Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: D/dl5JYU3Hd9VYhp4KUDgyOxzYSTwaq5dbd8KyrF+hg=
Subject key identifier: B3:87:F1:DD:FC:0E:96:EC:A4:0F:B9:A1:4A:77:45:54:2B:83:7A:3A
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 019A559B88008964F03DBEE28D2B164EE164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 20:00:47 +0000
Manifest this update: Wed 05 Nov 2025 20:00:47 +0000
Manifest next update: Thu 06 Nov 2025 20:00:47 +0000
Files and hashes: 1: Lddee0yGLa96EV9cff9j1b8lisk.roa (hash: 4wmS8bLLBI0yCHZS6lNJzngX25UoSHi3CPRXK8eiy+g=)
2: oFHxOR-gmoi2f8hzooiT2H5qGbs.roa (hash: v7L5BEVhrfX9YxGEPwkVKzRUyMYIDLUuZIRykF3hjrE=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: tFPt6ZOjy8HqdKnuWG2KnetyfpstshZduIAi59Bi/58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:88:00:89:64:f0:3d:be:e2:8d:2b:16:4e:e1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Nov 5 20:00:47 2025 GMT
Not After : Nov 6 20:00:47 2025 GMT
Subject: CN=b387f1ddfc0e96eca40fb9a14a7745542b837a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:68:a6:9d:73:73:2c:18:c8:b9:af:99:2d:
70:6d:1b:e0:fc:b2:9f:33:ce:d7:9c:43:2c:80:5b:
93:13:1f:79:4a:f0:b4:b3:85:eb:c5:97:e5:d4:d5:
08:e5:f2:bf:e5:ad:c1:e7:5b:e7:78:93:a0:c2:6d:
76:49:cb:47:13:6f:40:63:01:7a:bc:e1:62:c6:36:
0b:49:0e:78:dd:6f:4c:9e:2d:04:89:ce:01:da:c1:
2a:9d:e7:57:80:2c:9f:6b:e6:7b:76:1e:87:43:b9:
91:9a:b1:52:49:34:e5:3d:f2:fb:58:a5:2d:a4:0f:
95:be:ec:b9:f7:ba:f6:33:ff:75:8d:68:8b:50:39:
1d:c4:28:2f:47:df:49:da:4d:89:76:54:65:d9:a4:
73:08:33:58:64:2f:1c:00:ba:29:57:b8:2e:ba:b1:
89:ad:75:19:34:80:12:ab:b6:37:dd:63:65:c7:5c:
8e:05:4e:8e:c9:5e:0b:30:29:46:d5:22:cd:ca:8b:
d8:a4:44:9e:0a:12:83:6f:21:57:6f:b7:4b:7d:1f:
71:f6:73:3a:c7:87:56:5a:b3:66:36:42:05:6f:1e:
79:5d:3e:ae:85:16:22:ac:12:bd:7c:ca:d7:23:bd:
39:52:3a:08:80:68:fe:a9:32:80:f1:12:aa:1c:d8:
1c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:87:F1:DD:FC:0E:96:EC:A4:0F:B9:A1:4A:77:45:54:2B:83:7A:3A
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:38:c1:8b:2d:86:73:96:20:7b:52:df:53:11:2d:ed:84:79:
51:ae:ce:ac:e0:f7:53:87:30:7d:c6:ac:5b:86:26:c3:ad:35:
96:39:c6:45:b7:84:0e:f7:8f:5f:8e:64:fe:ea:45:51:22:6f:
0b:46:99:f8:49:22:58:b5:98:99:bb:61:26:3f:70:ba:51:8d:
37:c4:bd:af:9d:19:b5:24:5c:3b:31:0b:2d:f3:3e:61:c3:f6:
de:51:ec:75:5e:e7:3e:01:1a:10:71:ca:0b:3d:51:ff:f3:75:
fd:c9:39:6e:42:55:04:d4:d4:a0:2e:8a:b7:d6:1d:63:2a:38:
7f:17:82:ba:4b:14:fe:e4:23:5d:51:6f:1b:50:a5:41:67:80:
51:8b:66:61:cd:80:20:16:8c:c8:c9:a2:e9:6d:43:ce:90:b1:
9d:8d:b0:f7:fd:08:10:be:0b:93:cd:ab:ca:b0:ef:cd:ea:d1:
2c:62:9b:cb:c7:dc:e5:02:38:fc:da:46:ed:62:cd:1c:65:76:
7d:28:0f:5b:28:59:8d:88:01:4e:b2:f7:8f:6b:31:81:86:d6:
a8:46:66:9b:fa:88:d5:75:41:33:b2:52:2a:77:28:b9:7a:d8:
5c:d6:41:01:8d:f6:6a:52:4e:fc:b0:b3:2f:b8:5a:2b:a1:36:
dd:4d:01:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpVm4gAiWTwPb7ijSsWTuFkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNGVmNGE4ZWQzNzExYjZhY2Q2OGMwZjQ4ZjYyMTgzMWZk
NWFhYWUwHhcNMjUxMTA1MjAwMDQ3WhcNMjUxMTA2MjAwMDQ3WjAzMTEwLwYDVQQD
EyhiMzg3ZjFkZGZjMGU5NmVjYTQwZmI5YTE0YTc3NDU1NDJiODM3YTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEpopp1zcywYyLmvmS1wbRvg/LKf
M87XnEMsgFuTEx95SvC0s4XrxZfl1NUI5fK/5a3B51vneJOgwm12SctHE29AYwF6
vOFixjYLSQ543W9Mni0Eic4B2sEqnedXgCyfa+Z7dh6HQ7mRmrFSSTTlPfL7WKUt
pA+Vvuy597r2M/91jWiLUDkdxCgvR99J2k2JdlRl2aRzCDNYZC8cALopV7guurGJ
rXUZNIASq7Y33WNlx1yOBU6OyV4LMClG1SLNyovYpESeChKDbyFXb7dLfR9x9nM6
x4dWWrNmNkIFbx55XT6uhRYirBK9fMrXI705UjoIgGj+qTKA8RKqHNgcxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOH8d38DpbspA+5oUp3RVQrg3o6MB8GA1UdIwQY
MBaAFK9O9KjtNxG2rNaMD0j2IYMf1aquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDkt
Y2I5YzU4ZjUxMGNiLzEvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDktY2I5YzU4ZjUxMGNi
LzEvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDjBiy2G
c5Yge1LfUxEt7YR5Ua7OrOD3U4cwfcasW4Ymw601ljnGRbeEDvePX45k/upFUSJv
C0aZ+EkiWLWYmbthJj9wulGNN8S9r50ZtSRcOzELLfM+YcP23lHsdV7nPgEaEHHK
Cz1R//N1/ck5bkJVBNTUoC6Kt9YdYyo4fxeCuksU/uQjXVFvG1ClQWeAUYtmYc2A
IBaMyMmi6W1DzpCxnY2w9/0IEL4Lk82ryrDvzerRLGKby8fc5QI4/NpG7WLNHGV2
fSgPWyhZjYgBTrL3j2sxgYbWqEZmm/qI1XVBM7JSKncouXrYXNZBAY32alJO/LCz
L7haK6E23U0B8w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:51:32 2025 by rpki-client