Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
File: 20bM9fil_kT0v9m6ZrpRJG2osYQ.mft (raw, json)
Hash identifier: J+j4z93EEBWFNV31rvep7XuFP1PE4urZopOw1e/cLKo=
Subject key identifier: CF:94:50:96:F7:94:70:C8:D4:52:26:DE:1B:F6:15:39:86:1D:3C:11
Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Certificate serial: 019A4F9966D272C6D3FEBC15AE7CF7DB75FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
Manifest number: 14D2
Signing time: Tue 04 Nov 2025 16:00:44 +0000
Manifest this update: Tue 04 Nov 2025 16:00:44 +0000
Manifest next update: Wed 05 Nov 2025 16:00:44 +0000
Files and hashes: 1: 20bM9fil_kT0v9m6ZrpRJG2osYQ.crl (hash: jNytPQBv6v1PdelRh+Q9YC+3Mw1aXDr9p5mQcv7fKXk=)
2: tE13-Z8TEXFI2N_Q3eslEjXwYJ4.roa (hash: 7axnrMAdFOe7EcvPvTZA4mgDnvv0sfD7w1s1AvMo3bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:66:d2:72:c6:d3:fe:bc:15:ae:7c:f7:db:75:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Validity
Not Before: Nov 4 16:00:44 2025 GMT
Not After : Nov 5 16:00:44 2025 GMT
Subject: CN=cf945096f79470c8d45226de1bf61539861d3c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4d:fd:d8:bd:8d:35:37:5d:83:e5:b5:30:b4:
5d:62:22:5d:c0:1b:92:61:c4:1a:bb:2c:b7:63:5b:
a5:03:6f:40:ba:f0:3a:2b:5f:ce:17:29:b2:1b:d9:
8e:b8:ec:06:fa:fb:4a:c7:6b:a9:3f:da:00:a9:0f:
ba:5e:0b:16:f2:5d:c3:a1:50:e0:b8:68:d0:a9:66:
c6:73:ec:bd:d0:aa:ad:cb:66:82:d2:3c:5a:65:6e:
e5:5d:76:6a:59:60:9d:a7:f5:4c:4e:7f:94:96:e4:
98:c2:dc:d5:2c:81:cc:22:6e:fd:5a:ed:18:a8:28:
ac:95:81:70:4a:73:19:67:7d:37:80:a3:81:f9:b3:
92:55:2c:fd:71:16:8b:21:c8:a6:66:0d:52:6f:01:
7b:f6:35:90:8b:4d:0c:0d:d3:a4:c9:ed:44:26:5e:
76:dd:b5:0d:76:58:1c:f1:c1:da:7f:c0:2b:00:6d:
dd:84:f9:60:89:c7:66:bd:9e:d3:c7:9c:a3:d4:14:
9c:f0:e3:e3:99:79:6e:97:ba:f1:89:41:45:5e:be:
73:46:d6:d3:47:1c:c7:54:4f:e5:19:c8:06:9e:46:
83:1d:18:9b:c6:0e:91:fc:27:96:3f:eb:1c:18:56:
ea:9e:3e:08:54:eb:88:5b:85:0b:c7:b8:05:f4:ba:
d5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:94:50:96:F7:94:70:C8:D4:52:26:DE:1B:F6:15:39:86:1D:3C:11
X509v3 Authority Key Identifier:
keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0b:53:4d:2c:f9:e7:46:01:ec:e5:15:48:d4:90:dc:c4:dd:
85:6a:46:53:ae:62:8f:3e:9e:8f:02:1d:e9:df:cc:d7:0e:bf:
fe:1a:ab:f6:32:31:0e:7d:de:76:48:81:3c:db:75:59:11:ae:
f4:a1:e5:ee:6b:be:81:ce:99:d6:3d:8b:3c:f3:89:4f:a2:a3:
97:9d:7c:f0:4e:6d:c0:19:64:72:e2:55:06:38:16:d1:bb:9a:
9c:5c:f7:94:93:4a:f3:5b:bc:76:8b:61:13:90:42:62:cd:bd:
4e:0b:3b:92:20:cf:68:c4:2d:e3:54:49:d9:bb:d6:95:a1:28:
95:70:56:8a:af:c5:51:78:16:de:72:5f:b1:b9:c9:a2:9e:a4:
6e:2b:01:fe:20:21:52:bc:bd:be:fa:7a:b9:df:7a:51:d3:d8:
b6:64:00:81:c9:68:da:52:76:cc:62:2f:b7:d6:2a:af:17:5c:
e2:b2:b5:42:87:bd:52:6e:6d:4b:13:ea:60:8e:5f:99:dc:3b:
96:a2:90:78:06:54:ba:da:84:65:ca:0e:2e:4f:b2:56:d5:0b:
b3:fd:d2:b1:82:66:91:0d:8c:1a:37:b8:5b:e2:f8:87:84:f2:
3a:de:9b:bf:98:0e:4d:0f:65:76:99:a6:70:30:f4:a0:c6:8c:
73:bb:35:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmWbScsbT/rwVrnz323X8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDZjY2Y1ZjhhNWZlNDRmNGJmZDliYTY2YmE1MTI0NmRh
OGIxODQwHhcNMjUxMTA0MTYwMDQ0WhcNMjUxMTA1MTYwMDQ0WjAzMTEwLwYDVQQD
EyhjZjk0NTA5NmY3OTQ3MGM4ZDQ1MjI2ZGUxYmY2MTUzOTg2MWQzYzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00392L2NNTddg+W1MLRdYiJdwBuS
YcQauyy3Y1ulA29AuvA6K1/OFymyG9mOuOwG+vtKx2upP9oAqQ+6XgsW8l3DoVDg
uGjQqWbGc+y90Kqty2aC0jxaZW7lXXZqWWCdp/VMTn+UluSYwtzVLIHMIm79Wu0Y
qCislYFwSnMZZ303gKOB+bOSVSz9cRaLIcimZg1SbwF79jWQi00MDdOkye1EJl52
3bUNdlgc8cHaf8ArAG3dhPlgicdmvZ7Tx5yj1BSc8OPjmXlul7rxiUFFXr5zRtbT
RxzHVE/lGcgGnkaDHRibxg6R/CeWP+scGFbqnj4IVOuIW4ULx7gF9LrVvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+UUJb3lHDI1FIm3hv2FTmGHTwRMB8GA1UdIwQY
MBaAFNtGzPX4pf5E9L/Zuma6USRtqLGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mNzJhMWUtNmFkYi00MzAyLWEwZTgt
ZDQyYTgxYjgxZTIzLzEvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9mNzJhMWUtNmFkYi00MzAyLWEwZTgtZDQyYTgxYjgxZTIz
LzEvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQtTTSz5
50YB7OUVSNSQ3MTdhWpGU65ijz6ejwId6d/M1w6//hqr9jIxDn3edkiBPNt1WRGu
9KHl7mu+gc6Z1j2LPPOJT6Kjl5188E5twBlkcuJVBjgW0buanFz3lJNK81u8doth
E5BCYs29Tgs7kiDPaMQt41RJ2bvWlaEolXBWiq/FUXgW3nJfsbnJop6kbisB/iAh
Ury9vvp6ud96UdPYtmQAgclo2lJ2zGIvt9Yqrxdc4rK1Qoe9Um5tSxPqYI5fmdw7
lqKQeAZUutqEZcoOLk+yVtULs/3SsYJmkQ2MGje4W+L4h4TyOt6bv5gOTQ9ldpmm
cDD0oMaMc7s1CQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:07:53 2025 by rpki-client