Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: DqOpua/nBg+NAHMUnkdY5hYD/I7ctDxz9fSTkrG+DWo=
Subject key identifier: 70:BC:D5:83:8A:F1:73:02:34:85:65:20:73:FA:69:57:5C:30:61:5E
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 019A4FCFE0FE6B1882281C8CB2DF188C2D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 17:00:14 +0000
Manifest this update: Tue 04 Nov 2025 17:00:14 +0000
Manifest next update: Wed 05 Nov 2025 17:00:14 +0000
Files and hashes: 1: pA8DlYtcvRNA-jdEe_3R7YRB6rk.roa (hash: XB3O2NdSBoC9ldQGDUty/6gqx/qt/ZpvhUOCQP6iI1c=)
2: rg67AeqtMD0wJ1IIvMd4YeaFTyI.roa (hash: po3w7Qi8ZlRiTSE2vYAsVYJZWCbY0SnfvN8Hrjn9vnc=)
3: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: Tva5So2DKPv5B6ZeNixVF06TeqlwQau0rN1XDHuXAGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:e0:fe:6b:18:82:28:1c:8c:b2:df:18:8c:2d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Nov 4 17:00:14 2025 GMT
Not After : Nov 5 17:00:14 2025 GMT
Subject: CN=70bcd5838af173023485652073fa69575c30615e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:b3:e2:02:18:5e:09:1f:cd:8a:5d:0e:7e:
d7:95:6a:fc:1f:41:7c:0e:13:57:66:2a:65:00:c8:
fd:10:84:e2:f9:f9:1e:66:81:e2:79:66:01:5f:f9:
b9:26:d0:00:57:b9:70:98:57:d5:65:a1:8c:a8:7b:
65:9c:ac:36:59:a2:8b:f9:ef:aa:67:4d:ba:b9:de:
4b:d2:09:b1:79:1c:54:76:f4:52:3e:d8:e4:b5:c3:
5a:89:36:01:18:8f:2c:1c:14:4b:72:f2:3c:f5:b4:
bb:7e:be:2e:9f:27:ba:66:cf:5b:6f:eb:5c:e8:cc:
64:50:1c:7f:b4:32:4b:a1:80:1b:5f:9f:ca:16:cb:
cb:9a:54:24:fa:8e:89:5e:fa:3e:38:ae:f1:90:4d:
ec:55:8c:94:4a:32:3b:5f:8e:e7:7d:93:f8:b5:44:
56:a5:fa:33:45:ab:03:3f:55:c0:e0:33:ca:bb:9c:
d6:3b:6c:54:49:d8:0e:54:c1:12:c8:55:6c:7c:cc:
64:f3:40:bf:a3:0e:08:ca:f4:bd:46:59:c2:40:c6:
37:8b:36:2d:b5:94:fe:e3:6e:11:0d:48:e6:a4:18:
e8:59:ad:15:a6:7c:30:30:a3:a7:3d:e3:96:41:15:
2e:7a:1e:f3:99:8f:5c:af:ed:22:84:77:e6:63:4b:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BC:D5:83:8A:F1:73:02:34:85:65:20:73:FA:69:57:5C:30:61:5E
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:23:ec:d6:8b:70:db:62:ed:84:b6:d0:1e:19:2f:b8:48:af:
bd:0d:61:86:f8:9c:b3:85:05:f3:a4:c7:c1:74:a4:02:07:e4:
98:16:3e:b7:ae:87:ff:e0:ff:8f:37:3e:34:69:fb:7a:56:ad:
9d:1d:33:93:91:96:63:f3:a7:a7:f1:1d:4e:d1:7b:64:33:16:
9f:ce:af:bb:74:9d:00:02:95:ea:46:01:b9:8e:4f:42:ec:f1:
d9:d4:ea:ba:81:83:b1:51:f7:35:c3:0d:1f:1a:5f:25:a8:55:
62:cb:a7:e1:c1:0c:19:ac:64:18:e0:8c:b9:c7:35:99:ee:cf:
81:7e:c0:39:46:29:c5:63:e1:1e:23:73:75:0a:5a:81:d5:ac:
9e:18:a4:bf:99:e7:24:7c:c5:d6:c0:cb:43:c6:a5:04:b0:ff:
79:40:5f:e1:c7:59:01:99:42:52:f8:86:b3:dd:86:0d:c6:6a:
20:64:71:7c:d4:f8:ae:08:9f:61:9c:d2:86:36:00:b2:3b:4c:
6b:38:22:5b:71:61:36:10:0c:2f:03:35:a0:76:ae:e5:1a:bf:
3c:b9:e4:43:e4:7f:dc:e4:e8:f7:4f:b2:c7:60:db:05:e6:0d:
fd:36:df:aa:a2:0c:6b:4d:92:89:10:3c:23:18:b1:e3:5a:f4:
4c:9c:3e:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz+D+axiCKByMst8YjC1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OGY0MWFmZGM2MDk1NjhmYjIzMzhmZGIyMGIyZDBjNDIy
YjcyM2IwHhcNMjUxMTA0MTcwMDE0WhcNMjUxMTA1MTcwMDE0WjAzMTEwLwYDVQQD
Eyg3MGJjZDU4MzhhZjE3MzAyMzQ4NTY1MjA3M2ZhNjk1NzVjMzA2MTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIqz4gIYXgkfzYpdDn7XlWr8H0F8
DhNXZiplAMj9EITi+fkeZoHieWYBX/m5JtAAV7lwmFfVZaGMqHtlnKw2WaKL+e+q
Z026ud5L0gmxeRxUdvRSPtjktcNaiTYBGI8sHBRLcvI89bS7fr4unye6Zs9bb+tc
6MxkUBx/tDJLoYAbX5/KFsvLmlQk+o6JXvo+OK7xkE3sVYyUSjI7X47nfZP4tURW
pfozRasDP1XA4DPKu5zWO2xUSdgOVMESyFVsfMxk80C/ow4IyvS9RlnCQMY3izYt
tZT+424RDUjmpBjoWa0VpnwwMKOnPeOWQRUueh7zmY9cr+0ihHfmY0swtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHC81YOK8XMCNIVlIHP6aVdcMGFeMB8GA1UdIwQY
MBaAFLSPQa/cYJVo+yM4/bILLQxCK3I7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYt
OGVjNjhlNzg4NmUyLzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYtOGVjNjhlNzg4NmUy
LzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiPs1otw
22LthLbQHhkvuEivvQ1hhvics4UF86THwXSkAgfkmBY+t66H/+D/jzc+NGn7elat
nR0zk5GWY/Onp/EdTtF7ZDMWn86vu3SdAAKV6kYBuY5PQuzx2dTquoGDsVH3NcMN
HxpfJahVYsun4cEMGaxkGOCMucc1me7PgX7AOUYpxWPhHiNzdQpagdWsnhikv5nn
JHzF1sDLQ8alBLD/eUBf4cdZAZlCUviGs92GDcZqIGRxfNT4rgifYZzShjYAsjtM
azgiW3FhNhAMLwM1oHau5Rq/PLnkQ+R/3OTo90+yx2DbBeYN/TbfqqIMa02SiRA8
Ixix41r0TJw+ag==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:02:34 2025 by rpki-client