Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
File: rpPMjMqB-gDcU-e4B46RtcEbou8.mft (raw, json)
Hash identifier: Dldwtm9CYFFxyRpoHlvQosGiwIIie5LKjk+PNeH4Jh4=
Subject key identifier: 68:EB:7A:BE:6A:B7:85:56:6C:70:03:93:6E:CD:AF:DE:F5:FA:3F:DA
Authority key identifier: AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
Certificate issuer: /CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Certificate serial: 019A4D73FD6051A6FA57B2BC4FE1DA5FDEE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
Manifest number: 1215
Signing time: Tue 04 Nov 2025 06:00:38 +0000
Manifest this update: Tue 04 Nov 2025 06:00:38 +0000
Manifest next update: Wed 05 Nov 2025 06:00:38 +0000
Files and hashes: 1: crHez21ajs4tpxPy7D0FO2U5bxU.roa (hash: gCTLggUH/wf+1HoWxwo5Fpy8idWpj7d4gVSkhA0S2qM=)
2: rpPMjMqB-gDcU-e4B46RtcEbou8.crl (hash: jhAS1WBEdm8umFnpH6sRDN9G2Q5VzfUWqzQeua5GqVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:fd:60:51:a6:fa:57:b2:bc:4f:e1:da:5f:de:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Validity
Not Before: Nov 4 06:00:38 2025 GMT
Not After : Nov 5 06:00:38 2025 GMT
Subject: CN=68eb7abe6ab785566c7003936ecdafdef5fa3fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:ec:10:5c:d4:1b:ff:12:bd:a0:62:5f:b5:
e6:34:e6:e9:95:f4:12:c5:b4:fc:21:20:e6:ad:fe:
86:76:5a:c2:54:68:ab:75:66:36:82:db:16:16:bf:
6f:8a:7b:a1:db:9e:cc:2a:63:8c:f9:ea:4c:55:3a:
6a:50:33:40:cd:d9:c1:8a:26:af:20:81:49:76:9b:
50:46:08:ac:4f:37:6c:1a:af:46:70:29:30:84:94:
05:2f:9b:f0:4b:76:6f:4a:b9:b0:c5:1b:93:5d:68:
82:7c:eb:6e:66:26:55:93:15:ce:b9:05:74:09:cf:
e8:71:e2:b7:23:d7:c1:27:15:ac:40:7a:33:e9:b9:
7f:b3:2e:d3:bf:71:aa:31:86:d8:38:0e:0c:de:56:
15:06:3b:9c:44:f7:be:82:27:aa:bf:40:f7:3b:1c:
b9:11:fe:1d:a5:79:37:a4:7c:9c:07:04:b3:f2:46:
89:78:d7:85:47:2d:38:54:0d:2c:9f:00:32:68:05:
7b:fc:43:20:dd:cd:a4:b5:2b:65:59:6d:e3:c5:a6:
59:ea:63:2b:52:7b:9e:ea:80:6a:53:d9:f4:df:6a:
2b:29:81:41:7a:21:a0:3a:11:ef:20:69:15:00:54:
60:f7:5a:5b:b7:de:05:2b:ed:69:bb:5d:1f:46:16:
ce:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EB:7A:BE:6A:B7:85:56:6C:70:03:93:6E:CD:AF:DE:F5:FA:3F:DA
X509v3 Authority Key Identifier:
keyid:AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:71:32:e3:12:22:cd:3e:d2:22:c6:31:d7:8e:aa:63:95:cf:
74:fa:d1:42:74:02:f2:20:8a:f7:f8:4f:fd:68:a2:83:da:1c:
12:e6:76:e6:67:14:57:64:b5:cd:04:1d:3e:81:c6:bc:cb:90:
d3:51:d3:63:d5:2d:59:87:36:d8:36:8f:bb:bf:6b:2b:0c:e4:
d3:e6:30:53:4d:d9:42:33:cd:6f:15:5f:12:1f:f9:a7:05:7a:
7e:2c:2c:41:84:e6:f4:ba:4a:1b:11:90:56:63:c6:c5:5a:90:
a4:02:fe:bf:19:65:95:4c:d7:89:ac:96:f7:81:4f:c0:e0:08:
81:a6:e5:95:5e:45:57:e2:f3:05:e6:e5:10:30:0f:44:3f:c9:
b0:7b:21:8b:8a:20:dc:b4:88:14:3b:0d:f0:a6:6e:c0:48:12:
49:1e:42:84:bf:5f:84:94:4c:55:7c:71:87:4a:91:e0:82:44:
d2:2b:f8:4e:bd:f0:08:2c:42:52:a2:d7:bf:1f:55:70:13:77:
99:e3:82:5a:e9:a0:9d:80:51:93:47:17:b2:c0:16:a2:9d:a4:
f5:63:d0:ce:96:92:da:cc:64:88:de:4e:d3:f4:fe:c4:c1:59:
89:2e:47:5e:84:bf:3e:5e:40:4e:f7:d5:c3:49:07:ee:d3:9d:
16:74:7f:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc/1gUab6V7K8T+HaX97kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlOTNjYzhjY2E4MWZhMDBkYzUzZTdiODA3OGU5MWI1YzEx
YmEyZWYwHhcNMjUxMTA0MDYwMDM4WhcNMjUxMTA1MDYwMDM4WjAzMTEwLwYDVQQD
Eyg2OGViN2FiZTZhYjc4NTU2NmM3MDAzOTM2ZWNkYWZkZWY1ZmEzZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuLsEFzUG/8SvaBiX7XmNObplfQS
xbT8ISDmrf6GdlrCVGirdWY2gtsWFr9vinuh257MKmOM+epMVTpqUDNAzdnBiiav
IIFJdptQRgisTzdsGq9GcCkwhJQFL5vwS3ZvSrmwxRuTXWiCfOtuZiZVkxXOuQV0
Cc/oceK3I9fBJxWsQHoz6bl/sy7Tv3GqMYbYOA4M3lYVBjucRPe+gieqv0D3Oxy5
Ef4dpXk3pHycBwSz8kaJeNeFRy04VA0snwAyaAV7/EMg3c2ktStlWW3jxaZZ6mMr
Unue6oBqU9n032orKYFBeiGgOhHvIGkVAFRg91pbt94FK+1pu10fRhbOMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjrer5qt4VWbHADk27Nr971+j/aMB8GA1UdIwQY
MBaAFK6TzIzKgfoA3FPnuAeOkbXBG6LvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnBQTWpNcUItZ0RjVS1lNEI0NlJ0Y0Vib3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xNzk4OTEtNDFjYy00YWEwLWFiNjgt
ZjQwNmM4M2IzZmJhLzEvcnBQTWpNcUItZ0RjVS1lNEI0NlJ0Y0Vib3U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xNzk4OTEtNDFjYy00YWEwLWFiNjgtZjQwNmM4M2IzZmJh
LzEvcnBQTWpNcUItZ0RjVS1lNEI0NlJ0Y0Vib3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinEy4xIi
zT7SIsYx146qY5XPdPrRQnQC8iCK9/hP/Wiig9ocEuZ25mcUV2S1zQQdPoHGvMuQ
01HTY9UtWYc22DaPu79rKwzk0+YwU03ZQjPNbxVfEh/5pwV6fiwsQYTm9LpKGxGQ
VmPGxVqQpAL+vxlllUzXiayW94FPwOAIgabllV5FV+LzBeblEDAPRD/JsHshi4og
3LSIFDsN8KZuwEgSSR5ChL9fhJRMVXxxh0qR4IJE0iv4Tr3wCCxCUqLXvx9VcBN3
meOCWumgnYBRk0cXssAWop2k9WPQzpaS2sxkiN5O0/T+xMFZiS5HXoS/Pl5ATvfV
w0kH7tOdFnR/DA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:50 2025 by rpki-client