Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
File: _43V_kF56L2ihTJWGRn20Hh3xj0.mft (raw, json)
Hash identifier: awF//q/8mZl0pv57D1J2YL4/UlJDqhPBbSP2ZThAW/Y=
Subject key identifier: D1:B4:75:9E:C6:B5:D9:72:64:D0:D7:41:1C:9C:67:47:9B:27:70:83
Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Certificate serial: 019A4E865702DDB8368CFECB00871C2E7E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
Manifest number: 07C7
Signing time: Tue 04 Nov 2025 11:00:17 +0000
Manifest this update: Tue 04 Nov 2025 11:00:17 +0000
Manifest next update: Wed 05 Nov 2025 11:00:17 +0000
Files and hashes: 1: K6Fu_XiBHvDsYhtG_--3fuPZg48.roa (hash: RNhrx5f19YH8DzgdDWPTLam4LAtgoJZsbS8JdFM0WN8=)
2: Ye2lhVqLlVViESIa1X_75ZD_K3Y.roa (hash: GkZd+LIfPke0Hk41OCtwwY1KwALgbjtXK8ppjf/on0I=)
3: ZTj2ZwJbmSTqqGkaHNeSOzaRucE.roa (hash: 5l3ZvQv6nxBKcaHiVSLVWyVMDLkrqNymK7dZBTsMLbU=)
4: _43V_kF56L2ihTJWGRn20Hh3xj0.crl (hash: ogeSeIBQG52uuTybsBDoQXzkmzfnr81jGxEvSky3RzU=)
5: _Kr9E5MKxyuntA5czBSmI-XiWLk.roa (hash: yKCPcajH9aVqjBH/Z/+caEOZWjeFz70pUynCf4xQzl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:57:02:dd:b8:36:8c:fe:cb:00:87:1c:2e:7e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Validity
Not Before: Nov 4 11:00:17 2025 GMT
Not After : Nov 5 11:00:17 2025 GMT
Subject: CN=d1b4759ec6b5d97264d0d7411c9c67479b277083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:92:0e:19:98:62:ac:59:41:67:2f:70:fc:
8e:a1:96:a4:b4:a3:6c:02:96:5f:5c:3d:fc:c6:9c:
5f:5a:4a:87:f4:1d:da:de:7d:9d:99:f5:08:88:6e:
82:79:34:a8:63:97:36:5f:e6:a4:5a:21:36:0a:6c:
bf:7e:4c:73:4e:fb:80:cb:17:85:84:18:a3:7e:6c:
6e:8c:39:fd:e2:60:15:b3:36:b2:c1:7e:f1:a8:40:
ab:52:cb:38:c8:04:78:6c:5e:71:da:fb:41:e5:fe:
c1:0b:14:4e:cb:10:dc:b0:f1:9f:9e:ed:7d:a0:0b:
83:5b:67:b2:37:59:de:46:82:52:01:77:d4:14:28:
1e:22:d9:8b:06:21:d6:77:38:eb:4d:bf:9b:b8:82:
91:fe:c4:08:de:fa:c7:23:08:05:c6:a5:9c:1d:72:
a5:6f:e7:3f:77:36:27:aa:43:e6:c2:9e:98:f7:f8:
e1:bd:89:a4:d2:24:1a:71:57:f2:53:c2:28:5a:87:
eb:4a:de:e1:01:c8:4f:a9:cb:6b:f8:98:0e:96:48:
49:2b:a4:af:8a:33:2e:0b:74:f7:39:cd:53:f5:9c:
c7:d7:e4:04:36:21:de:30:94:41:1b:13:f8:56:05:
d5:97:7d:5d:d3:d9:f5:c7:ae:77:4b:ff:4b:01:48:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B4:75:9E:C6:B5:D9:72:64:D0:D7:41:1C:9C:67:47:9B:27:70:83
X509v3 Authority Key Identifier:
keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d9:69:9d:e4:65:e4:d2:80:75:67:4a:bc:e0:fe:09:ab:b3:
71:d5:80:d0:de:09:1b:51:63:2b:3f:01:cf:30:95:d0:f3:6e:
25:d1:ae:4c:c2:ee:e1:9f:b2:4e:e2:ca:ac:c7:08:cd:a5:49:
07:54:22:64:72:14:c5:34:34:7e:b4:c3:ab:e6:27:bd:91:fc:
74:88:0f:b6:9f:66:cf:80:62:6c:ca:fc:5b:f0:8a:2f:d8:1c:
2f:ed:d7:29:38:7d:4e:a2:4b:d5:4c:66:37:af:ba:b6:73:ed:
57:e3:42:19:57:a0:99:53:e7:a7:ef:bf:aa:e9:e7:9e:e7:e2:
e5:77:8b:8e:5b:a4:59:fd:d9:1f:80:aa:e5:fc:ad:f9:1e:21:
48:96:a9:95:4a:9a:4a:6e:83:0e:df:ae:42:c3:28:9b:e2:5e:
2f:76:07:d5:aa:31:79:69:68:a1:66:84:f5:ac:66:20:55:54:
17:32:f1:d6:c3:08:cc:6a:82:2c:46:f3:09:78:18:cd:fc:17:
f6:ae:d7:7b:e2:9d:8a:c1:ef:e4:50:d3:4e:00:97:92:34:5c:
ce:14:35:f2:eb:4f:b4:e0:2f:db:5e:2b:f6:00:af:e0:6f:f7:
8e:63:3f:19:3d:c3:8e:6d:c0:6a:a8:d0:ef:fc:32:72:ed:e3:
43:34:f5:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhlcC3bg2jP7LAIccLn5OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOGRkNWZlNDE3OWU4YmRhMjg1MzI1NjE5MTlmNmQwNzg3
N2M2M2QwHhcNMjUxMTA0MTEwMDE3WhcNMjUxMTA1MTEwMDE3WjAzMTEwLwYDVQQD
EyhkMWI0NzU5ZWM2YjVkOTcyNjRkMGQ3NDExYzljNjc0NzliMjc3MDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVySDhmYYqxZQWcvcPyOoZaktKNs
ApZfXD38xpxfWkqH9B3a3n2dmfUIiG6CeTSoY5c2X+akWiE2Cmy/fkxzTvuAyxeF
hBijfmxujDn94mAVszaywX7xqECrUss4yAR4bF5x2vtB5f7BCxROyxDcsPGfnu19
oAuDW2eyN1neRoJSAXfUFCgeItmLBiHWdzjrTb+buIKR/sQI3vrHIwgFxqWcHXKl
b+c/dzYnqkPmwp6Y9/jhvYmk0iQacVfyU8IoWofrSt7hAchPqctr+JgOlkhJK6Sv
ijMuC3T3Oc1T9ZzH1+QENiHeMJRBGxP4VgXVl31d09n1x653S/9LAUi7AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNG0dZ7GtdlyZNDXQRycZ0ebJ3CDMB8GA1UdIwQY
MBaAFP+N1f5Beei9ooUyVhkZ9tB4d8Y9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQt
MDZhNDA0NDM1ZTUwLzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQtMDZhNDA0NDM1ZTUw
LzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtlpneRl
5NKAdWdKvOD+CauzcdWA0N4JG1FjKz8BzzCV0PNuJdGuTMLu4Z+yTuLKrMcIzaVJ
B1QiZHIUxTQ0frTDq+YnvZH8dIgPtp9mz4BibMr8W/CKL9gcL+3XKTh9TqJL1Uxm
N6+6tnPtV+NCGVegmVPnp++/qunnnufi5XeLjlukWf3ZH4Cq5fyt+R4hSJaplUqa
Sm6DDt+uQsMom+JeL3YH1aoxeWlooWaE9axmIFVUFzLx1sMIzGqCLEbzCXgYzfwX
9q7Xe+KdisHv5FDTTgCXkjRczhQ18utPtOAv214r9gCv4G/3jmM/GT3Djm3AaqjQ
7/wycu3jQzT1vw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:39 2025 by rpki-client