Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: ioUCjsJBwrCdVIezum9HWYec5rcfgl5aCgWy/cS1kTM=
Subject key identifier: 1A:BE:81:C6:EE:DA:F6:D0:15:0A:D8:0E:9B:53:E3:03:F7:B0:56:C2
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 019A50749E901500FF6EC7623A3CCD98AE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 067E
Signing time: Tue 04 Nov 2025 20:00:11 +0000
Manifest this update: Tue 04 Nov 2025 20:00:11 +0000
Manifest next update: Wed 05 Nov 2025 20:00:11 +0000
Files and hashes: 1: ADwJyFTnSoqJo76cybY4gze7w-A.roa (hash: ywnZb2Gs7P4sK9InqI7FaEEZlSRwjtQHnM1qlayDDgw=)
2: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: kHCQryNUhHDGJIWVc4fQkXkey+dGdOoYbJokhb8P7CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:9e:90:15:00:ff:6e:c7:62:3a:3c:cd:98:ae:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Nov 4 20:00:11 2025 GMT
Not After : Nov 5 20:00:11 2025 GMT
Subject: CN=1abe81c6eedaf6d0150ad80e9b53e303f7b056c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:a8:5e:c8:96:40:e6:55:68:f2:69:72:87:
b8:1d:1a:24:71:54:1c:14:c5:b5:96:9f:16:36:cc:
50:ac:45:38:50:93:9f:de:fc:c3:8c:15:6b:a5:4d:
1f:30:9e:d2:04:75:3a:be:c2:44:f6:73:80:d2:81:
0b:d6:65:2b:43:67:d3:14:19:40:89:d4:41:d5:a9:
6f:c2:cb:3c:8c:37:61:2b:d2:6e:48:ff:33:5b:94:
2c:54:b7:f7:5c:fc:49:aa:d8:7f:ac:b7:a9:0e:8b:
eb:90:5e:a0:2b:e8:7f:b4:2e:83:bd:99:2f:f8:7b:
11:70:f8:85:9b:db:f9:3d:13:2e:60:21:01:76:c9:
e0:cf:7d:14:98:bf:2f:5c:51:04:d1:5a:00:6c:df:
33:02:eb:02:a3:86:53:61:3b:eb:0c:f8:12:24:50:
c1:dd:b8:4e:4e:f2:5e:e7:df:d5:c5:c8:64:b3:c0:
15:e3:d8:44:79:c6:81:69:c1:7e:7d:9f:6d:e7:09:
69:fe:8f:8d:88:ea:c0:cb:6b:8d:39:ec:e8:fa:97:
57:02:b7:2f:b7:0d:9e:a9:5f:22:0b:df:9f:00:7b:
30:98:1c:ec:84:29:da:5a:79:5f:45:7d:87:8d:80:
5a:57:65:88:36:86:8c:96:45:65:b3:21:c1:ba:ca:
40:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BE:81:C6:EE:DA:F6:D0:15:0A:D8:0E:9B:53:E3:03:F7:B0:56:C2
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:35:ce:f8:65:36:f9:10:09:82:d7:b2:c3:37:b3:98:97:67:
5c:a1:95:37:24:8e:79:f1:fa:b5:5b:e8:a4:73:94:e9:65:00:
04:4c:19:a1:52:3d:84:81:23:fc:20:72:79:b3:64:d3:db:b5:
e5:dd:02:8b:a8:cb:4b:97:26:78:e8:f1:04:76:90:fe:bd:55:
a4:95:1a:8e:9a:56:67:ec:60:36:e8:5d:a8:0c:c7:15:b1:f2:
d3:f0:8b:1b:ff:54:aa:2f:b2:9f:83:88:9c:4a:42:f4:00:d0:
c5:98:4a:f8:22:00:b5:69:52:ab:d0:11:c9:64:12:03:eb:7e:
7f:b5:81:4a:fb:33:23:e3:4f:5d:c8:15:9b:56:6c:1a:5b:c4:
e1:d6:b8:58:78:c2:3d:0e:af:95:d3:24:ab:1f:db:65:d4:90:
8f:06:b6:f1:a5:25:5a:c6:6c:a2:fb:c6:07:2c:58:25:7e:27:
46:c0:10:4e:63:e6:4c:9e:f4:a0:ec:6d:be:ea:4c:d1:57:72:
62:c1:d7:af:8d:e1:ba:19:22:c5:70:25:04:93:bd:7f:1c:b9:
d4:fb:82:7f:03:f5:ee:cd:44:2d:06:f2:1a:a4:bc:04:a7:d7:
18:e5:fc:1c:ef:48:45:d5:d0:be:cd:5d:5f:d7:33:68:3e:b6:
d6:1d:6c:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdJ6QFQD/bsdiOjzNmK5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NTc4N2U2NWViNGZjZDY2ZTMzNDBiNjJhZGU0N2NhMDA5
MTlkY2UwHhcNMjUxMTA0MjAwMDExWhcNMjUxMTA1MjAwMDExWjAzMTEwLwYDVQQD
EygxYWJlODFjNmVlZGFmNmQwMTUwYWQ4MGU5YjUzZTMwM2Y3YjA1NmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWCoXsiWQOZVaPJpcoe4HRokcVQc
FMW1lp8WNsxQrEU4UJOf3vzDjBVrpU0fMJ7SBHU6vsJE9nOA0oEL1mUrQ2fTFBlA
idRB1alvwss8jDdhK9JuSP8zW5QsVLf3XPxJqth/rLepDovrkF6gK+h/tC6DvZkv
+HsRcPiFm9v5PRMuYCEBdsngz30UmL8vXFEE0VoAbN8zAusCo4ZTYTvrDPgSJFDB
3bhOTvJe59/Vxchks8AV49hEecaBacF+fZ9t5wlp/o+NiOrAy2uNOezo+pdXArcv
tw2eqV8iC9+fAHswmBzshCnaWnlfRX2HjYBaV2WINoaMlkVlsyHBuspAewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBq+gcbu2vbQFQrYDptT4wP3sFbCMB8GA1UdIwQY
MBaAFAhXh+ZetPzWbjNAtireR8oAkZ3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kMmJiZjYtM2I2OS00NDJlLWI0OTAt
N2U1NGMzMmFiZWQ4LzEvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9kMmJiZjYtM2I2OS00NDJlLWI0OTAtN2U1NGMzMmFiZWQ4
LzEvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODXO+GU2
+RAJgteywzezmJdnXKGVNySOefH6tVvopHOU6WUABEwZoVI9hIEj/CByebNk09u1
5d0Ci6jLS5cmeOjxBHaQ/r1VpJUajppWZ+xgNuhdqAzHFbHy0/CLG/9Uqi+yn4OI
nEpC9ADQxZhK+CIAtWlSq9ARyWQSA+t+f7WBSvszI+NPXcgVm1ZsGlvE4da4WHjC
PQ6vldMkqx/bZdSQjwa28aUlWsZsovvGByxYJX4nRsAQTmPmTJ70oOxtvupM0Vdy
YsHXr43huhkixXAlBJO9fxy51PuCfwP17s1ELQbyGqS8BKfXGOX8HO9IRdXQvs1d
X9czaD621h1sJA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:15:20 2025 by rpki-client