Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
File: v60IrIYttq4LsLiArsBV7by7gvw.mft (raw, json)
Hash identifier: Bve7FhJ6F47Mv5+QLhhm4+w5MBTLI046XvoPx/hq4ow=
Subject key identifier: D3:9E:5C:24:BE:8B:9E:C5:0D:B1:CA:68:A8:7B:66:8F:32:48:B5:3A
Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
Certificate issuer: /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Certificate serial: 019A4D076679959CE45186C9AFE314A81C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
Manifest number: 0EE6
Signing time: Tue 04 Nov 2025 04:02:01 +0000
Manifest this update: Tue 04 Nov 2025 04:02:01 +0000
Manifest next update: Wed 05 Nov 2025 04:02:01 +0000
Files and hashes: 1: CZZ5ipuaAOE-Yr5zJDMCRrkyVSA.roa (hash: iFc83ywiMJmrxS1NXOM6QWOY3OsVmvxahP4mNSEaMZM=)
2: v60IrIYttq4LsLiArsBV7by7gvw.crl (hash: WVfZHI3ogE1Ej/s30a9Sh4urFXGcpojLYsyAJiqjcos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:66:79:95:9c:e4:51:86:c9:af:e3:14:a8:1c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Validity
Not Before: Nov 4 04:02:01 2025 GMT
Not After : Nov 5 04:02:01 2025 GMT
Subject: CN=d39e5c24be8b9ec50db1ca68a87b668f3248b53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:b2:81:cc:6f:51:c6:d5:6a:e6:b8:6a:7a:
37:4f:ed:d7:19:86:25:c9:a5:cd:06:11:55:42:d5:
ed:f8:79:3c:1c:60:ab:c9:fa:ce:4d:b7:8e:df:f9:
0a:05:4e:f9:5f:1b:62:56:3e:a0:0e:45:74:b2:22:
1b:d3:5c:02:4a:04:84:12:27:e4:74:3c:e4:09:88:
fb:d2:a2:e8:cb:2a:44:88:eb:a1:38:78:29:d5:29:
54:51:46:81:6c:2c:75:7c:50:ee:3f:c0:32:6c:8e:
21:c2:b6:32:3c:96:e9:69:07:82:40:88:f0:9b:48:
0c:9f:98:ae:3d:cf:af:bd:32:2f:9f:77:e8:2c:45:
dd:7a:a3:45:76:0b:81:59:65:10:7e:11:94:03:36:
e1:41:ac:b5:d5:98:fe:b0:da:a2:1f:42:8b:1c:65:
69:15:32:21:76:6d:a2:36:b8:05:5e:36:72:fd:52:
02:da:07:56:fd:3a:15:c9:e9:b0:37:86:46:c5:be:
f5:23:ae:f6:e8:17:56:24:b4:be:75:72:95:4f:12:
0b:97:0c:2b:6f:43:b6:b9:d0:d3:04:09:56:0f:12:
eb:89:24:a3:c2:8f:09:32:eb:b9:5e:50:de:fa:f0:
24:db:c2:52:9c:eb:f8:7d:c9:63:81:ab:e2:90:45:
5f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9E:5C:24:BE:8B:9E:C5:0D:B1:CA:68:A8:7B:66:8F:32:48:B5:3A
X509v3 Authority Key Identifier:
keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c1:14:a6:a9:44:cd:c7:30:f0:9c:6d:26:4b:ec:17:4d:27:
b7:f7:98:92:e3:71:30:a5:3e:4c:fc:ef:4c:a6:3f:f7:d0:23:
3f:76:20:d0:8a:0e:9d:78:5a:3c:31:7a:42:03:72:ce:1c:a3:
11:ba:1f:b0:60:1b:f5:73:ae:fc:3f:1e:29:9e:4e:06:79:b1:
ea:22:15:4f:87:49:ff:31:21:d6:f6:54:b4:52:22:d6:60:8d:
ff:07:a0:f4:36:be:50:02:67:e6:d9:89:c1:fe:ea:51:87:ee:
02:89:d6:cf:d5:87:27:4e:43:f0:f5:66:d9:fd:18:86:ea:e6:
df:47:b0:ba:f5:44:4f:00:e7:d1:55:74:f3:1b:be:43:a5:1a:
85:98:1c:3f:14:6f:f3:31:3c:e8:22:a2:47:7f:34:45:9e:b7:
73:db:de:bd:bb:0e:6c:f1:62:9a:87:19:c2:b6:57:e9:7f:f0:
0d:ea:4e:e4:b5:2f:0d:08:62:0f:c0:d7:1a:19:79:d4:60:64:
50:5c:51:d1:dd:30:32:49:c0:cf:e4:5a:04:b2:e0:a0:9a:6d:
f6:6f:38:d6:ca:b8:46:4d:f5:37:74:e5:31:54:5c:ed:cf:23:
12:b4:02:95:c1:37:88:4c:09:b9:01:ee:a7:a0:91:23:42:b8:
3c:87:61:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNB2Z5lZzkUYbJr+MUqBx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYWQwOGFjODYyZGI2YWUwYmIwYjg4MGFlYzA1NWVkYmNi
YjgyZmMwHhcNMjUxMTA0MDQwMjAxWhcNMjUxMTA1MDQwMjAxWjAzMTEwLwYDVQQD
EyhkMzllNWMyNGJlOGI5ZWM1MGRiMWNhNjhhODdiNjY4ZjMyNDhiNTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GaygcxvUcbVaua4ano3T+3XGYYl
yaXNBhFVQtXt+Hk8HGCryfrOTbeO3/kKBU75XxtiVj6gDkV0siIb01wCSgSEEifk
dDzkCYj70qLoyypEiOuhOHgp1SlUUUaBbCx1fFDuP8AybI4hwrYyPJbpaQeCQIjw
m0gMn5iuPc+vvTIvn3foLEXdeqNFdguBWWUQfhGUAzbhQay11Zj+sNqiH0KLHGVp
FTIhdm2iNrgFXjZy/VIC2gdW/ToVyemwN4ZGxb71I6726BdWJLS+dXKVTxILlwwr
b0O2udDTBAlWDxLriSSjwo8JMuu5XlDe+vAk28JSnOv4fcljgavikEVfTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOeXCS+i57FDbHKaKh7Zo8ySLU6MB8GA1UdIwQY
MBaAFL+tCKyGLbauC7C4gK7AVe28u4L8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNWRjNjEtODgyYi00NjM2LWFmZjEt
MWZiM2Y4MTc2MDhmLzEvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kNWRjNjEtODgyYi00NjM2LWFmZjEtMWZiM2Y4MTc2MDhm
LzEvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsEUpqlE
zccw8JxtJkvsF00nt/eYkuNxMKU+TPzvTKY/99AjP3Yg0IoOnXhaPDF6QgNyzhyj
EbofsGAb9XOu/D8eKZ5OBnmx6iIVT4dJ/zEh1vZUtFIi1mCN/weg9Da+UAJn5tmJ
wf7qUYfuAonWz9WHJ05D8PVm2f0Yhurm30ewuvVETwDn0VV08xu+Q6UahZgcPxRv
8zE86CKiR380RZ63c9vevbsObPFimocZwrZX6X/wDepO5LUvDQhiD8DXGhl51GBk
UFxR0d0wMknAz+RaBLLgoJpt9m841sq4Rk31N3TlMVRc7c8jErQClcE3iEwJuQHu
p6CRI0K4PIdhxg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:38 2025 by rpki-client