Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier: budzM+SpeJAJqTVjXk246GgsMfdWlQJUwaX5dt15JuA=
Subject key identifier: A5:BE:32:3C:D1:A7:07:9F:15:32:47:48:F8:07:6B:BB:D4:46:DB:77
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial: 019A4FCFEF38F1C96245EF166DE1EB6928A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number: 0B4A
Signing time: Tue 04 Nov 2025 17:00:18 +0000
Manifest this update: Tue 04 Nov 2025 17:00:18 +0000
Manifest next update: Wed 05 Nov 2025 17:00:18 +0000
Files and hashes: 1: IDl9kroYhzoJI3fNYZt14M849Mw.roa (hash: QNB7O1WZxj1n2YGUs6WaUGgoWKZNY20yWJ5q+ijsbDA=)
2: ba5LTz6E_24Z-FWHvFExip3Bfu8.roa (hash: 78/BEK6gt2JG+WEEQwBhHL/YE4AHR9z4L0gDnYa5BSM=)
3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: O8CPUgITSZptxpaVbNeNOM5ycBZEJVj2DKwIuL5b6NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:ef:38:f1:c9:62:45:ef:16:6d:e1:eb:69:28:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Validity
Not Before: Nov 4 17:00:18 2025 GMT
Not After : Nov 5 17:00:18 2025 GMT
Subject: CN=a5be323cd1a7079f15324748f8076bbbd446db77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:86:73:34:c1:fb:73:f7:2a:2f:66:95:bc:
02:dc:c5:d5:99:6f:e8:a9:c1:db:dd:39:59:37:35:
c6:39:12:aa:8d:f1:26:d9:e4:57:ec:f1:f3:c6:fd:
42:f4:a9:a0:2d:b6:8a:0f:eb:96:64:5c:b9:10:fc:
57:b6:2e:f6:37:6e:6a:26:f5:c0:8f:d0:2b:c6:39:
85:f5:08:56:42:38:fa:71:cd:42:e7:31:70:1e:ec:
5d:49:a9:ae:7f:02:e2:61:31:5f:b5:9e:b5:2e:e8:
e5:f9:ac:18:ec:bc:f5:4e:3e:65:5f:c7:38:72:f8:
a7:ff:90:2a:c8:65:6a:2e:82:f6:73:13:cc:25:65:
c8:f5:15:9f:c0:2a:02:b9:64:e3:d9:90:87:3f:7d:
cb:31:5a:d7:fb:79:64:84:a2:bd:79:46:0b:75:b1:
7d:d5:a7:38:4a:7b:76:46:b9:99:a6:e6:e1:4b:46:
c5:d3:b2:0e:ae:de:16:53:64:cb:43:f1:47:46:27:
28:f1:42:51:a8:80:53:87:79:72:7f:5c:0c:ad:6c:
50:d5:8b:a0:53:57:2f:1e:7f:19:4d:94:fa:cf:bb:
6c:23:06:dc:be:68:e5:b3:e7:1c:fe:82:fc:6d:47:
f3:cc:3a:e6:76:54:12:dd:ab:f7:1f:ae:5b:a3:4d:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BE:32:3C:D1:A7:07:9F:15:32:47:48:F8:07:6B:BB:D4:46:DB:77
X509v3 Authority Key Identifier:
keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:15:70:03:7a:8a:a8:b5:54:07:bc:9f:a4:71:7a:4f:18:8d:
d7:4e:14:7e:4a:bd:18:90:7d:e5:51:e5:99:fc:87:60:ef:60:
03:f3:78:f1:67:f2:6a:3c:1c:88:91:f7:91:fa:d1:d4:8b:5f:
87:6d:ef:0f:90:93:cd:6a:b6:c2:cc:3e:04:fa:aa:93:78:e1:
3f:fb:ee:ce:9d:60:1e:04:29:62:54:41:ce:d3:09:b5:f9:85:
95:18:c6:47:87:27:94:11:dd:4b:95:c2:65:df:70:9c:0a:d7:
57:c7:d9:6b:63:37:b4:bb:0e:a1:13:19:30:9c:94:8e:af:c2:
90:29:24:80:fb:01:52:59:ee:35:7d:03:37:48:d5:36:29:a7:
7b:c3:89:54:51:bc:d7:2c:10:98:98:62:b5:93:67:46:9b:91:
ef:f7:ec:96:5f:67:24:c4:a7:d1:22:ad:7c:3b:50:37:bb:1f:
21:7e:05:10:2b:c3:95:15:79:ce:58:d0:db:58:eb:bb:75:8c:
b5:c6:83:c3:c8:93:4e:f8:ac:53:a0:32:d1:6f:23:f7:ec:b4:
1f:fe:34:b1:5b:64:e6:21:10:1e:a4:00:02:70:73:75:b8:50:
3a:7d:9c:f7:3d:b3:5d:ed:ca:85:6a:65:31:b2:41:0a:7a:3b:
9d:28:7d:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz+848cliRe8WbeHraSimMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkM2I1MjljOWRjOTUyNmYwOTliZjE2YWM4OWRjYzhhZGZl
MTgyNDAwHhcNMjUxMTA0MTcwMDE4WhcNMjUxMTA1MTcwMDE4WjAzMTEwLwYDVQQD
EyhhNWJlMzIzY2QxYTcwNzlmMTUzMjQ3NDhmODA3NmJiYmQ0NDZkYjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7iGczTB+3P3Ki9mlbwC3MXVmW/o
qcHb3TlZNzXGORKqjfEm2eRX7PHzxv1C9KmgLbaKD+uWZFy5EPxXti72N25qJvXA
j9ArxjmF9QhWQjj6cc1C5zFwHuxdSamufwLiYTFftZ61Lujl+awY7Lz1Tj5lX8c4
cvin/5AqyGVqLoL2cxPMJWXI9RWfwCoCuWTj2ZCHP33LMVrX+3lkhKK9eUYLdbF9
1ac4Snt2RrmZpubhS0bF07IOrt4WU2TLQ/FHRico8UJRqIBTh3lyf1wMrWxQ1Yug
U1cvHn8ZTZT6z7tsIwbcvmjls+cc/oL8bUfzzDrmdlQS3av3H65bo01mLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKW+MjzRpwefFTJHSPgHa7vURtt3MB8GA1UdIwQY
MBaAFK07UpydyVJvCZvxasidzIrf4YJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNjNmZDgtOWIzNi00OTZkLWI2ZTIt
YjIwZWJlNTk1NDc1LzEvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hNjNmZDgtOWIzNi00OTZkLWI2ZTItYjIwZWJlNTk1NDc1
LzEvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxVwA3qK
qLVUB7yfpHF6TxiN104Ufkq9GJB95VHlmfyHYO9gA/N48WfyajwciJH3kfrR1Itf
h23vD5CTzWq2wsw+BPqqk3jhP/vuzp1gHgQpYlRBztMJtfmFlRjGR4cnlBHdS5XC
Zd9wnArXV8fZa2M3tLsOoRMZMJyUjq/CkCkkgPsBUlnuNX0DN0jVNimne8OJVFG8
1ywQmJhitZNnRpuR7/fsll9nJMSn0SKtfDtQN7sfIX4FECvDlRV5zljQ21jru3WM
tcaDw8iTTvisU6Ay0W8j9+y0H/40sVtk5iEQHqQAAnBzdbhQOn2c9z2zXe3KhWpl
MbJBCno7nSh9xw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:39 2025 by rpki-client