Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: MJR4yorF2KulpvArjTv2srr9zjQ179w2ODc5GCO4t/c=
Subject key identifier: FD:A2:4E:4B:86:E9:D4:FE:58:E5:BB:C1:CC:0E:CB:23:D5:6A:92:F0
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 019A4C6194716202CFFEC26E3D90AED8A73F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 1141
Signing time: Tue 04 Nov 2025 01:00:54 +0000
Manifest this update: Tue 04 Nov 2025 01:00:54 +0000
Manifest next update: Wed 05 Nov 2025 01:00:54 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: YP4rNG4mujbsFRYcKOpTdVS98ZFJEBTkqbtktn+RFPw=)
2: ExdpCTXCt8uJ4Z_M2-EkieqhjoE.roa (hash: gUhwwwHnIVltW5e0SpmF0lPF2Gg7aGGIP9a0IVe5wqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:94:71:62:02:cf:fe:c2:6e:3d:90:ae:d8:a7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Nov 4 01:00:54 2025 GMT
Not After : Nov 5 01:00:54 2025 GMT
Subject: CN=fda24e4b86e9d4fe58e5bbc1cc0ecb23d56a92f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:aa:2f:2a:2b:bf:9a:d3:0e:ca:19:b5:db:
b6:73:87:9f:8c:1c:4e:95:1d:1e:d3:a4:d0:78:ca:
10:ff:77:75:d2:20:82:dd:8d:cb:90:bb:de:7d:14:
d7:66:8b:a1:60:94:f9:36:90:ba:c6:af:e2:7a:5b:
c0:03:89:a2:3d:19:0c:f1:fc:eb:d1:eb:1b:9a:71:
10:6c:56:0a:c5:f8:4a:1d:91:2e:b1:fd:a5:94:66:
74:be:06:5e:ec:13:6d:58:16:f6:7e:6f:e7:70:18:
88:af:2d:be:5c:ce:79:53:99:6b:c6:28:45:81:09:
3d:74:65:a6:b3:0c:66:99:f9:84:ce:22:1c:94:f5:
84:75:12:59:24:92:6a:ce:f9:c3:61:25:87:3b:4c:
27:9e:10:db:9a:ae:0c:d0:be:72:1f:1b:78:4c:a0:
42:98:f4:2a:d5:38:9b:9b:70:ba:4e:47:81:ab:fc:
39:83:f3:2b:96:07:dc:7a:98:6f:f1:e4:6c:d1:92:
fb:1b:1e:a7:12:d7:0c:e5:1c:7f:d2:2f:1a:bc:32:
aa:f7:d9:24:be:1a:8b:d8:e7:a7:27:45:85:46:70:
f4:6b:79:31:da:e2:c5:c4:b3:40:2b:49:c6:3e:2e:
ec:5a:36:dd:c4:56:c4:7e:ab:bd:43:e0:5e:a4:60:
ad:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A2:4E:4B:86:E9:D4:FE:58:E5:BB:C1:CC:0E:CB:23:D5:6A:92:F0
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4a:b1:31:ef:0b:fb:20:61:a9:34:f7:57:57:b9:b8:fc:fd:
23:d3:e3:04:c1:6f:a4:c6:29:6a:f9:91:f2:45:7b:9f:a1:1a:
6a:02:1a:b2:51:2d:72:b2:71:e3:4f:8c:b8:2b:08:4d:79:04:
91:5b:67:e1:5a:3d:a4:c9:bb:b8:dc:a4:d0:56:56:1b:dc:96:
6d:e7:e5:52:e4:86:3e:64:a4:1b:1f:51:20:88:2b:3e:3d:f2:
20:6e:2c:29:02:49:dd:b8:bd:b3:c4:b9:3a:39:bd:37:fb:92:
00:47:28:1f:28:93:cf:e0:74:06:6d:05:5c:49:1c:1b:49:ad:
2a:36:d2:94:68:3d:f3:dd:6d:a3:01:23:cc:7e:e4:12:81:ab:
21:84:3b:2d:26:3d:e8:bc:e4:eb:d0:e4:54:5d:05:1a:a4:fc:
12:35:66:22:71:52:b4:b6:4d:31:59:f5:f1:45:17:3f:18:de:
da:40:4d:e1:fe:73:2c:e9:65:1b:19:36:ab:56:fe:32:b3:e1:
60:d0:5f:9e:db:5c:5f:9b:e2:98:5d:8c:a6:7e:84:5a:87:bd:
50:0f:20:a3:dc:0b:99:fa:a5:85:13:51:77:99:4f:9c:cf:83:
7e:eb:91:a6:bc:1c:19:69:bc:5b:f9:b6:0b:94:67:c0:b6:28:
a4:8a:af:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMYZRxYgLP/sJuPZCu2Kc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMTY3NDcwMThlOTQ0ZTQwNWE2ZDIzYTU2NDcwMWExNTVm
NDM3MzkwHhcNMjUxMTA0MDEwMDU0WhcNMjUxMTA1MDEwMDU0WjAzMTEwLwYDVQQD
EyhmZGEyNGU0Yjg2ZTlkNGZlNThlNWJiYzFjYzBlY2IyM2Q1NmE5MmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS6qLyorv5rTDsoZtdu2c4efjBxO
lR0e06TQeMoQ/3d10iCC3Y3LkLvefRTXZouhYJT5NpC6xq/ielvAA4miPRkM8fzr
0esbmnEQbFYKxfhKHZEusf2llGZ0vgZe7BNtWBb2fm/ncBiIry2+XM55U5lrxihF
gQk9dGWmswxmmfmEziIclPWEdRJZJJJqzvnDYSWHO0wnnhDbmq4M0L5yHxt4TKBC
mPQq1Tibm3C6TkeBq/w5g/Mrlgfcephv8eRs0ZL7Gx6nEtcM5Rx/0i8avDKq99kk
vhqL2OenJ0WFRnD0a3kx2uLFxLNAK0nGPi7sWjbdxFbEfqu9Q+BepGCt2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2iTkuG6dT+WOW7wcwOyyPVapLwMB8GA1UdIwQY
MBaAFAoWdHAY6UTkBabSOlZHAaFV9Dc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTA2OTAtOTYzNy00ZmM1LWI0MWIt
ZDlkMGFhMjhhYjJiLzEvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hZTA2OTAtOTYzNy00ZmM1LWI0MWItZDlkMGFhMjhhYjJi
LzEvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0qxMe8L
+yBhqTT3V1e5uPz9I9PjBMFvpMYpavmR8kV7n6EaagIaslEtcrJx40+MuCsITXkE
kVtn4Vo9pMm7uNyk0FZWG9yWbeflUuSGPmSkGx9RIIgrPj3yIG4sKQJJ3bi9s8S5
Ojm9N/uSAEcoHyiTz+B0Bm0FXEkcG0mtKjbSlGg9891towEjzH7kEoGrIYQ7LSY9
6Lzk69DkVF0FGqT8EjVmInFStLZNMVn18UUXPxje2kBN4f5zLOllGxk2q1b+MrPh
YNBfnttcX5vimF2Mpn6EWoe9UA8go9wLmfqlhRNRd5lPnM+DfuuRprwcGWm8W/m2
C5RnwLYopIqvcA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:26 2025 by rpki-client