Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
File: 76W2I0ehtkzqSaKrOrSYPDSGH7I.mft (raw, json)
Hash identifier: 9ox6lr3cxAEIc0KXU4EnbbFI4/acISFXIHoLod1I8EQ=
Subject key identifier: 61:9B:93:31:6E:3E:EE:6A:AC:0D:34:97:9B:47:13:CC:41:89:C9:12
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 019A511998B9EA81B58FDD89A2DC913A1967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
Manifest number: 0142
Signing time: Tue 04 Nov 2025 23:00:23 +0000
Manifest this update: Tue 04 Nov 2025 23:00:23 +0000
Manifest next update: Wed 05 Nov 2025 23:00:23 +0000
Files and hashes: 1: 76W2I0ehtkzqSaKrOrSYPDSGH7I.crl (hash: t2hijbXV569fUupUpgXj5TBB8CBxe6qpZSIP7jtmxTo=)
2: TdWCA3jMG4RcSGjTx6h7-OFQkJ0.roa (hash: i6Jk7HaD1mr34rVBZKHoNKT8LfsYuiueMYQP9x4CSCY=)
3: WnOPQ0ufHKuGIGeJgpa97dMJzZI.roa (hash: HZdjF63aWYiWvWoR/raQkcNq/IJsdTGCUZAkFXHzLn8=)
4: _AP3FQaLWZZ4b07Vm6k0fkmrpNg.roa (hash: zZmmWUxFdkDgjpPPw8BHUSJ0nwj7XDsNJM3Ea4LtplY=)
5: kT-GBRdn5I-2tlMb_7_9SciQN9g.roa (hash: QjeGQjKJ8nc3raWH+8rzpohQUijqNjXsVOlYQC2T4vE=)
6: lnWvinUWS5GJDEzSwSpnFLjN5SY.roa (hash: jtKCkOjWf0Ny2MITAbfrrO67TWiVMtXecagrH1sOE/U=)
7: ygGBpwA4ux1u5oL7DbdIyd45qvs.roa (hash: GCb1YpaYFv2sJjClajAwmHExS+7GM4ZYFsR130zfKqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:98:b9:ea:81:b5:8f:dd:89:a2:dc:91:3a:19:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Nov 4 23:00:23 2025 GMT
Not After : Nov 5 23:00:23 2025 GMT
Subject: CN=619b93316e3eee6aac0d34979b4713cc4189c912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:61:f3:49:05:99:fc:f2:f7:f0:16:d2:fb:
ba:cf:82:fb:44:c2:1b:06:48:da:e8:cd:41:30:d4:
90:53:6b:d5:5e:75:d1:ad:6b:c3:3b:b6:15:70:84:
cc:69:f7:1e:de:ac:a6:dc:e2:6e:24:b3:81:c6:6e:
31:f0:91:2f:a8:e5:b7:41:1a:99:33:ae:19:86:94:
c6:73:02:3c:b0:64:85:7b:c6:e4:83:4c:a9:aa:60:
08:61:0f:0b:d1:03:7e:bc:9b:15:86:68:86:38:a0:
dc:a5:a6:bb:67:c1:61:0b:68:20:1b:0e:40:67:a4:
d8:af:61:b0:32:d7:d9:d1:6c:50:61:1b:19:e9:72:
1b:02:95:ba:73:26:38:73:b8:b0:8b:0a:2a:82:80:
38:c4:5f:e7:4d:0f:69:3a:09:83:33:e2:0d:4e:9f:
a6:f5:90:a9:65:f0:29:ac:48:2b:6f:cb:9b:6e:e2:
dd:b6:15:bf:57:32:4c:4a:51:ed:b9:fa:d2:2f:2a:
18:19:1c:ae:2c:82:e7:85:fd:0c:49:eb:ee:42:23:
32:9b:31:72:94:3f:7f:46:d7:21:9c:fa:8b:1b:86:
a2:8d:ce:55:f5:60:7a:3a:cb:5c:1e:03:43:f6:7b:
22:8d:3d:8c:43:9a:6c:f8:9b:61:f7:16:6f:dd:8c:
