Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
File: t72OrhZp3rOj-kGGSR4FyzLOCSo.mft (raw, json)
Hash identifier: Kh6tWaKlqTbn5ie8H6t3m0u6hbH9XBBFM+mYigQRxh0=
Subject key identifier: 89:1C:6B:04:3F:7E:DA:16:08:59:08:21:7C:A9:50:8B:BF:86:99:70
Authority key identifier: B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
Certificate issuer: /CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Certificate serial: 019A4EF5E573EB4F92A84216C4A6C063CF38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
Manifest number: 11CB
Signing time: Tue 04 Nov 2025 13:02:09 +0000
Manifest this update: Tue 04 Nov 2025 13:02:09 +0000
Manifest next update: Wed 05 Nov 2025 13:02:09 +0000
Files and hashes: 1: 0CceuujOUN7fI6SJWiU4I3JvZeo.roa (hash: ReNIag9nA9bjr82rfcj5JjzPGdjpj3RK7GRwiAamY6Q=)
2: t72OrhZp3rOj-kGGSR4FyzLOCSo.crl (hash: tC7QRSqta+VjLISEvvRL7boaEUBFMyXN0afQ8CTl54U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e5:73:eb:4f:92:a8:42:16:c4:a6:c0:63:cf:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Validity
Not Before: Nov 4 13:02:09 2025 GMT
Not After : Nov 5 13:02:09 2025 GMT
Subject: CN=891c6b043f7eda16085908217ca9508bbf869970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7d:6c:a1:74:9b:a8:96:7f:4a:67:fd:35:02:
c9:b7:c9:dc:60:cf:17:ee:0f:ce:f2:cc:c5:e0:20:
0f:6c:cf:10:38:b7:96:c0:9f:cb:6f:5c:ce:12:aa:
14:3d:91:23:38:08:02:ff:83:ad:ad:28:a0:cf:03:
c3:26:65:ea:8a:bc:d4:c6:5c:24:1d:5b:f1:66:a3:
b3:a3:0e:5a:90:d3:46:96:15:2a:ca:ab:4d:68:38:
f5:4a:31:1e:d7:44:88:b2:99:f2:4c:64:25:86:e8:
39:1f:31:85:f8:00:70:6a:58:f4:1c:63:7c:f0:40:
07:50:13:c2:74:e8:4f:f0:82:d5:e2:0b:e2:22:10:
98:d0:9a:3c:03:d7:d9:be:bc:47:d1:9a:21:1b:91:
77:c5:01:b6:d1:0c:9e:52:61:67:df:c6:d3:89:a7:
73:18:e0:27:8e:a2:5d:fc:d0:8c:26:1b:f4:e6:0d:
33:c3:b4:f5:5c:46:40:7a:b3:74:d0:7e:d8:15:e9:
84:e1:17:dc:45:83:2f:d0:7f:71:2e:a0:f9:ea:bb:
9b:61:20:6f:f7:ca:fe:e7:1d:77:c0:fb:e0:c0:54:
ec:bf:3e:a8:03:c8:96:ff:11:16:96:a0:14:23:a1:
a6:5c:77:d4:f8:9e:c7:d8:a3:38:b7:af:7c:5b:5e:
4b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1C:6B:04:3F:7E:DA:16:08:59:08:21:7C:A9:50:8B:BF:86:99:70
X509v3 Authority Key Identifier:
keyid:B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0c:fa:d4:ed:66:47:35:6b:3c:91:15:86:a4:b8:f3:24:9b:
45:1b:40:17:af:2a:4c:c8:bc:22:db:24:98:28:92:0d:0f:77:
7f:11:e3:e1:fb:c0:71:bb:11:be:21:3a:74:c7:9a:b7:63:b9:
a9:a8:86:3c:73:35:74:d3:32:11:5f:ed:8b:08:28:ed:36:96:
fc:cb:5a:81:9b:c4:c7:c9:3b:17:c2:c9:e6:24:68:2f:d2:48:
78:37:b2:06:b7:a6:5b:e6:c1:5a:73:84:08:06:b4:4a:84:20:
11:51:21:9e:31:d5:be:73:86:ef:f4:c2:0b:f4:97:d3:50:18:
c6:33:4c:e6:e4:58:a5:9e:6f:60:f7:32:93:5f:10:8d:5d:7e:
bc:c7:84:52:24:5d:d6:c0:23:97:b0:2e:88:02:48:e9:fa:5a:
ce:04:12:4e:83:30:07:c5:1d:bc:b0:06:25:14:0d:90:ca:75:
ce:9c:e6:ed:6a:31:ac:50:8c:4f:40:ee:30:c1:6d:45:a9:d1:
fb:20:8a:95:3c:a4:d7:55:ce:d3:9f:60:b7:94:b1:16:dc:39:
ff:b6:0b:9a:22:61:8b:9f:97:e6:7e:32:41:58:c3:0e:81:9e:
8e:23:c3:71:b6:3d:9f:61:aa:b8:ee:32:d5:71:b7:de:39:0c:
9d:f1:9d:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9eVz60+SqEIWxKbAY884MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YmQ4ZWFlMTY2OWRlYjNhM2ZhNDE4NjQ5MWUwNWNiMzJj
ZTA5MmEwHhcNMjUxMTA0MTMwMjA5WhcNMjUxMTA1MTMwMjA5WjAzMTEwLwYDVQQD
Eyg4OTFjNmIwNDNmN2VkYTE2MDg1OTA4MjE3Y2E5NTA4YmJmODY5OTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn1soXSbqJZ/Smf9NQLJt8ncYM8X
7g/O8szF4CAPbM8QOLeWwJ/Lb1zOEqoUPZEjOAgC/4OtrSigzwPDJmXqirzUxlwk
HVvxZqOzow5akNNGlhUqyqtNaDj1SjEe10SIspnyTGQlhug5HzGF+ABwalj0HGN8
8EAHUBPCdOhP8ILV4gviIhCY0Jo8A9fZvrxH0ZohG5F3xQG20QyeUmFn38bTiadz
GOAnjqJd/NCMJhv05g0zw7T1XEZAerN00H7YFemE4RfcRYMv0H9xLqD56rubYSBv
98r+5x13wPvgwFTsvz6oA8iW/xEWlqAUI6GmXHfU+J7H2KM4t698W15LtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkcawQ/ftoWCFkIIXypUIu/hplwMB8GA1UdIwQY
MBaAFLe9jq4Wad6zo/pBhkkeBcsyzgkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDcyT3JoWnAzck9qLWtHR1NSNEZ5ekxPQ1NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iMGJkYmQtODAxYy00YjBiLTlmYmUt
YWUxNWQ1MDc1OTBlLzEvdDcyT3JoWnAzck9qLWtHR1NSNEZ5ekxPQ1NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iMGJkYmQtODAxYy00YjBiLTlmYmUtYWUxNWQ1MDc1OTBl
LzEvdDcyT3JoWnAzck9qLWtHR1NSNEZ5ekxPQ1NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgz61O1m
RzVrPJEVhqS48ySbRRtAF68qTMi8ItskmCiSDQ93fxHj4fvAcbsRviE6dMeat2O5
qaiGPHM1dNMyEV/tiwgo7TaW/MtagZvEx8k7F8LJ5iRoL9JIeDeyBremW+bBWnOE
CAa0SoQgEVEhnjHVvnOG7/TCC/SX01AYxjNM5uRYpZ5vYPcyk18QjV1+vMeEUiRd
1sAjl7AuiAJI6fpazgQSToMwB8UdvLAGJRQNkMp1zpzm7WoxrFCMT0DuMMFtRanR
+yCKlTyk11XO059gt5SxFtw5/7YLmiJhi5+X5n4yQVjDDoGejiPDcbY9n2GquO4y
1XG33jkMnfGdAQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:40 2025 by rpki-client