Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
File: RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft (raw, json)
Hash identifier: t0WYlL3bJmtV+nx21UfSIMtH5OaeEsGKb9g6dLicyOo=
Subject key identifier: EB:54:4F:8D:C1:F6:2B:7F:B0:0B:3B:15:F3:30:58:C6:30:9B:5E:A4
Authority key identifier: 46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
Certificate issuer: /CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Certificate serial: 019A51BE2E7D62FFFB24ACB97377F46164C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 02:00:09 +0000
Manifest this update: Wed 05 Nov 2025 02:00:09 +0000
Manifest next update: Thu 06 Nov 2025 02:00:09 +0000
Files and hashes: 1: RO-2xcQ-C0WrDSJ7Eu00WY23rS4.roa (hash: Avrv1nDidaSbZAK1I64G61mkaNMT6r8igSyRsacO8hw=)
2: RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl (hash: w5exs2WjfXLby6N+lGK8joA5cq6LDHDX0ZenxdHhn5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:2e:7d:62:ff:fb:24:ac:b9:73:77:f4:61:64:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Validity
Not Before: Nov 5 02:00:09 2025 GMT
Not After : Nov 6 02:00:09 2025 GMT
Subject: CN=eb544f8dc1f62b7fb00b3b15f33058c6309b5ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:0d:65:4c:c4:cc:d8:e2:97:3e:72:0d:8d:
9d:7b:a6:70:53:83:1a:32:cf:3d:b9:6e:49:c8:55:
e5:23:7c:47:14:86:49:d7:3e:2a:db:fb:27:45:4e:
b5:e4:86:b9:66:59:52:3e:2d:4e:28:97:77:1a:19:
6d:cc:c1:05:ca:ca:2e:0e:fb:8a:2f:07:dd:96:27:
75:aa:15:7b:f0:97:c2:47:33:83:4a:65:e9:9d:d5:
36:87:15:e6:40:63:a2:81:81:08:32:b3:3b:1d:27:
84:fa:c1:51:d4:37:5e:5d:31:a8:38:09:6b:16:7a:
5b:ab:af:0d:f4:53:83:07:a9:21:6a:fe:28:1d:23:
eb:3d:48:f4:07:8b:13:7b:08:a5:88:8b:ed:ec:3a:
f6:3e:2e:50:02:68:df:11:42:0f:26:c7:dd:b8:2a:
89:30:c3:28:c1:9f:01:21:55:dc:eb:47:84:51:f0:
b7:ec:b0:d8:86:d6:ae:13:c7:3c:d8:0c:f8:2e:e3:
70:60:11:7c:ef:31:49:26:df:00:33:65:82:2d:26:
a0:8c:39:0b:4c:2f:db:85:a6:26:5e:f3:8b:02:c5:
28:c6:1a:ad:51:ac:21:63:c3:d3:01:65:54:ba:8a:
8a:46:d5:f3:17:b4:ec:12:25:c5:ba:1a:c8:a9:45:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:54:4F:8D:C1:F6:2B:7F:B0:0B:3B:15:F3:30:58:C6:30:9B:5E:A4
X509v3 Authority Key Identifier:
keyid:46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3c:ce:98:a4:63:a1:ea:9e:59:4c:a1:72:de:70:de:40:b5:
a7:d0:a2:08:ea:1a:36:48:f3:19:c8:d3:17:eb:14:ba:cf:49:
af:8b:68:d6:90:f4:54:46:b1:28:21:5b:3a:0a:95:3e:a5:f9:
09:92:63:18:8e:59:88:8e:b9:1d:97:2b:b0:d2:ac:22:f2:be:
93:a3:e1:46:69:fe:85:40:ae:1a:f8:47:a2:c5:41:ac:d9:c7:
bb:5d:31:8f:ed:cb:44:b7:dc:a9:82:23:c3:57:72:50:1c:e6:
7f:9e:e5:09:b5:b5:bb:a9:0c:f4:9b:6b:c9:9d:fe:7e:f7:f8:
a3:44:e2:bb:56:4a:99:11:d9:47:b0:67:0e:58:e7:ed:be:58:
4f:ad:3f:d3:2b:d1:e0:09:10:97:52:fc:5b:2a:40:b5:f7:ca:
c6:be:c4:d4:d1:a4:9f:af:f2:97:5d:cb:36:1c:7a:ee:25:3d:
fd:e7:e7:41:39:ad:aa:3c:c5:bf:93:30:7b:9d:dc:9b:63:e3:
52:4f:59:de:cc:80:cc:2a:6a:4c:c3:9a:98:75:a7:4d:e1:0b:
dc:b3:ef:e3:ee:2a:4a:3a:fe:64:85:55:66:09:d2:07:92:4a:
d5:7c:56:fc:db:02:ce:fb:8e:88:58:b2:b1:94:62:fc:5a:44:
5f:f1:58:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvi59Yv/7JKy5c3f0YWTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NDUyOGQ5MDgwYzY2NWRiMDU1MWQ4YWQ4YjBmNzFmN2Ji
NzY5OTYwHhcNMjUxMTA1MDIwMDA5WhcNMjUxMTA2MDIwMDA5WjAzMTEwLwYDVQQD
EyhlYjU0NGY4ZGMxZjYyYjdmYjAwYjNiMTVmMzMwNThjNjMwOWI1ZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFMNZUzEzNjilz5yDY2de6ZwU4Ma
Ms89uW5JyFXlI3xHFIZJ1z4q2/snRU615Ia5ZllSPi1OKJd3GhltzMEFysouDvuK
Lwfdlid1qhV78JfCRzODSmXpndU2hxXmQGOigYEIMrM7HSeE+sFR1DdeXTGoOAlr
Fnpbq68N9FODB6khav4oHSPrPUj0B4sTewiliIvt7Dr2Pi5QAmjfEUIPJsfduCqJ
MMMowZ8BIVXc60eEUfC37LDYhtauE8c82Az4LuNwYBF87zFJJt8AM2WCLSagjDkL
TC/bhaYmXvOLAsUoxhqtUawhY8PTAWVUuoqKRtXzF7TsEiXFuhrIqUWBqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtUT43B9it/sAs7FfMwWMYwm16kMB8GA1UdIwQY
MBaAFEZFKNkIDGZdsFUditiw9x97t2mWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmtVbzJRZ01abDJ3VlIySzJMRDNIM3UzYVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80NTg1MmYtOGZhZS00NDFkLWIxMGMt
MGExYmY1YmYwY2EyLzEvUmtVbzJRZ01abDJ3VlIySzJMRDNIM3UzYVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80NTg1MmYtOGZhZS00NDFkLWIxMGMtMGExYmY1YmYwY2Ey
LzEvUmtVbzJRZ01abDJ3VlIySzJMRDNIM3UzYVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzzOmKRj
oeqeWUyhct5w3kC1p9CiCOoaNkjzGcjTF+sUus9Jr4to1pD0VEaxKCFbOgqVPqX5
CZJjGI5ZiI65HZcrsNKsIvK+k6PhRmn+hUCuGvhHosVBrNnHu10xj+3LRLfcqYIj
w1dyUBzmf57lCbW1u6kM9JtryZ3+fvf4o0Tiu1ZKmRHZR7BnDljn7b5YT60/0yvR
4AkQl1L8WypAtffKxr7E1NGkn6/yl13LNhx67iU9/efnQTmtqjzFv5Mwe53cm2Pj
Uk9Z3syAzCpqTMOamHWnTeEL3LPv4+4qSjr+ZIVVZgnSB5JK1XxW/NsCzvuOiFiy
sZRi/FpEX/FYcQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:27:02 2025 by rpki-client