Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
File: c271cwBQxyD4x5BGbri4pI7750k.mft (raw, json)
Hash identifier: mM7yi76L6NAAdDug6FetLdQz2pXFzkSDbd9bfDrm3OI=
Subject key identifier: 3D:90:80:78:8E:F2:21:1E:7A:DD:0E:7C:01:E3:A0:A9:51:41:C9:95
Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749
Certificate serial: 019A51BF11DD185192AE3453E4983E9D99A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 02:01:07 +0000
Manifest this update: Wed 05 Nov 2025 02:01:07 +0000
Manifest next update: Thu 06 Nov 2025 02:01:07 +0000
Files and hashes: 1: U_EXFi0_K3LJzzOGjdd59sx5hhk.roa (hash: InLExGG/VRrfIxx+5P3BkdCZ9LeR0AfhLMm27/EtRM8=)
2: c271cwBQxyD4x5BGbri4pI7750k.crl (hash: 7T7IEkLxBO/b+V0E491WDQH7R5/Nyri7FM+yIl6n7Tk=)
3: fpEtFF5tn_F6AS7ORtQk_79zOLM.roa (hash: ecIVoFs7h4RkV6LSwkMSO/FMl9ZMbuW6Wd5+RjOOYhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:bf:11:dd:18:51:92:ae:34:53:e4:98:3e:9d:99:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749
Validity
Not Before: Nov 5 02:01:07 2025 GMT
Not After : Nov 6 02:01:07 2025 GMT
Subject: CN=3d9080788ef2211e7add0e7c01e3a0a95141c995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:f4:26:23:51:7b:95:64:81:51:a8:d3:1c:
28:e8:7a:f2:34:94:96:98:09:1d:11:b7:7b:f4:e2:
97:05:48:e4:5a:20:bf:66:3b:bf:05:b4:08:4b:3d:
53:dd:40:61:35:08:0e:bf:8e:ba:24:5d:a0:5d:41:
8b:c9:8e:97:10:79:8a:cb:ea:f8:0d:92:0d:49:af:
43:de:bc:db:06:05:01:bc:e6:3a:87:06:90:f2:bc:
16:08:72:d3:b5:da:01:9a:b0:ee:d7:b0:1d:0c:08:
eb:69:da:cc:89:bc:16:2c:48:04:02:54:22:ef:e0:
79:71:0f:a7:c2:3d:47:fb:b4:32:62:37:2b:a2:e5:
b9:e8:dc:b9:ac:87:25:e7:06:19:82:fa:7c:76:0f:
f7:32:a2:72:73:d3:99:4e:8f:c9:40:fa:cb:f9:7b:
44:1f:3b:64:6c:93:1b:3b:41:a4:18:d6:b7:c4:77:
01:b7:30:d9:da:e1:a5:cd:a5:c4:1f:c2:57:72:53:
b0:ea:8f:ea:05:6d:e3:b9:e6:b1:92:d3:50:8c:69:
ef:2f:88:b7:b8:81:a0:d3:53:90:cd:a3:ba:36:8d:
71:49:58:f8:fd:1e:a3:ce:33:ae:8a:50:71:3d:16:
ac:45:06:d0:09:f6:85:4f:dc:8b:63:c5:7e:8a:9a:
f5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:90:80:78:8E:F2:21:1E:7A:DD:0E:7C:01:E3:A0:A9:51:41:C9:95
X509v3 Authority Key Identifier:
keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3e:6e:67:3b:39:19:36:3c:9b:19:78:8f:14:ae:50:ad:98:
17:06:ce:63:e1:71:94:09:6d:2d:f8:e7:b4:98:99:f5:6d:d9:
8e:3a:45:19:f0:2e:5d:e4:57:01:bd:dc:3c:f7:b8:cf:18:5c:
