Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier: oXLC4Rx0t2l5Y4zqLNV7jqPRvXHp10kYo4Y1RsPXINo=
Subject key identifier: 18:16:65:41:B7:0C:E4:C6:3F:F5:4F:DD:3B:F3:99:32:EE:8C:20:D6
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 019A4F2B29641C99F7E582E4C95DFA0F5A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 14:00:19 +0000
Manifest this update: Tue 04 Nov 2025 14:00:19 +0000
Manifest next update: Wed 05 Nov 2025 14:00:19 +0000
Files and hashes: 1: 3y9VMN9BUcZB2fmchyviGBmGtxw.roa (hash: WvArAvEQlUAHpEjB63U5q0z8PqLe+6GgRYCWBvbd2yM=)
2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: C1u4Zf+fKywXqEZvxZ0bZYlrHbUhfifGXTfmjoinqp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:29:64:1c:99:f7:e5:82:e4:c9:5d:fa:0f:5a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Nov 4 14:00:19 2025 GMT
Not After : Nov 5 14:00:19 2025 GMT
Subject: CN=18166541b70ce4c63ff54fdd3bf39932ee8c20d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:44:18:df:e9:ee:c2:cb:09:7d:6a:b8:ed:da:
3d:be:03:b6:15:80:99:bb:4e:32:90:c8:79:9f:9e:
a3:a8:80:50:86:33:43:58:eb:0c:d2:b6:70:c2:f6:
40:05:3f:49:0c:b7:40:b8:e8:3a:52:0b:d6:ee:49:
74:ec:d9:91:b0:ab:67:94:e9:e5:cc:95:1a:84:f2:
b9:78:9d:19:5e:7a:db:04:6d:91:e4:23:af:e7:9b:
e2:67:64:5a:5f:87:ff:5d:5c:b2:2d:c2:65:1b:07:
63:73:91:9d:63:6d:35:e0:2d:d8:72:dc:d8:97:60:
b7:09:5f:27:ef:9e:08:86:47:f1:4e:aa:6c:58:18:
82:7c:2d:e3:26:41:b2:96:c5:53:e9:f5:9a:8a:35:
e7:06:e7:63:7b:08:af:91:47:62:de:fd:e0:0f:db:
6a:39:c5:33:61:8b:e1:e5:18:ff:e9:4d:86:9e:74:
ff:c2:58:f2:4b:0f:4c:bc:25:3e:5b:0f:54:ba:f9:
66:f7:3b:b5:49:95:47:f7:69:ec:5c:f0:24:ca:e7:
79:dd:01:64:e8:3f:b7:ae:50:10:87:f2:fc:c8:f6:
82:5e:ba:3a:fe:b1:3f:a0:06:a8:80:22:dd:cd:ba:
41:de:05:6f:0c:68:9f:df:21:5a:f9:7a:0b:da:49:
14:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:16:65:41:B7:0C:E4:C6:3F:F5:4F:DD:3B:F3:99:32:EE:8C:20:D6
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0b:36:00:e8:ec:98:48:6e:f6:b0:d3:d2:10:18:bc:3d:b3:
57:5d:01:95:9e:5d:6a:ab:18:e0:ee:44:70:16:49:ef:d5:65:
37:20:60:38:d8:f0:ea:3d:16:bf:ea:7d:3d:68:5c:8f:64:99:
d6:10:94:1c:c7:5e:42:16:00:2e:ad:07:8d:b6:53:fd:42:c7:
32:2e:49:58:30:8c:01:7e:67:bb:83:cb:3a:56:cb:03:48:f6:
fe:f9:15:3b:27:f8:3a:5c:11:69:be:f5:f8:ab:8b:b0:93:d7:
87:d8:51:d2:cd:d0:c6:b4:b3:84:bd:c6:5e:25:da:59:4d:4d:
b1:d8:d7:c8:aa:9f:c0:08:99:c6:59:49:f2:35:d5:a2:b3:98:
17:55:f7:3b:f5:31:21:a3:07:c5:61:7a:f7:17:4e:80:29:fe:
cc:bc:f0:b6:e4:bf:5d:2e:5b:03:2a:a0:aa:72:fa:98:d4:f8:
8f:70:0e:a9:1f:49:40:d6:b6:15:39:d1:48:8f:67:b5:04:9e:
ef:22:4e:fc:15:ec:04:be:d8:30:3d:1b:08:6c:69:fa:a6:cb:
8b:e9:33:e8:f7:65:e6:61:24:e5:90:86:ec:00:d8:8d:11:6d:
db:30:9b:77:73:07:a8:de:a5:49:09:5d:38:6a:45:42:fc:bb:
e8:80:f7:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKylkHJn35YLkyV36D1oZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYWZkMGNiOTc3NWZmNDc4ZjE4NWY4Zjk4MGQ1YjFkOTJk
NGJlNGYwHhcNMjUxMTA0MTQwMDE5WhcNMjUxMTA1MTQwMDE5WjAzMTEwLwYDVQQD
EygxODE2NjU0MWI3MGNlNGM2M2ZmNTRmZGQzYmYzOTkzMmVlOGMyMGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEQY3+nuwssJfWq47do9vgO2FYCZ
u04ykMh5n56jqIBQhjNDWOsM0rZwwvZABT9JDLdAuOg6UgvW7kl07NmRsKtnlOnl
zJUahPK5eJ0ZXnrbBG2R5COv55viZ2RaX4f/XVyyLcJlGwdjc5GdY2014C3YctzY
l2C3CV8n754IhkfxTqpsWBiCfC3jJkGylsVT6fWaijXnBudjewivkUdi3v3gD9tq
OcUzYYvh5Rj/6U2GnnT/wljySw9MvCU+Ww9Uuvlm9zu1SZVH92nsXPAkyud53QFk
6D+3rlAQh/L8yPaCXro6/rE/oAaogCLdzbpB3gVvDGif3yFa+XoL2kkULwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgWZUG3DOTGP/VP3TvzmTLujCDWMB8GA1UdIwQY
MBaAFLCv0MuXdf9Hjxhfj5gNWx2S1L5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84MDBmZmQtYzUzYi00NjQ2LWIyNmUt
NmVmNWM0NzM1ZThhLzEvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84MDBmZmQtYzUzYi00NjQ2LWIyNmUtNmVmNWM0NzM1ZThh
LzEvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAs2AOjs
mEhu9rDT0hAYvD2zV10BlZ5daqsY4O5EcBZJ79VlNyBgONjw6j0Wv+p9PWhcj2SZ
1hCUHMdeQhYALq0HjbZT/ULHMi5JWDCMAX5nu4PLOlbLA0j2/vkVOyf4OlwRab71
+KuLsJPXh9hR0s3QxrSzhL3GXiXaWU1NsdjXyKqfwAiZxllJ8jXVorOYF1X3O/Ux
IaMHxWF69xdOgCn+zLzwtuS/XS5bAyqgqnL6mNT4j3AOqR9JQNa2FTnRSI9ntQSe
7yJO/BXsBL7YMD0bCGxp+qbLi+kz6Pdl5mEk5ZCG7ADYjRFt2zCbd3MHqN6lSQld
OGpFQvy76ID3aQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:57:23 2025 by rpki-client