Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
File: RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft (raw, json)
Hash identifier: tbVwGVC7p+Gk/KeSfpkSY3qPT9AleI32roV+TQktBEk=
Subject key identifier: F9:B8:2E:FC:EB:D0:38:E3:76:17:12:1F:5B:79:58:D4:CB:18:BE:6E
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 019A4EF431550C9310DDCB8C75021BB95048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
Manifest number: 0EF8
Signing time: Tue 04 Nov 2025 13:00:17 +0000
Manifest this update: Tue 04 Nov 2025 13:00:17 +0000
Manifest next update: Wed 05 Nov 2025 13:00:17 +0000
Files and hashes: 1: RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl (hash: hFBN2PIZ2SoC6Qwj82b2M79WCYN9OljkuZDo5IUqQZE=)
2: bdbKzGuhzcfiVqYcyUjbwWvnE0w.roa (hash: EoIpsT1HmNm7h0aLpOdMeI8Ad8kT8sfcfHIMZV0nTSQ=)
3: sayECznhSIzMnJpVagOHebCR_x0.roa (hash: hUIe0JVfYeAbZr+iALwcU4dqSjQhm3L+k0UihQEwCkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:31:55:0c:93:10:dd:cb:8c:75:02:1b:b9:50:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Nov 4 13:00:17 2025 GMT
Not After : Nov 5 13:00:17 2025 GMT
Subject: CN=f9b82efcebd038e37617121f5b7958d4cb18be6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:7a:fe:1b:07:2c:e4:66:db:e5:62:cd:34:
b0:a9:40:4e:5f:f4:50:41:9e:ed:c1:78:9c:70:1b:
22:4d:9b:ab:46:9a:05:9d:7e:41:8c:72:60:ac:1c:
07:b6:16:f8:d5:b2:34:83:55:77:56:a2:83:ca:f2:
78:ea:1b:33:10:e1:91:1e:79:e8:5b:08:c3:7a:29:
79:67:b6:3c:c3:ff:6a:a3:f2:ef:82:52:1f:af:47:
a7:4f:8f:5c:a6:a9:fb:3d:e7:4c:60:ec:04:24:a3:
58:86:93:c3:81:5f:bc:21:ec:fc:6a:0d:0f:aa:fd:
d0:74:75:3c:be:2d:72:57:1e:e9:d1:e1:e6:7f:cc:
4e:65:80:8e:9e:93:73:b2:f6:9b:2b:f1:0c:be:e7:
85:5d:03:17:2e:fb:fa:e7:76:9e:83:7e:8a:62:f7:
09:c0:04:b4:f4:90:b5:43:48:8a:15:a1:30:77:4c:
21:1b:58:a6:73:5c:95:4e:9d:5c:fc:2d:39:68:c6:
14:60:d8:2a:ca:db:07:c4:d1:51:b2:66:82:56:b4:
a7:c0:17:4e:26:a3:bb:bd:0b:dc:8f:60:52:8b:40:
2c:ba:b7:7e:a3:9e:ec:b7:52:1d:d9:a2:74:37:79:
59:04:31:d4:dc:93:ba:16:dd:4f:b1:16:99:4b:d0:
20:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B8:2E:FC:EB:D0:38:E3:76:17:12:1F:5B:79:58:D4:CB:18:BE:6E
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c6:2c:e1:45:67:ac:6a:48:1a:0f:5d:39:16:fa:36:92:4b:
75:7d:e1:1e:d7:1c:0e:38:ef:1c:c9:2d:f6:dd:87:3c:78:8f:
bf:b2:f0:ac:1f:e7:0a:65:36:ae:65:f5:35:2c:20:df:c2:8e:
92:e9:2d:92:81:e5:28:de:ee:34:09:30:a4:4b:17:72:fb:3c:
e8:3d:4b:1c:5a:c5:bf:ac:53:73:7d:85:15:c6:e0:ed:d4:9e:
79:5d:bc:da:29:b7:3b:55:7e:a4:22:e0:e5:8f:b2:70:54:1c:
96:c9:ac:ae:5f:3a:7a:9d:83:8d:30:cd:67:f3:ae:0d:e5:e0:
98:6e:69:5c:ae:68:8f:db:c0:58:a5:09:7c:61:1b:ed:82:94:
ce:be:89:f7:9d:df:39:0e:d6:c9:7e:83:d9:c3:33:14:12:da:
a9:a4:06:ff:ec:08:8e:e8:29:cc:3b:64:a3:4c:27:95:d0:7b:
c3:d3:ac:a5:f7:bf:fa:a4:f6:98:b5:e6:8b:bc:08:ef:c0:79:
cd:06:eb:e4:5f:ca:45:ab:5b:27:47:d4:33:49:47:3c:60:cc:
32:12:c6:ed:53:34:29:58:73:4e:0a:13:9a:ef:94:d9:be:15:
cf:dd:db:51:df:0a:d1:17:72:66:18:64:86:29:61:ed:f5:fc:
09:24:9a:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9DFVDJMQ3cuMdQIbuVBIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YTRiMzVjOGUwMjU2ZWFhMmZiZjc1MWU2YzAxZTVlOTA5
YzBhMWYwHhcNMjUxMTA0MTMwMDE3WhcNMjUxMTA1MTMwMDE3WjAzMTEwLwYDVQQD
EyhmOWI4MmVmY2ViZDAzOGUzNzYxNzEyMWY1Yjc5NThkNGNiMThiZTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymh6/hsHLORm2+VizTSwqUBOX/RQ
QZ7twXiccBsiTZurRpoFnX5BjHJgrBwHthb41bI0g1V3VqKDyvJ46hszEOGRHnno
WwjDeil5Z7Y8w/9qo/LvglIfr0enT49cpqn7PedMYOwEJKNYhpPDgV+8Iez8ag0P
qv3QdHU8vi1yVx7p0eHmf8xOZYCOnpNzsvabK/EMvueFXQMXLvv653aeg36KYvcJ
wAS09JC1Q0iKFaEwd0whG1imc1yVTp1c/C05aMYUYNgqytsHxNFRsmaCVrSnwBdO
JqO7vQvcj2BSi0Asurd+o57st1Id2aJ0N3lZBDHU3JO6Ft1PsRaZS9Ag9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPm4Lvzr0DjjdhcSH1t5WNTLGL5uMB8GA1UdIwQY
MBaAFEaks1yOAlbqovv3UebAHl6QnAofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMTkxZDYtNTQyMy00MmNmLThmNmIt
MTE3ODg2ZWI3ZDY3LzEvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xMTkxZDYtNTQyMy00MmNmLThmNmItMTE3ODg2ZWI3ZDY3
LzEvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMYs4UVn
rGpIGg9dORb6NpJLdX3hHtccDjjvHMkt9t2HPHiPv7LwrB/nCmU2rmX1NSwg38KO
kuktkoHlKN7uNAkwpEsXcvs86D1LHFrFv6xTc32FFcbg7dSeeV282im3O1V+pCLg
5Y+ycFQclsmsrl86ep2DjTDNZ/OuDeXgmG5pXK5oj9vAWKUJfGEb7YKUzr6J953f
OQ7WyX6D2cMzFBLaqaQG/+wIjugpzDtko0wnldB7w9Ospfe/+qT2mLXmi7wI78B5
zQbr5F/KRatbJ0fUM0lHPGDMMhLG7VM0KVhzTgoTmu+U2b4Vz93bUd8K0RdyZhhk
hilh7fX8CSSa/A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:12 2025 by rpki-client