Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
File: rOuZdImZq44CGPfI29zFaY1mnTk.mft (raw, json)
Hash identifier: bbIHkbAPrxP3hfMJVDYX2+0D+6ofU/yprRPyg4jnJ60=
Subject key identifier: EE:95:B8:38:C7:B1:E2:EF:EA:82:B1:EF:9C:9A:D0:19:A2:65:05:C6
Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Certificate serial: 019A4F627F76247E374A5E1A601FBD61437D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 15:00:46 +0000
Manifest this update: Tue 04 Nov 2025 15:00:46 +0000
Manifest next update: Wed 05 Nov 2025 15:00:46 +0000
Files and hashes: 1: AXdtgA9HD_eEgv2xOauCB5PRPTI.roa (hash: eE91r99J937Hp1PJua6WE3j9iIacTvevX68FK66M1mQ=)
2: rOuZdImZq44CGPfI29zFaY1mnTk.crl (hash: b3bu7qDTr2A/UxcOXbU45Nx5Auod9qesxfYJ5mM5n5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:7f:76:24:7e:37:4a:5e:1a:60:1f:bd:61:43:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Validity
Not Before: Nov 4 15:00:46 2025 GMT
Not After : Nov 5 15:00:46 2025 GMT
Subject: CN=ee95b838c7b1e2efea82b1ef9c9ad019a26505c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:1d:45:86:bc:6a:94:59:87:fd:45:c6:e9:
7c:e2:b0:7a:c8:e2:3d:f5:ed:77:c9:bc:38:5c:c7:
ee:4f:3a:c8:26:0e:d3:58:24:95:39:6f:02:c2:07:
b6:9b:6b:82:0e:12:b2:84:1d:f4:f9:88:54:1b:fd:
ba:02:43:ad:6d:86:51:7a:04:10:52:f2:d2:62:71:
77:6b:d5:2b:ea:a7:53:47:4c:34:26:6d:96:89:53:
1f:f5:2c:48:6f:df:29:59:99:6a:40:c6:12:ba:30:
05:19:f8:08:c1:4a:1d:77:83:2a:a3:4d:37:9f:ea:
5a:0a:07:3d:01:8b:f3:a8:66:bb:81:d2:54:9a:a7:
33:6e:90:04:4d:11:45:f7:32:08:88:0c:6c:97:a9:
63:f1:9b:51:20:4c:20:e6:04:82:a6:c0:e4:43:22:
87:0c:fc:30:64:18:20:20:4f:14:5e:59:ac:53:fd:
27:59:99:f0:37:7d:ff:f6:b4:8e:41:e3:d8:cc:de:
79:5f:bb:2d:24:aa:7d:f9:e0:8d:9e:25:08:2e:63:
cd:3d:b0:ab:10:f2:66:50:82:89:ce:fd:e0:59:a8:
8e:3c:51:bc:c0:fe:02:ee:ff:cf:17:0c:33:5d:d4:
5e:02:d4:b9:f3:5f:fd:f9:15:cc:04:50:8e:c7:de:
92:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:95:B8:38:C7:B1:E2:EF:EA:82:B1:EF:9C:9A:D0:19:A2:65:05:C6
X509v3 Authority Key Identifier:
keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:69:6f:81:31:36:16:b7:53:2c:04:8c:4f:76:63:4a:15:45:
35:ab:83:3f:11:2c:54:2a:cd:e3:63:ad:3b:e4:ac:42:c9:80:
df:18:ee:6b:c0:7b:a1:0f:5b:fd:52:a7:a7:21:b0:de:eb:f3:
66:54:31:d8:5c:7c:e7:46:d4:6f:e9:b8:8c:17:6a:e4:9b:5f:
42:55:23:1f:a7:c2:f7:5e:97:40:17:e2:95:01:35:9a:a7:59:
62:37:87:05:ae:63:05:55:04:f9:ad:27:8d:33:ad:21:bb:09:
72:1d:40:8b:3c:e7:c4:48:e7:32:94:34:02:a1:8e:f4:5e:b0:
ca:05:ed:49:cb:13:12:c2:9c:c9:2b:2c:ef:dc:cb:86:34:0d:
b5:46:92:36:66:4d:f6:2a:b4:f9:01:00:06:e9:8e:6b:00:85:
50:80:54:e6:85:4c:77:c4:71:8b:d4:97:4b:c0:83:a2:15:95:
3a:bd:63:b1:a3:89:d3:72:7f:d4:36:64:bc:bd:90:83:33:e6:
30:15:33:80:23:09:54:77:3b:e2:ce:e8:3f:6f:a0:83:39:a2:
bd:a2:33:2a:f8:93:f9:72:60:d1:19:86:e6:37:fc:ea:c1:a2:
1e:a3:20:3a:eb:b7:66:39:ad:f2:e7:cb:4b:66:4e:55:ee:b9:
b1:4f:a7:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYn92JH43Sl4aYB+9YUN9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZWI5OTc0ODk5OWFiOGUwMjE4ZjdjOGRiZGNjNTY5OGQ2
NjlkMzkwHhcNMjUxMTA0MTUwMDQ2WhcNMjUxMTA1MTUwMDQ2WjAzMTEwLwYDVQQD
EyhlZTk1YjgzOGM3YjFlMmVmZWE4MmIxZWY5YzlhZDAxOWEyNjUwNWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywwdRYa8apRZh/1Fxul84rB6yOI9
9e13ybw4XMfuTzrIJg7TWCSVOW8Cwge2m2uCDhKyhB30+YhUG/26AkOtbYZRegQQ
UvLSYnF3a9Ur6qdTR0w0Jm2WiVMf9SxIb98pWZlqQMYSujAFGfgIwUodd4Mqo003
n+paCgc9AYvzqGa7gdJUmqczbpAETRFF9zIIiAxsl6lj8ZtRIEwg5gSCpsDkQyKH
DPwwZBggIE8UXlmsU/0nWZnwN33/9rSOQePYzN55X7stJKp9+eCNniUILmPNPbCr
EPJmUIKJzv3gWaiOPFG8wP4C7v/PFwwzXdReAtS581/9+RXMBFCOx96S8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6VuDjHseLv6oKx75ya0BmiZQXGMB8GA1UdIwQY
MBaAFKzrmXSJmauOAhj3yNvcxWmNZp05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mNjAxMzQtNmQ2ZC00ZGMxLTkyYTkt
NjU5YWU4MjE5OTFjLzEvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mNjAxMzQtNmQ2ZC00ZGMxLTkyYTktNjU5YWU4MjE5OTFj
LzEvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2lvgTE2
FrdTLASMT3ZjShVFNauDPxEsVCrN42OtO+SsQsmA3xjua8B7oQ9b/VKnpyGw3uvz
ZlQx2Fx850bUb+m4jBdq5JtfQlUjH6fC916XQBfilQE1mqdZYjeHBa5jBVUE+a0n
jTOtIbsJch1AizznxEjnMpQ0AqGO9F6wygXtScsTEsKcySss79zLhjQNtUaSNmZN
9iq0+QEABumOawCFUIBU5oVMd8Rxi9SXS8CDohWVOr1jsaOJ03J/1DZkvL2QgzPm
MBUzgCMJVHc74s7oP2+ggzmivaIzKviT+XJg0RmG5jf86sGiHqMgOuu3Zjmt8ufL
S2ZOVe65sU+ngw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:05 2025 by rpki-client