Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
File: RkVleaUXL8oI4EOwK7ly-3UDrq8.mft (raw, json)
Hash identifier: +YPro0c5Hv4GazNOHk64sA53jk3gGiHPGuUUOZhlmt0=
Subject key identifier: 91:11:A0:9A:54:9A:01:0B:22:6D:95:98:BC:9C:6C:DA:4D:CB:5D:83
Authority key identifier: 46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
Certificate issuer: /CN=46456579a5172fca08e043b02bb972fb7503aeaf
Certificate serial: 019A4DE1B2F77CBA8BCD25CB5F9ACAEFB99C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
Manifest number: 1461
Signing time: Tue 04 Nov 2025 08:00:28 +0000
Manifest this update: Tue 04 Nov 2025 08:00:28 +0000
Manifest next update: Wed 05 Nov 2025 08:00:28 +0000
Files and hashes: 1: 6--mKTLhcJSvHElJeuoDt_lQE_Q.roa (hash: SXpjKVkVSr9zsLSxhubs4WsDg8DBpMmGqFFwLSfPmwo=)
2: RkVleaUXL8oI4EOwK7ly-3UDrq8.crl (hash: xvtRC44Ig+Tvf0V2EdLZmZxJrYUy+3yZ3n25TbLyLl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b2:f7:7c:ba:8b:cd:25:cb:5f:9a:ca:ef:b9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46456579a5172fca08e043b02bb972fb7503aeaf
Validity
Not Before: Nov 4 08:00:28 2025 GMT
Not After : Nov 5 08:00:28 2025 GMT
Subject: CN=9111a09a549a010b226d9598bc9c6cda4dcb5d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:bb:bd:d1:6d:ef:93:2c:2d:4f:a1:20:31:
9e:88:53:af:69:c7:ed:3a:71:13:05:f1:fb:1a:04:
47:9f:85:ad:92:97:60:8f:b6:95:fc:7c:f2:13:e5:
95:ad:45:03:11:77:f3:77:33:f4:1a:42:16:79:9e:
26:a6:e6:73:bb:a0:a2:a9:df:56:0b:58:2e:60:9a:
31:c8:46:e9:45:3f:1e:e3:c2:9d:4e:04:85:4c:8a:
c2:12:55:ed:34:77:a8:cf:25:b8:b0:c9:83:a9:6d:
45:30:d6:a5:81:66:81:0c:e0:2a:f8:34:e9:7a:c3:
0c:a3:76:d2:35:c3:ad:29:37:80:47:e9:1f:50:fa:
d1:d6:00:26:b6:5a:83:3e:5e:71:d4:e5:26:c2:fc:
49:d2:6c:ae:d8:15:37:61:b2:f0:2c:67:cc:a0:d8:
cf:63:1b:6f:15:68:30:08:52:65:28:53:1c:f9:c7:
17:05:d4:6d:c7:5a:ac:9f:ea:a0:02:da:3a:91:5a:
d8:f6:64:d4:94:ae:aa:f7:55:02:c2:bf:fb:a4:88:
38:e8:f9:f4:2f:e5:06:4f:3e:58:f6:2b:01:d8:32:
c6:0f:fd:55:15:88:73:19:b6:70:1a:94:e2:67:b8:
f3:a6:b2:22:75:7d:52:63:ad:8c:5f:4b:f3:29:30:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:11:A0:9A:54:9A:01:0B:22:6D:95:98:BC:9C:6C:DA:4D:CB:5D:83
X509v3 Authority Key Identifier:
keyid:46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4a:fe:f6:43:af:b1:83:2e:86:8a:b5:6c:08:55:b3:c4:18:
18:7c:d5:97:98:5f:a4:69:82:6d:55:92:44:d2:5d:5e:21:18:
