Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
File: dE3Tr9fM584AqerGfgvKmb63Kao.mft (raw, json)
Hash identifier: 9+zIcHKnspPYO9UWevttU2qjKgQzJaTBwKgG8uLHQwI=
Subject key identifier: 14:FB:85:36:21:59:03:35:A6:0F:82:B5:61:B1:6B:4C:03:F2:E1:0F
Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
Certificate issuer: /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Certificate serial: 019A526395ABB35FB11A0FD1CE8C27182DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 05:00:49 +0000
Manifest this update: Wed 05 Nov 2025 05:00:49 +0000
Manifest next update: Thu 06 Nov 2025 05:00:49 +0000
Files and hashes: 1: dE3Tr9fM584AqerGfgvKmb63Kao.crl (hash: kCqBf4aORdDlE8Cz/YqRDKVEfjtxbA5jSlWvfcPYEPc=)
2: fOC0mLVVaWFlMUvT0z_PddjsHw8.roa (hash: BmfmQSKAMKow/2vkZFChgOrrtOQvA5Kh+ohq4iFZyJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:95:ab:b3:5f:b1:1a:0f:d1:ce:8c:27:18:2d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Validity
Not Before: Nov 5 05:00:49 2025 GMT
Not After : Nov 6 05:00:49 2025 GMT
Subject: CN=14fb853621590335a60f82b561b16b4c03f2e10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:86:91:3a:6c:87:8e:56:2f:39:c9:84:ea:
2c:0c:99:39:7f:a6:ce:64:ac:7f:23:41:78:24:06:
06:f8:34:55:08:59:26:1e:d2:76:4e:7c:ca:d3:fb:
39:3a:79:82:ea:18:c2:77:93:bd:48:dd:f0:3f:fd:
52:0d:4c:0d:48:34:70:74:58:09:88:43:97:8d:99:
2e:d3:eb:28:2c:c1:b2:a6:0b:c8:3d:00:2e:ed:ec:
36:9d:2e:bf:1b:29:17:dc:92:a5:c0:8b:4b:5a:8f:
12:fb:3b:63:b5:21:48:d0:a4:fd:f6:6f:93:5b:4e:
a4:95:bb:cf:ac:ae:f9:1a:b5:65:da:ca:3a:0b:ca:
fa:7d:9e:1a:2e:26:51:e4:9f:a7:46:8a:33:ea:a6:
33:ea:eb:77:f6:9d:97:ca:ee:bb:cf:5b:df:19:da:
7c:39:40:71:25:6c:9f:44:a5:0f:2b:52:ac:bd:4c:
35:46:38:f9:ba:f8:35:46:61:1d:86:8e:79:78:83:
9d:b6:51:fc:fb:fd:3c:43:2f:09:d5:e1:7a:8c:a5:
01:75:ca:a7:db:45:40:15:e2:76:49:78:a9:c8:00:
24:c3:bf:a6:d7:dc:ac:49:f6:0f:85:ab:e8:12:fa:
b2:73:ae:63:45:7a:a7:ee:f6:15:ec:39:a0:30:ce:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FB:85:36:21:59:03:35:A6:0F:82:B5:61:B1:6B:4C:03:F2:E1:0F
X509v3 Authority Key Identifier:
keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d2:31:0d:33:a9:c1:97:ef:b3:09:b3:de:76:74:f1:af:51:
a1:dd:96:81:88:a5:bc:17:21:2e:c1:19:24:33:f9:86:16:5c:
a5:ef:38:f7:ec:23:07:60:d2:e4:c0:0a:91:e0:ae:80:64:7e:
0b:6f:dd:4a:0d:20:31:d9:ac:b6:74:f1:cc:12:92:72:b9:bd:
39:89:8b:81:fc:a0:0e:bd:c6:20:2f:db:f1:71:a7:c9:0c:a3:
8f:8c:45:bf:68:98:14:e2:e2:4f:13:08:a1:56:a0:0a:db:a0:
cd:e0:77:fc:bc:92:71:bd:c5:31:6a:27:64:38:67:e6:ce:76:
83:ba:c7:ed:5e:e3:b7:19:5c:26:b4:34:b5:6c:6b:c4:8d:1d:
00:b4:a0:0e:f5:01:f7:d5:f8:71:00:4a:6b:1a:00:28:d6:d5:
1c:9f:9b:92:01:c3:c1:29:5f:d9:c6:41:9f:5a:30:de:24:7e:
8d:cd:02:f9:c0:33:5a:99:77:ef:a3:c9:02:19:7f:83:04:d1:
5f:bf:a7:20:76:e7:5a:ed:70:72:a7:59:5c:b3:c1:b3:0c:24:
6e:82:0b:47:9d:df:2f:03:9e:d0:07:2a:6b:c1:95:44:87:e3:
a6:73:44:42:ba:d7:b9:c4:5b:d4:34:75:80:00:02:34:8b:24:
76:eb:81:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSY5Wrs1+xGg/RzownGC3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NGRkM2FmZDdjY2U3Y2UwMGE5ZWFjNjdlMGJjYTk5YmVi
NzI5YWEwHhcNMjUxMTA1MDUwMDQ5WhcNMjUxMTA2MDUwMDQ5WjAzMTEwLwYDVQQD
EygxNGZiODUzNjIxNTkwMzM1YTYwZjgyYjU2MWIxNmI0YzAzZjJlMTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqseGkTpsh45WLznJhOosDJk5f6bO
ZKx/I0F4JAYG+DRVCFkmHtJ2TnzK0/s5OnmC6hjCd5O9SN3wP/1SDUwNSDRwdFgJ
iEOXjZku0+soLMGypgvIPQAu7ew2nS6/GykX3JKlwItLWo8S+ztjtSFI0KT99m+T
W06klbvPrK75GrVl2so6C8r6fZ4aLiZR5J+nRooz6qYz6ut39p2Xyu67z1vfGdp8
OUBxJWyfRKUPK1KsvUw1Rjj5uvg1RmEdho55eIOdtlH8+/08Qy8J1eF6jKUBdcqn
20VAFeJ2SXipyAAkw7+m19ysSfYPhavoEvqyc65jRXqn7vYV7DmgMM5NEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBT7hTYhWQM1pg+CtWGxa0wD8uEPMB8GA1UdIwQY
MBaAFHRN06/XzOfOAKnqxn4Lypm+tymqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEUzVHI5Zk01ODRBcWVyR2ZndkttYjYzS2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yZWE1OTQtYTJjYS00ZmZhLTg5ZWUt
ODkyMWIwNTU5ZTkwLzEvZEUzVHI5Zk01ODRBcWVyR2ZndkttYjYzS2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8yZWE1OTQtYTJjYS00ZmZhLTg5ZWUtODkyMWIwNTU5ZTkw
LzEvZEUzVHI5Zk01ODRBcWVyR2ZndkttYjYzS2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdIxDTOp
wZfvswmz3nZ08a9Rod2WgYilvBchLsEZJDP5hhZcpe849+wjB2DS5MAKkeCugGR+
C2/dSg0gMdmstnTxzBKScrm9OYmLgfygDr3GIC/b8XGnyQyjj4xFv2iYFOLiTxMI
oVagCtugzeB3/LyScb3FMWonZDhn5s52g7rH7V7jtxlcJrQ0tWxrxI0dALSgDvUB
99X4cQBKaxoAKNbVHJ+bkgHDwSlf2cZBn1ow3iR+jc0C+cAzWpl376PJAhl/gwTR
X7+nIHbnWu1wcqdZXLPBswwkboILR53fLwOe0Acqa8GVRIfjpnNEQrrXucRb1DR1
gAACNIskduuBTQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:11:38 2025 by rpki-client