bc:c2:c3:c8:
d2:87:7b:09:9a:5c:e4:dc:88:aa:2c:2c:a0:19:9f:
cf:73:93:11:4e:66:73:84:9a:61:bd:bb:78:c9:86:
8b:d9:15:3e:c4:dc:0a:70:d0:c2:d1:64:08:3a:ea:
e1:a3:c2:e8:64:85:c3:11:c2:20:35:86:33:6b:ce:
15:da:ba:ad:c8:37:30:02:42:41:68:52:78:83:5d:
cd:60:32:c9:c4:f0:1a:2d:1f:41:b1:60:cc:08:72:
c4:f1:2a:1b:c7:66:90:d5:e3:d9:c0:79:68:a5:45:
17:de:97:34:db:3b:1e:8e:3a:e9:f4:c4:9f:4e:41:
5a:85:a0:bb:28:05:56:3f:47:d5:82:05:fb:6a:7a:
5b:ef:9f:8e:1b:b5:0e:19:bf:99:46:3d:0f:40:07:
4d:69:de:ea:c3:f9:c4:b7:eb:0f:ad:18:ad:d9:7d:
ec:8b:60:fc:7d:bf:98:2b:3d:75:06:5e:c3:78:fe:
29:64:44:b0:47:e8:75:58:a0:19:4c:e0:70:22:33:
da:c0:a8:0e:c5:a1:d9:bb:5c:11:dd:73:d4:b2:9c:
31:48:aa:bd:eb:e8:c7:d9:c2:1a:7b:9b:51:eb:4c:
a1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D6:F2:39:78:1B:1D:0C:AE:A2:5C:51:4E:9B:4C:E7:5C:CC:45:1D
X509v3 Authority Key Identifier:
keyid:B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a0:bc:56:1e:f4:0b:dd:7a:92:d1:1a:2c:99:e4:33:90:a6:
b7:56:4f:92:e6:8e:6c:23:28:20:16:50:e7:01:8a:e1:62:37:
7d:04:5b:b2:4d:9f:97:4c:40:f0:c3:98:40:cc:65:16:c3:07:
69:b3:3a:39:e9:83:88:74:a8:f0:20:96:64:ea:c7:0d:a7:c8:
20:d4:9f:6a:06:df:e0:8f:e4:17:66:d7:17:63:ca:be:5c:0d:
b9:25:c5:61:e2:d6:a6:64:e2:43:37:65:b8:1f:ee:eb:9c:31:
55:0f:e5:cb:e8:25:d3:75:84:17:32:de:8b:a2:86:a7:28:ce:
cb:56:a3:5f:bc:57:34:34:d0:57:1d:30:11:6b:ad:41:d7:4e:
a8:9c:86:c0:60:0f:ff:be:21:17:34:1d:7e:37:98:b8:43:7f:
78:60:1e:89:0d:93:dd:8e:0e:8c:e5:a7:e6:bf:a9:ec:46:17:
8c:20:c9:b6:1f:f7:86:d9:bd:09:cd:7e:ff:98:e7:11:c4:96:
4a:1d:27:1b:5e:a1:6a:4d:25:d8:75:6c:63:32:40:81:3d:09:
3c:4f:a5:0f:80:06:c7:ef:98:14:a4:a1:ca:a5:7c:dc:16:6b:
6e:b3:b0:65:fa:d8:e7:e4:09:92:bd:7e:79:d0:e6:ce:c1:bd:
ff:ba:44:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPNtCXAbYyLCV7qhShbjaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmRkNjA1NDhiNjdjYzQxZTY3YjZhNjE2YTEyZWM1M2Jm
NDI5NzgwHhcNMjUxMTA0MDUwMDI1WhcNMjUxMTA1MDUwMDI1WjAzMTEwLwYDVQQD
EyhjMWQ2ZjIzOTc4MWIxZDBjYWVhMjVjNTE0ZTliNGNlNzVjY2M0NTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRjozd2sLONnStMc/50/bD00KZ6O
mtFCRbzCw8jSh3sJmlzk3IiqLCygGZ/Pc5MRTmZzhJphvbt4yYaL2RU+xNwKcNDC
0WQIOurho8LoZIXDEcIgNYYza84V2rqtyDcwAkJBaFJ4g13NYDLJxPAaLR9BsWDM
CHLE8Sobx2aQ1ePZwHlopUUX3pc02zsejjrp9MSfTkFahaC7KAVWP0fVggX7anpb
75+OG7UOGb+ZRj0PQAdNad7qw/nEt+sPrRit2X3si2D8fb+YKz11Bl7DeP4pZESw
R+h1WKAZTOBwIjPawKgOxaHZu1wR3XPUspwxSKq96+jH2cIae5tR60yhmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHW8jl4Gx0MrqJcUU6bTOdczEUdMB8GA1UdIwQY
MBaAFLYt1gVItnzEHme2phahLsU79Cl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGkzV0JVaTJmTVFlWjdhbUZxRXV4VHYwS1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80OTBlMTItMWE0NS00YjAwLWE0NmMt
YWYxZTZkMDc3ZTBjLzEvdGkzV0JVaTJmTVFlWjdhbUZxRXV4VHYwS1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80OTBlMTItMWE0NS00YjAwLWE0NmMtYWYxZTZkMDc3ZTBj
LzEvdGkzV0JVaTJmTVFlWjdhbUZxRXV4VHYwS1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKC8Vh70
C916ktEaLJnkM5Cmt1ZPkuaObCMoIBZQ5wGK4WI3fQRbsk2fl0xA8MOYQMxlFsMH
abM6OemDiHSo8CCWZOrHDafIINSfagbf4I/kF2bXF2PKvlwNuSXFYeLWpmTiQzdl
uB/u65wxVQ/ly+gl03WEFzLei6KGpyjOy1ajX7xXNDTQVx0wEWutQddOqJyGwGAP
/74hFzQdfjeYuEN/eGAeiQ2T3Y4OjOWn5r+p7EYXjCDJth/3htm9Cc1+/5jnEcSW
Sh0nG16hak0l2HVsYzJAgT0JPE+lD4AGx++YFKShyqV83BZrbrOwZfrY5+QJkr1+
edDmzsG9/7pEdw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:33 2025 by rpki-client