Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: /h2n/+tbw6qGqWFkhvdSUsOcE7swN0wfEd6RiOzMFY4=
Subject key identifier: C8:37:92:0D:00:B2:05:1E:91:15:83:A7:50:53:20:0A:3E:9D:11:FC
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 019A4E18FE940B93448EC35252F7E7E8F8D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 09:00:52 +0000
Manifest this update: Tue 04 Nov 2025 09:00:52 +0000
Manifest next update: Wed 05 Nov 2025 09:00:52 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: PQGraY6vkrS/p61rI+ugWHAFel2aZ+9Loycms1Rbldk=)
2: 9jFcc2sIX-Fs3ktxs-58gEPmasY.roa (hash: HePH1DofBb+MqG0ob+GiLGVr062e3DxtUkrb0KPep7A=)
3: H91ljrtEOQ88LobyOBXsYKfsM_I.roa (hash: OrACEmPH7XE22MmlMeWAN/5nVKUIlnVGt10JM2JOUl8=)
4: fcd14E2UvKzJ6kaKcrYKQVlljT8.roa (hash: KoJteDfILqkEJ6UJs3cPi3xqWQVLa33IGp0XJE/3JLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:fe:94:0b:93:44:8e:c3:52:52:f7:e7:e8:f8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Nov 4 09:00:52 2025 GMT
Not After : Nov 5 09:00:52 2025 GMT
Subject: CN=c837920d00b2051e911583a75053200a3e9d11fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:4f:ce:b7:3e:a9:91:9b:c4:71:e2:fd:c7:
6e:8b:69:78:d0:f9:c0:b0:25:73:93:79:6e:49:c5:
01:de:7d:e8:bd:df:2d:19:87:95:22:d5:df:f3:8b:
1c:d8:f6:ca:98:ed:87:6f:70:46:25:aa:07:70:e1:
43:87:76:9a:9c:2b:62:11:88:f8:a3:65:fb:79:26:
a4:29:37:5d:33:a7:d0:48:49:0b:7c:c2:24:53:5b:
6f:64:40:00:3f:c8:48:47:91:2d:41:24:bf:dd:21:
86:a8:39:b7:c1:b9:f1:9d:00:4e:17:8b:69:0b:82:
3f:c1:3a:c0:c2:49:46:44:ac:06:28:f3:43:82:44:
ea:85:3e:40:a0:36:5c:08:0b:0a:17:ec:e5:f0:e8:
21:e7:84:b6:b2:a1:d8:4a:14:92:38:84:8b:f9:22:
a9:c8:31:a8:58:01:49:a0:2d:65:f5:b0:b6:b5:c4:
e8:8e:e8:2c:12:d3:f4:00:cf:40:64:bd:2c:0b:f4:
2b:d5:7c:95:80:3a:da:5e:94:94:d3:1a:61:7f:92:
6b:8b:54:7a:ff:d0:d3:c0:02:67:ed:af:ee:27:2f:
2f:8b:15:04:93:c3:c1:a5:b1:f3:b7:d0:46:eb:d7:
c0:69:83:c4:87:f0:01:f2:60:07:50:0a:9b:e5:44:
c0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:37:92:0D:00:B2:05:1E:91:15:83:A7:50:53:20:0A:3E:9D:11:FC
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:63:e6:f5:0e:41:d9:dd:74:ac:8b:b5:b1:90:74:0b:cf:37:
86:a7:cc:92:3a:5b:c9:9c:0a:50:df:87:77:cf:60:45:5d:2b:
8b:a0:46:42:07:80:62:13:50:ba:e5:5c:a6:4e:a5:a3:5c:1a:
19:d8:21:68:a6:89:75:e6:16:92:27:da:f8:98:10:cb:e2:65:
c2:b0:cf:d9:c6:52:80:bf:f2:b0:06:d5:57:54:c4:02:9a:fd:
62:0d:ff:eb:55:bc:4b:7b:1c:54:f4:70:98:44:50:78:f3:fe:
18:d1:f8:12:7f:cb:38:7d:9e:57:9a:c9:ec:64:ba:84:07:a9:
ea:4a:90:66:ec:ef:c0:25:1e:fb:a7:b9:15:bf:a7:8a:d4:1a:
fb:46:b9:bc:73:80:b6:fb:7b:9f:78:db:59:c6:28:99:41:b9:
90:aa:92:71:f8:9c:81:91:1b:ee:c1:ed:c5:7d:0a:74:03:46:
6c:dc:e7:dd:84:a3:4c:fa:57:79:70:2d:c5:6a:0c:fb:b6:39:
53:47:92:b1:e0:7f:b3:37:66:ee:55:6c:40:16:e4:33:80:6c:
08:f1:7c:08:cf:1c:d0:1d:0a:8c:63:d5:4b:f3:7f:c5:37:c0:
5a:59:96:d4:a1:64:db:3e:66:40:bf:9b:74:ad:39:e6:30:f8:
0d:43:1b:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGP6UC5NEjsNSUvfn6PjWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZDdmYzUwNTQ4Mjg3ZGVhZWE3Y2U5MjA5OWU0N2EwNGE3
MGQ0NTEwHhcNMjUxMTA0MDkwMDUyWhcNMjUxMTA1MDkwMDUyWjAzMTEwLwYDVQQD
EyhjODM3OTIwZDAwYjIwNTFlOTExNTgzYTc1MDUzMjAwYTNlOWQxMWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH9Pzrc+qZGbxHHi/cdui2l40PnA
sCVzk3luScUB3n3ovd8tGYeVItXf84sc2PbKmO2Hb3BGJaoHcOFDh3aanCtiEYj4
o2X7eSakKTddM6fQSEkLfMIkU1tvZEAAP8hIR5EtQSS/3SGGqDm3wbnxnQBOF4tp
C4I/wTrAwklGRKwGKPNDgkTqhT5AoDZcCAsKF+zl8Ogh54S2sqHYShSSOISL+SKp
yDGoWAFJoC1l9bC2tcTojugsEtP0AM9AZL0sC/Qr1XyVgDraXpSU0xphf5Jri1R6
/9DTwAJn7a/uJy8vixUEk8PBpbHzt9BG69fAaYPEh/AB8mAHUAqb5UTAtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMg3kg0AsgUekRWDp1BTIAo+nRH8MB8GA1UdIwQY
MBaAFNvX/FBUgoferqfOkgmeR6BKcNRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82MDZlYTktNDgzNC00YjYzLTllMGEt
ZjI1NjA0YzRiZTgyLzEvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS82MDZlYTktNDgzNC00YjYzLTllMGEtZjI1NjA0YzRiZTgy
LzEvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmPm9Q5B
2d10rIu1sZB0C883hqfMkjpbyZwKUN+Hd89gRV0ri6BGQgeAYhNQuuVcpk6lo1wa
GdghaKaJdeYWkifa+JgQy+JlwrDP2cZSgL/ysAbVV1TEApr9Yg3/61W8S3scVPRw
mERQePP+GNH4En/LOH2eV5rJ7GS6hAep6kqQZuzvwCUe+6e5Fb+nitQa+0a5vHOA
tvt7n3jbWcYomUG5kKqScficgZEb7sHtxX0KdANGbNzn3YSjTPpXeXAtxWoM+7Y5
U0eSseB/szdm7lVsQBbkM4BsCPF8CM8c0B0KjGPVS/N/xTfAWlmW1KFk2z5mQL+b
dK055jD4DUMbZA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 16:41:27 2025 by rpki-client