57:9b:14:e3:e1:39:ea:1c:89:05:38:93:9c:57:d9:d1:c2:f6:
85:1c:6b:08:40:54:e6:91:6b:c2:b1:b1:99:07:3d:aa:77:17:
35:42:ac:e5:01:90:81:3b:ce:b2:f6:1a:5f:0e:b3:14:00:1f:
97:6d:dc:95:0c:6f:94:e5:0b:f5:9a:08:05:25:3b:95:bd:3c:
30:61:f8:be:d8:03:a9:f4:a9:68:33:43:a1:e9:2c:cc:7f:a9:
7d:4e:eb:3d:14:7d:d8:96:18:fb:09:8c:92:be:c0:c6:05:7c:
68:93:d0:b8:2a:b2:9e:ff:46:b4:c7:22:c0:01:61:48:ef:d0:
3d:ba:d5:e1:5b:c8:3f:1f:47:51:9e:e7:d0:25:7c:da:f5:f1:
e7:5f:a1:f5:c7:56:07:8a:bf:68:c8:e0:d4:cc:10:fc:c3:3a:
1b:61:af:db:4f:7f:b4:99:59:c8:bc:5c:05:70:db:95:44:20:
32:78:8c:d9:65:e0:d9:9c:0e:62:92:d1:34:75:11:15:fa:26:
6d:c2:0c:ef:9f:82:9d:0c:0f:64:56:fe:4c:8e:7e:88:4c:fb:
0d:07:6e:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4bL3fLqLzSXLX5rK77mcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NDU2NTc5YTUxNzJmY2EwOGUwNDNiMDJiYjk3MmZiNzUw
M2FlYWYwHhcNMjUxMTA0MDgwMDI4WhcNMjUxMTA1MDgwMDI4WjAzMTEwLwYDVQQD
Eyg5MTExYTA5YTU0OWEwMTBiMjI2ZDk1OThiYzljNmNkYTRkY2I1ZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09O7vdFt75MsLU+hIDGeiFOvacft
OnETBfH7GgRHn4Wtkpdgj7aV/HzyE+WVrUUDEXfzdzP0GkIWeZ4mpuZzu6Ciqd9W
C1guYJoxyEbpRT8e48KdTgSFTIrCElXtNHeozyW4sMmDqW1FMNalgWaBDOAq+DTp
esMMo3bSNcOtKTeAR+kfUPrR1gAmtlqDPl5x1OUmwvxJ0myu2BU3YbLwLGfMoNjP
YxtvFWgwCFJlKFMc+ccXBdRtx1qsn+qgAto6kVrY9mTUlK6q91UCwr/7pIg46Pn0
L+UGTz5Y9isB2DLGD/1VFYhzGbZwGpTiZ7jzprIidX1SY62MX0vzKTBz/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJERoJpUmgELIm2VmLycbNpNy12DMB8GA1UdIwQY
MBaAFEZFZXmlFy/KCOBDsCu5cvt1A66vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmtWbGVhVVhMOG9JNEVPd0s3bHktM1VEcnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lYzllMjYtMjBmMi00ZTIzLWEwOGYt
YTM0Yzg1NWI1YWFiLzEvUmtWbGVhVVhMOG9JNEVPd0s3bHktM1VEcnE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lYzllMjYtMjBmMi00ZTIzLWEwOGYtYTM0Yzg1NWI1YWFi
LzEvUmtWbGVhVVhMOG9JNEVPd0s3bHktM1VEcnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0r+9kOv
sYMuhoq1bAhVs8QYGHzVl5hfpGmCbVWSRNJdXiEYV5sU4+E56hyJBTiTnFfZ0cL2
hRxrCEBU5pFrwrGxmQc9qncXNUKs5QGQgTvOsvYaXw6zFAAfl23clQxvlOUL9ZoI
BSU7lb08MGH4vtgDqfSpaDNDoekszH+pfU7rPRR92JYY+wmMkr7AxgV8aJPQuCqy
nv9GtMciwAFhSO/QPbrV4VvIPx9HUZ7n0CV82vXx51+h9cdWB4q/aMjg1MwQ/MM6
G2Gv209/tJlZyLxcBXDblUQgMniM2WXg2ZwOYpLRNHURFfombcIM75+CnQwPZFb+
TI5+iEz7DQduUQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:20 2025 by rpki-client