Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
File: M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft (raw, json)
Hash identifier: l5YEwo73PJshxp0db5PutQz5//8P7QkK0h9/OCgZE0I=
Subject key identifier: F7:69:70:62:B7:B9:3B:DE:C4:A7:69:5B:F2:6E:3D:34:DA:53:8C:09
Authority key identifier: 33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
Certificate issuer: /CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Certificate serial: 019A4E4FCA001D0716A7E1B238380A718714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:43 +0000
Manifest this update: Tue 04 Nov 2025 10:00:43 +0000
Manifest next update: Wed 05 Nov 2025 10:00:43 +0000
Files and hashes: 1: HqUdNukgCT5prgnM_K-f0-if2vo.roa (hash: /RVlSM2uyNgy2pOhW4SUxHsDBdur2yik6QdL4JVoNEA=)
2: M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl (hash: XCzAZJk1iHui1dQ61g0XxesOq876Kv++Jgol7ooyCKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:ca:00:1d:07:16:a7:e1:b2:38:38:0a:71:87:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Validity
Not Before: Nov 4 10:00:43 2025 GMT
Not After : Nov 5 10:00:43 2025 GMT
Subject: CN=f7697062b7b93bdec4a7695bf26e3d34da538c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:43:52:cc:00:b5:16:4d:69:82:af:ff:5d:
1b:b9:20:d6:01:a0:84:5b:07:4e:fc:55:84:7d:3b:
92:2f:e5:9a:48:cb:35:12:f2:52:c0:a5:f2:37:f9:
db:8e:ef:f2:52:5b:00:25:05:cc:f3:77:b2:df:bf:
38:66:05:e3:30:ac:05:25:22:3f:c2:55:8a:9c:5a:
d7:1a:9d:31:35:be:83:11:94:85:4b:b5:ff:22:29:
dc:4f:ca:d8:aa:17:15:bd:e8:ae:8a:88:ec:bb:d5:
f6:d2:bf:4d:9c:f9:01:34:5a:5e:70:9b:c5:ec:eb:
24:28:86:31:e9:ed:69:66:f9:68:bb:25:05:77:86:
83:5b:19:84:2e:1e:2a:8e:c9:e5:e5:2c:38:8c:f4:
e1:c9:01:27:76:9f:d6:5c:6a:be:61:c7:5e:04:13:
68:66:1c:da:be:f5:56:41:28:da:94:aa:bc:dc:b5:
b7:d0:14:1a:34:03:97:6e:35:60:ea:50:58:44:03:
1c:ed:1f:8a:64:e2:dc:0e:39:46:33:b7:25:fe:a7:
e0:9a:4a:04:e1:7b:50:49:69:bb:af:17:1c:47:70:
91:ac:45:fb:f9:e8:57:d1:ca:17:e4:7f:63:4e:3d:
ea:6e:d1:a3:7d:11:c8:16:01:bd:1b:43:bb:60:73:
20:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:69:70:62:B7:B9:3B:DE:C4:A7:69:5B:F2:6E:3D:34:DA:53:8C:09
X509v3 Authority Key Identifier:
keyid:33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:96:c6:42:6b:fb:71:47:f2:76:43:ea:f2:af:b9:ea:45:db:
df:d2:fc:aa:a0:45:59:20:c0:1d:71:7b:89:3b:5a:fd:2c:ea:
96:0e:7b:56:72:3c:c3:f3:7c:7b:6b:12:17:28:11:33:7a:2d:
c7:95:92:63:0e:59:99:94:2f:a5:97:86:7e:f3:fb:e1:d6:6a:
6b:0b:8f:6b:96:a9:69:4a:c7:ab:f2:bf:9e:9f:19:c4:30:05:
b1:23:a9:9e:24:05:a4:69:00:0f:04:6c:d5:c9:e6:e4:c9:d3:
65:2d:f6:fc:0c:df:8c:a1:96:39:8c:04:8d:b5:3e:08:be:d5:
ba:54:66:7d:72:81:df:5f:94:57:ee:e5:1f:19:f4:0a:0a:9c:
20:97:b2:54:82:71:ac:94:c4:0e:16:dd:20:3f:f3:6d:37:0e:
bc:c5:f3:18:d2:1a:1e:42:ef:32:58:0e:a3:2b:b5:cb:81:91:
16:68:28:89:d7:75:64:71:58:35:da:a6:82:6b:ff:5d:fa:81:
e6:da:12:28:5a:6d:88:87:9a:6d:ce:14:2e:32:5a:de:5f:7f:
f5:06:81:f4:2c:fc:da:7c:9f:14:cb:3e:e5:8c:6f:6e:fd:64:
38:fd:b5:1d:15:e8:ad:f3:66:88:03:74:fa:26:e9:88:e7:74:
8a:1c:5f:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT8oAHQcWp+GyODgKcYcUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNDEwODc1Y2E3OGNjNWUzZDE5MmUwNTRhOTZkZjAzMDJj
N2Y5N2EwHhcNMjUxMTA0MTAwMDQzWhcNMjUxMTA1MTAwMDQzWjAzMTEwLwYDVQQD
EyhmNzY5NzA2MmI3YjkzYmRlYzRhNzY5NWJmMjZlM2QzNGRhNTM4YzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCdDUswAtRZNaYKv/10buSDWAaCE
WwdO/FWEfTuSL+WaSMs1EvJSwKXyN/nbju/yUlsAJQXM83ey3784ZgXjMKwFJSI/
wlWKnFrXGp0xNb6DEZSFS7X/IincT8rYqhcVveiuiojsu9X20r9NnPkBNFpecJvF
7OskKIYx6e1pZvlouyUFd4aDWxmELh4qjsnl5Sw4jPThyQEndp/WXGq+YcdeBBNo
ZhzavvVWQSjalKq83LW30BQaNAOXbjVg6lBYRAMc7R+KZOLcDjlGM7cl/qfgmkoE
4XtQSWm7rxccR3CRrEX7+ehX0coX5H9jTj3qbtGjfRHIFgG9G0O7YHMgZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdpcGK3uTvexKdpW/JuPTTaU4wJMB8GA1UdIwQY
MBaAFDNBCHXKeMxePRkuBUqW3wMCx/l6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTBFSWRjcDR6RjQ5R1M0RlNwYmZBd0xILVhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84YzA3YWUtZGU3Mi00NzZhLTgwMjkt
ZjA4MTZlMzhhZGRlLzEvTTBFSWRjcDR6RjQ5R1M0RlNwYmZBd0xILVhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS84YzA3YWUtZGU3Mi00NzZhLTgwMjktZjA4MTZlMzhhZGRl
LzEvTTBFSWRjcDR6RjQ5R1M0RlNwYmZBd0xILVhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZbGQmv7
cUfydkPq8q+56kXb39L8qqBFWSDAHXF7iTta/Szqlg57VnI8w/N8e2sSFygRM3ot
x5WSYw5ZmZQvpZeGfvP74dZqawuPa5apaUrHq/K/np8ZxDAFsSOpniQFpGkADwRs
1cnm5MnTZS32/AzfjKGWOYwEjbU+CL7VulRmfXKB31+UV+7lHxn0CgqcIJeyVIJx
rJTEDhbdID/zbTcOvMXzGNIaHkLvMlgOoyu1y4GRFmgoidd1ZHFYNdqmgmv/XfqB
5toSKFptiIeabc4ULjJa3l9/9QaB9Cz82nyfFMs+5Yxvbv1kOP21HRXorfNmiAN0
+ibpiOd0ihxfWw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:01 2025 by rpki-client