d5:33:92:45:81:5b:ba:4a:27:32:ca:bb:38:8f:6f:da:25:d4:
f0:e0:aa:cb:cc:a4:90:d1:14:37:59:2c:6e:17:59:fc:3a:eb:
4c:4a:73:b5:14:c7:e9:26:0b:61:09:2d:73:c9:ea:4d:cc:36:
64:da:d1:10:94:db:40:cb:37:56:92:2b:8c:26:ed:31:cf:f1:
c9:47:a5:68:e0:08:2f:17:91:66:15:7e:55:6e:10:cc:d0:f5:
1e:ca:3e:97:2e:3c:d7:c3:42:72:34:ba:40:a8:aa:f9:f5:ca:
1c:d9:eb:c7:30:50:a8:bc:fb:cc:06:55:7e:db:35:0b:de:eb:
3d:46:2c:d6:ca:30:7b:07:ec:39:20:79:4d:15:fb:aa:66:b3:
4b:2e:3e:10:b7:2e:2d:c1:29:d2:b4:d4:58:e3:a8:6a:f2:2d:
cf:8f:22:98:bc:ba:e9:3a:24:dd:63:12:78:e2:dd:e5:2c:6e:
a5:ea:bb:b5:c0:08:ac:22:06:14:63:b2:b4:a0:ed:76:c2:3a:
8c:a7:16:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvxHdGFGSrjRT5Jg+nZmjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNmVmNTczMDA1MGM3MjBmOGM3OTA0NjZlYjhiOGE0OGVm
YmU3NDkwHhcNMjUxMTA1MDIwMTA3WhcNMjUxMTA2MDIwMTA3WjAzMTEwLwYDVQQD
EygzZDkwODA3ODhlZjIyMTFlN2FkZDBlN2MwMWUzYTBhOTUxNDFjOTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb70JiNRe5VkgVGo0xwo6HryNJSW
mAkdEbd79OKXBUjkWiC/Zju/BbQISz1T3UBhNQgOv466JF2gXUGLyY6XEHmKy+r4
DZINSa9D3rzbBgUBvOY6hwaQ8rwWCHLTtdoBmrDu17AdDAjradrMibwWLEgEAlQi
7+B5cQ+nwj1H+7QyYjcrouW56Ny5rIcl5wYZgvp8dg/3MqJyc9OZTo/JQPrL+XtE
HztkbJMbO0GkGNa3xHcBtzDZ2uGlzaXEH8JXclOw6o/qBW3jueaxktNQjGnvL4i3
uIGg01OQzaO6No1xSVj4/R6jzjOuilBxPRasRQbQCfaFT9yLY8V+ipr1PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2QgHiO8iEeet0OfAHjoKlRQcmVMB8GA1UdIwQY
MBaAFHNu9XMAUMcg+MeQRm64uKSO++dJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzI3MWN3QlF4eUQ0eDVCR2JyaTRwSTc3NTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84NDkyODEtYTMwMi00ZmY4LTkyZTMt
M2FlNGY5Y2YyNjgzLzEvYzI3MWN3QlF4eUQ0eDVCR2JyaTRwSTc3NTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84NDkyODEtYTMwMi00ZmY4LTkyZTMtM2FlNGY5Y2YyNjgz
LzEvYzI3MWN3QlF4eUQ0eDVCR2JyaTRwSTc3NTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmj5uZzs5
GTY8mxl4jxSuUK2YFwbOY+FxlAltLfjntJiZ9W3ZjjpFGfAuXeRXAb3cPPe4zxhc
1TOSRYFbukonMsq7OI9v2iXU8OCqy8ykkNEUN1ksbhdZ/DrrTEpztRTH6SYLYQkt
c8nqTcw2ZNrREJTbQMs3VpIrjCbtMc/xyUelaOAILxeRZhV+VW4QzND1Hso+ly48
18NCcjS6QKiq+fXKHNnrxzBQqLz7zAZVfts1C97rPUYs1sowewfsOSB5TRX7qmaz
Sy4+ELcuLcEp0rTUWOOoavItz48imLy66Tok3WMSeOLd5Sxupeq7tcAIrCIGFGOy
tKDtdsI6jKcW9w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:21:05 2025 by rpki-client