Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
File: adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json)
Hash identifier: uojyGvRcXMv1RuBLd29zfgIVoUf2zgQniedmn6A2oHU=
Subject key identifier: 82:F8:83:9A:8E:51:86:65:7F:70:66:0D:FA:18:17:09:B5:B4:5E:11
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Certificate issuer: /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial: 019A4F2AF0D475C65580D9632D49FBEC4215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
Manifest number: 104C
Signing time: Tue 04 Nov 2025 14:00:05 +0000
Manifest this update: Tue 04 Nov 2025 14:00:05 +0000
Manifest next update: Wed 05 Nov 2025 14:00:05 +0000
Files and hashes: 1: OTybeQSqUNtNYhW7lIqMu8Xbs9U.roa (hash: qhQfPgHQL0RGn7gt2AnYjMV/XyhTZwosQOVt3JjZawg=)
2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: n+O3DEP2h4h3WlhTmXu0pRONuiQYLvgO/1NNlwO3eMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:f0:d4:75:c6:55:80:d9:63:2d:49:fb:ec:42:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Validity
Not Before: Nov 4 14:00:05 2025 GMT
Not After : Nov 5 14:00:05 2025 GMT
Subject: CN=82f8839a8e5186657f70660dfa181709b5b45e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:53:83:4b:dc:81:ee:98:d1:68:50:5f:e0:
a6:09:f8:e0:6b:07:e2:22:b0:bb:f1:81:bd:6a:98:
04:ab:2a:a8:6e:c7:4b:aa:20:17:59:a9:6e:43:af:
c4:5c:5f:b7:69:45:ab:50:b3:79:27:78:75:4f:f6:
a2:f1:b0:c4:f6:02:5f:ad:c4:82:1c:d6:63:45:93:
ea:14:9b:7f:40:76:f8:45:92:01:09:f1:80:a6:08:
f4:d6:28:d9:f2:ed:89:43:0e:7e:b7:62:94:e5:c1:
b1:22:ca:6a:a4:69:67:1a:22:68:c5:68:38:82:52:
1a:86:0d:ee:d6:81:ea:09:7d:74:ed:58:c5:3f:9f:
70:f1:66:8c:86:3c:3a:28:db:7a:9b:79:5f:2a:a0:
81:fc:ec:8d:1e:2e:18:4a:8e:6b:ab:73:cc:73:b4:
b5:93:d3:70:2a:7c:3e:9e:58:b9:51:f4:0a:92:64:
72:e6:ef:cc:52:6a:1e:36:4d:53:ca:78:f9:1a:33:
55:17:df:21:8a:9e:aa:02:5a:1f:24:ef:77:ac:a9:
d6:31:7a:00:4c:8b:df:67:69:e7:a9:21:ff:ff:cb:
15:df:fe:5b:3c:73:99:68:ed:53:08:bd:d9:b7:24:
f8:b9:51:be:60:2e:e9:78:b8:d6:1d:68:67:b7:a1:
25:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F8:83:9A:8E:51:86:65:7F:70:66:0D:FA:18:17:09:B5:B4:5E:11
X509v3 Authority Key Identifier:
keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a3:df:52:96:f1:b2:08:3f:03:c6:fb:f7:32:ca:f9:98:c0:
c7:ee:b8:e4:92:ca:c3:89:ba:66:f8:51:65:37:d4:fd:4a:ad:
ed:37:1f:ed:49:98:88:75:fa:29:9e:af:d0:d5:3d:47:e4:77:
61:84:ff:be:56:62:ed:64:f8:ea:64:35:e6:41:9c:1d:3c:84:
1c:10:06:5b:04:f1:92:90:fb:ff:a9:a3:a4:5e:c4:c9:21:78:
b9:89:ba:ac:14:04:bf:dc:7d:bc:6a:b4:f7:d7:b7:33:04:68:
2e:f8:ab:51:5c:88:3d:1e:76:a0:d3:74:16:f7:30:19:68:8b:
98:70:44:dd:06:78:f5:81:52:5b:64:3c:da:48:d6:67:7d:c2:
a8:03:35:cb:37:e0:5e:a1:45:fa:d8:9e:a2:4b:c1:43:d6:56:
78:e3:d7:72:b7:15:f9:3e:ea:21:19:64:cc:19:19:be:16:99:
c4:57:e6:13:8c:b5:54:7b:cb:d9:09:c3:97:a1:92:c4:dd:11:
ab:55:79:06:64:b5:78:c1:b1:19:70:01:2c:d0:85:e9:7f:f9:
0e:4a:70:3a:cc:89:c2:2a:56:65:b2:6b:ff:51:89:4e:ae:e5:
dd:90:e9:af:32:52:00:e1:a9:76:43:e3:15:2e:da:b4:af:a9:
b7:06:18:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKvDUdcZVgNljLUn77EIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDYwNDg1NzFkODdlYWJjNGJlZDFhN2NkZmY4MzU4N2Zi
ODk2NjQwHhcNMjUxMTA0MTQwMDA1WhcNMjUxMTA1MTQwMDA1WjAzMTEwLwYDVQQD
Eyg4MmY4ODM5YThlNTE4NjY1N2Y3MDY2MGRmYTE4MTcwOWI1YjQ1ZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxVTg0vcge6Y0WhQX+CmCfjgawfi
IrC78YG9apgEqyqobsdLqiAXWaluQ6/EXF+3aUWrULN5J3h1T/ai8bDE9gJfrcSC
HNZjRZPqFJt/QHb4RZIBCfGApgj01ijZ8u2JQw5+t2KU5cGxIspqpGlnGiJoxWg4
glIahg3u1oHqCX107VjFP59w8WaMhjw6KNt6m3lfKqCB/OyNHi4YSo5rq3PMc7S1
k9NwKnw+nli5UfQKkmRy5u/MUmoeNk1Tynj5GjNVF98hip6qAlofJO93rKnWMXoA
TIvfZ2nnqSH//8sV3/5bPHOZaO1TCL3ZtyT4uVG+YC7peLjWHWhnt6ElbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIL4g5qOUYZlf3BmDfoYFwm1tF4RMB8GA1UdIwQY
MBaAFGnWBIVx2H6rxL7Rp83/g1h/uJZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xMWNkZjItY2EzMC00NzE4LWFjODAt
ZjE5NmZkMGE0OTdiLzEvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xMWNkZjItY2EzMC00NzE4LWFjODAtZjE5NmZkMGE0OTdi
LzEvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6PfUpbx
sgg/A8b79zLK+ZjAx+645JLKw4m6ZvhRZTfU/Uqt7Tcf7UmYiHX6KZ6v0NU9R+R3
YYT/vlZi7WT46mQ15kGcHTyEHBAGWwTxkpD7/6mjpF7EySF4uYm6rBQEv9x9vGq0
99e3MwRoLvirUVyIPR52oNN0FvcwGWiLmHBE3QZ49YFSW2Q82kjWZ33CqAM1yzfg
XqFF+tieokvBQ9ZWeOPXcrcV+T7qIRlkzBkZvhaZxFfmE4y1VHvL2QnDl6GSxN0R
q1V5BmS1eMGxGXABLNCF6X/5DkpwOsyJwipWZbJr/1GJTq7l3ZDprzJSAOGpdkPj
FS7atK+ptwYYfg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:15 2025 by rpki-client