Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
File: 78NgXDK7yF0jXwqc6PRfB5a3I8s.mft (raw, json)
Hash identifier: IRZkSWAcDmk7+KJ0cC8WH/qxgaTRGilN+i3c3UAYwcw=
Subject key identifier: 61:70:04:4E:B3:76:C0:32:0E:31:D9:74:A1:2D:9A:5B:23:EE:54:55
Authority key identifier: EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
Certificate issuer: /CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Certificate serial: 019A4EF4176074257C79B92E6E5BE342D23A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
Manifest number: 0A7F
Signing time: Tue 04 Nov 2025 13:00:10 +0000
Manifest this update: Tue 04 Nov 2025 13:00:10 +0000
Manifest next update: Wed 05 Nov 2025 13:00:10 +0000
Files and hashes: 1: 33DDywxXELna01DvyBG6K4OCumY.roa (hash: EsYBtIHA+hqoobRdv5KvY0vtx5XM1QlHRSf1TKnaAQU=)
2: 78NgXDK7yF0jXwqc6PRfB5a3I8s.crl (hash: odsyvfxW82Yx7Esyfmhf4+Mhmf6gp+QgIydtb0s5Z2U=)
3: BtJ6S27OWJSmoj7NYzTUN0_iFUM.roa (hash: WITF2/BxKRtye2S81kXXKd8taTnYKpq4xKx/Xf8lw7Q=)
4: nO178ZXZFGT-qdK_Xds7cj8ID2A.roa (hash: R+EUO1OAijizTswHRqjO5HgUg8gwhN35ZvzlFNDGCnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:17:60:74:25:7c:79:b9:2e:6e:5b:e3:42:d2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Validity
Not Before: Nov 4 13:00:10 2025 GMT
Not After : Nov 5 13:00:10 2025 GMT
Subject: CN=6170044eb376c0320e31d974a12d9a5b23ee5455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d2:15:33:d0:eb:82:e3:97:af:10:c4:47:3b:
e5:65:f0:02:ba:8c:63:2f:9e:c0:d5:0a:e9:1e:62:
c0:b1:f0:7b:c3:0e:77:03:9e:e4:2c:4b:f4:43:83:
ca:d8:db:c7:ea:dd:7f:1b:f7:96:d0:0e:65:a1:63:
94:08:9c:ac:66:49:64:59:3e:22:8d:1e:23:c5:b2:
bb:4a:ad:4d:a2:cc:2e:27:67:51:b1:a1:95:33:b5:
5c:a0:a6:1c:9a:1b:4f:41:23:d0:1f:f5:86:fc:fa:
59:e6:ff:8c:59:68:80:87:29:d7:a9:0d:c9:f8:d4:
29:b7:5e:93:c5:72:7d:30:b5:ed:a6:22:db:e6:a6:
f4:8b:71:bc:f9:68:5f:85:f9:1f:4c:84:a8:b2:0e:
c3:7d:75:b3:b9:91:25:5d:ed:bd:53:a0:58:ba:2b:
86:02:95:09:7e:4c:2e:ed:d4:1d:66:b3:63:0d:b4:
1c:62:ec:30:9e:87:2c:1d:3e:cb:07:ca:e0:47:3b:
56:48:69:10:a3:bd:de:bc:01:66:79:4f:b3:ad:cc:
3d:16:5d:b0:9c:ad:b4:df:27:e6:4e:87:c7:3a:b3:
0b:83:b3:86:ec:2d:94:57:c5:64:36:a8:71:6c:e2:
8f:82:43:14:2c:38:97:64:18:f3:71:f3:9a:ae:00:
25:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:70:04:4E:B3:76:C0:32:0E:31:D9:74:A1:2D:9A:5B:23:EE:54:55
X509v3 Authority Key Identifier:
keyid:EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d9:10:81:d1:c7:d7:c6:4b:e7:6b:14:51:b5:ff:26:d7:60:
65:5b:17:ad:d9:63:68:6b:8e:16:9d:db:58:cc:ec:af:22:98:
a6:96:80:c6:46:04:01:32:de:57:4b:27:d6:11:42:fb:49:49:
82:6a:85:f1:5e:25:bd:a0:c1:e3:76:db:ff:39:56:f2:c4:7a:
d8:80:62:c3:f1:36:af:3a:e7:7e:3c:13:fe:3f:14:dc:51:f3:
fe:a7:f7:ab:3d:36:b9:30:15:73:74:3c:82:93:d9:9f:28:84:
3a:19:70:8a:0a:fd:3e:f7:10:2e:92:8e:38:13:90:91:49:1d:
74:9e:4b:21:74:ff:e1:03:28:45:89:dd:dd:96:7a:ae:bc:57:
c4:0f:ff:ed:c6:dd:04:da:55:55:ce:42:d2:43:85:1f:95:4c:
f7:9a:05:d2:17:6e:74:d8:52:a4:d9:dd:64:2a:e2:5a:76:0a:
d3:9b:62:a7:e2:0d:ef:1a:07:4a:41:9b:99:8a:a7:48:5c:68:
e6:26:44:17:bf:1f:9c:02:38:83:17:e2:7d:53:00:30:4e:ea:
cc:1c:0d:a5:00:c5:de:9e:b9:3d:cc:0a:5e:b9:c3:d6:24:69:
96:25:38:fb:85:7e:aa:9b:43:b1:f4:04:9f:29:6b:88:47:49:
05:c0:77:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9BdgdCV8ebkublvjQtI6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYzM2MDVjMzJiYmM4NWQyMzVmMGE5Y2U4ZjQ1ZjA3OTZi
NzIzY2IwHhcNMjUxMTA0MTMwMDEwWhcNMjUxMTA1MTMwMDEwWjAzMTEwLwYDVQQD
Eyg2MTcwMDQ0ZWIzNzZjMDMyMGUzMWQ5NzRhMTJkOWE1YjIzZWU1NDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tIVM9DrguOXrxDERzvlZfACuoxj
L57A1QrpHmLAsfB7ww53A57kLEv0Q4PK2NvH6t1/G/eW0A5loWOUCJysZklkWT4i
jR4jxbK7Sq1NoswuJ2dRsaGVM7VcoKYcmhtPQSPQH/WG/PpZ5v+MWWiAhynXqQ3J
+NQpt16TxXJ9MLXtpiLb5qb0i3G8+WhfhfkfTISosg7DfXWzuZElXe29U6BYuiuG
ApUJfkwu7dQdZrNjDbQcYuwwnocsHT7LB8rgRztWSGkQo73evAFmeU+zrcw9Fl2w
nK203yfmTofHOrMLg7OG7C2UV8VkNqhxbOKPgkMULDiXZBjzcfOargAlWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFwBE6zdsAyDjHZdKEtmlsj7lRVMB8GA1UdIwQY
MBaAFO/DYFwyu8hdI18KnOj0XweWtyPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzhOZ1hESzd5RjBqWHdxYzZQUmZCNWEzSThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lNjIxNjktNDg2ZC00MDU0LWIxMjEt
ZjJjOGJhMDIxY2E4LzEvNzhOZ1hESzd5RjBqWHdxYzZQUmZCNWEzSThzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9lNjIxNjktNDg2ZC00MDU0LWIxMjEtZjJjOGJhMDIxY2E4
LzEvNzhOZ1hESzd5RjBqWHdxYzZQUmZCNWEzSThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtkQgdHH
18ZL52sUUbX/JtdgZVsXrdljaGuOFp3bWMzsryKYppaAxkYEATLeV0sn1hFC+0lJ
gmqF8V4lvaDB43bb/zlW8sR62IBiw/E2rzrnfjwT/j8U3FHz/qf3qz02uTAVc3Q8
gpPZnyiEOhlwigr9PvcQLpKOOBOQkUkddJ5LIXT/4QMoRYnd3ZZ6rrxXxA//7cbd
BNpVVc5C0kOFH5VM95oF0hdudNhSpNndZCriWnYK05tip+IN7xoHSkGbmYqnSFxo
5iZEF78fnAI4gxfifVMAME7qzBwNpQDF3p65PcwKXrnD1iRpliU4+4V+qptDsfQE
nylriEdJBcB3wg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:59 2025 by rpki-client