a1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9B:93:31:6E:3E:EE:6A:AC:0D:34:97:9B:47:13:CC:41:89:C9:12
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5a:5d:ff:45:13:0b:af:5c:2f:2e:bb:17:7e:4b:9f:2c:0b:
ea:ba:96:ca:77:44:c1:f1:bb:e4:27:b0:52:12:2f:bc:b4:fa:
ed:f8:84:97:1d:db:4f:7c:d0:8a:50:65:cc:86:5e:cc:4f:e1:
85:97:20:19:f4:5c:8e:b7:3d:d3:2b:be:2f:b0:90:73:8a:dc:
60:3e:6c:43:d5:7c:3f:e1:81:62:57:93:a8:02:79:ea:e6:c0:
e8:80:d5:71:ad:39:ef:7d:5a:de:81:42:c0:f3:4f:35:91:36:
bd:07:ec:d2:53:5e:d2:10:af:b6:1b:cd:d5:83:58:21:77:71:
3a:62:42:23:65:14:c5:ad:98:18:f2:ca:5e:50:3c:b0:f8:2b:
cf:0f:50:8b:88:ec:d6:e0:10:47:f7:fb:c1:c5:d6:e7:6f:83:
9f:e0:59:6d:80:65:d7:4a:ae:4a:80:67:ce:4f:d5:9e:07:ea:
01:d1:ba:29:5e:9f:29:a1:5a:0c:90:e0:a2:5b:dc:2a:e4:7e:
da:5a:4d:06:7a:ad:7a:4d:94:df:02:8c:df:08:c6:1f:50:05:
3e:0b:66:8b:df:ee:b1:0c:c9:96:bb:23:7a:bb:f5:f6:de:b1:
8e:1f:0d:e3:ff:8d:0d:71:89:01:3d:da:64:c0:25:a6:8c:07:
0c:fa:03:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGZi56oG1j92JotyROhlnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4
NjFmYjIwHhcNMjUxMTA0MjMwMDIzWhcNMjUxMTA1MjMwMDIzWjAzMTEwLwYDVQQD
Eyg2MTliOTMzMTZlM2VlZTZhYWMwZDM0OTc5YjQ3MTNjYzQxODljOTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG5h80kFmfzy9/AW0vu6z4L7RMIb
Bkja6M1BMNSQU2vVXnXRrWvDO7YVcITMafce3qym3OJuJLOBxm4x8JEvqOW3QRqZ
M64ZhpTGcwI8sGSFe8bkg0ypqmAIYQ8L0QN+vJsVhmiGOKDcpaa7Z8FhC2ggGw5A
Z6TYr2GwMtfZ0WxQYRsZ6XIbApW6cyY4c7iwiwoqgoA4xF/nTQ9pOgmDM+INTp+m
9ZCpZfAprEgrb8ubbuLdthW/VzJMSlHtufrSLyoYGRyuLILnhf0MSevuQiMymzFy
lD9/RtchnPqLG4aijc5V9WB6OstcHgND9nsijT2MQ5ps+Jth9xZv3YyhSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGbkzFuPu5qrA00l5tHE8xBickSMB8GA1UdIwQY
MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt
MDEzZDJhMTFjMGE1LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1
LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVpd/0UT
C69cLy67F35LnywL6rqWyndEwfG75CewUhIvvLT67fiElx3bT3zQilBlzIZezE/h
hZcgGfRcjrc90yu+L7CQc4rcYD5sQ9V8P+GBYleTqAJ56ubA6IDVca05731a3oFC
wPNPNZE2vQfs0lNe0hCvthvN1YNYIXdxOmJCI2UUxa2YGPLKXlA8sPgrzw9Qi4js
1uAQR/f7wcXW52+Dn+BZbYBl10quSoBnzk/VngfqAdG6KV6fKaFaDJDgolvcKuR+
2lpNBnqtek2U3wKM3wjGH1AFPgtmi9/usQzJlrsjerv19t6xjh8N4/+NDXGJAT3a
ZMAlpowHDPoDNg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:01:02 2025 by rpki-client