Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File: s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier: YyerrbI/5JPalwgkApyTixgFRTqaJjp/BoNOu8g5KSY=
Subject key identifier: 34:2B:84:1C:8E:AD:0D:61:D7:3B:5B:6B:C2:CE:36:86:46:F3:9C:66
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 019A4D3D2FAA2B9EA81885B0770544DC2E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number: 171B
Signing time: Tue 04 Nov 2025 05:00:46 +0000
Manifest this update: Tue 04 Nov 2025 05:00:46 +0000
Manifest next update: Wed 05 Nov 2025 05:00:46 +0000
Files and hashes: 1: 9-NB3ppe0EfeL2Nj37oF8VJ41t8.roa (hash: ZMKYndtOmSHpSKO5kfkDg42yZItGmF3H5NrIrUVaQPk=)
2: W3ef7yk_8thOKV8fePQf_c3aBKs.roa (hash: q4TpxDQr4+wv6OyV3D6r4UE1e0P7/7+4PMrtZl4uXJc=)
3: YRU1Ojg5qyXEoXOhvO7oLvQPC8c.roa (hash: TDJgwlET1jOQj6C/tybMD3s4rcsYrcr30h1aS7JqjFc=)
4: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: vQ8z/FTaOBzoNgEl18XrYSs97ZR/shKeMUm1MH0+qxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:2f:aa:2b:9e:a8:18:85:b0:77:05:44:dc:2e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Nov 4 05:00:46 2025 GMT
Not After : Nov 5 05:00:46 2025 GMT
Subject: CN=342b841c8ead0d61d73b5b6bc2ce368646f39c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6f:38:06:45:83:fa:4e:61:8d:28:fc:70:b6:
38:e0:ff:2f:be:53:38:93:65:09:c3:ef:65:f0:5b:
e2:a6:25:63:37:70:d5:f2:65:2c:7e:30:c3:e4:08:
ed:ca:31:a6:e0:7b:c6:b9:61:31:09:48:1f:9d:91:
6b:3e:a6:ba:2b:f8:84:17:46:bd:14:6b:a7:93:a3:
a7:62:55:f2:fb:68:0f:fd:fa:f9:f1:0e:e9:c5:76:
57:99:ef:94:e9:53:a7:f6:80:3d:a4:ca:4c:0b:47:
ad:0e:c1:9a:16:61:25:7d:d1:93:a2:04:27:27:66:
71:e8:4c:bd:cc:3f:93:56:bc:e8:3c:48:dd:3e:88:
da:9d:d1:24:90:df:96:c7:fb:24:26:64:56:9c:40:
18:5e:b4:85:4a:a2:5d:4c:43:59:d2:3c:60:6f:fb:
d2:63:5f:bc:2f:73:a9:39:5b:dc:ae:b7:62:ba:58:
4f:34:8d:2b:96:03:5a:d2:14:67:ae:fb:75:d7:f5:
8a:08:da:8d:2a:a8:64:67:05:cd:c6:0d:d2:0e:09:
a0:c9:b3:54:e4:2b:48:cd:bb:10:30:8d:e8:9c:f3:
29:b1:d6:03:61:06:c8:9e:30:24:b5:5e:d7:f8:b8:
18:5c:cd:de:e4:8a:82:f5:66:d4:2a:7b:7a:00:32:
b7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2B:84:1C:8E:AD:0D:61:D7:3B:5B:6B:C2:CE:36:86:46:F3:9C:66
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c7:d6:7f:dd:02:7f:d4:81:61:c4:4e:fa:c4:aa:c3:b2:45:
07:e4:da:a9:ac:56:a1:a1:f3:2f:8b:ea:59:3a:e8:7d:17:83:
31:d1:c6:db:bc:6b:28:95:01:90:e4:98:8a:ec:7a:0f:3b:43:
aa:e3:0e:21:b2:a1:ea:b0:73:2b:e8:5c:c8:12:44:49:71:e3:
98:9e:02:71:29:24:c5:8d:c9:66:19:c1:28:72:50:57:53:ec:
4e:f3:04:ec:66:34:ec:68:3c:e2:42:1b:0a:bc:f8:d1:67:74:
dc:22:06:e3:e4:10:fe:a7:4b:9c:fd:88:d7:95:b1:a2:9d:2e:
7a:48:28:8a:ce:d5:b8:d4:d7:c4:2f:e0:63:4d:1b:ca:4e:c1:
0a:0a:31:fb:be:e0:69:e2:53:05:52:92:0d:6f:8f:75:8f:88:
4d:59:6e:f1:d8:a4:b6:8d:b6:ed:68:9f:2e:7f:d3:d4:e8:44:
64:df:ca:8e:57:be:06:04:7e:a8:44:b2:6e:01:0d:ed:ed:20:
a3:b6:d5:30:20:dc:3d:1f:d0:96:ca:85:98:80:5d:73:2f:4e:
b5:55:8b:6b:47:20:d0:85:86:0c:c6:c8:c3:71:93:7b:b5:0e:
2c:3e:2d:f4:a2:b5:4f:92:d1:8f:1e:95:89:14:f7:95:fc:31:
63:bb:11:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPS+qK56oGIWwdwVE3C4MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZGQzNWNjZmY2YzJiODZhMWZhZDhmMTAzYmMyMDA3MGQw
OWU1MGQwHhcNMjUxMTA0MDUwMDQ2WhcNMjUxMTA1MDUwMDQ2WjAzMTEwLwYDVQQD
EygzNDJiODQxYzhlYWQwZDYxZDczYjViNmJjMmNlMzY4NjQ2ZjM5YzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8m84BkWD+k5hjSj8cLY44P8vvlM4
k2UJw+9l8FvipiVjN3DV8mUsfjDD5AjtyjGm4HvGuWExCUgfnZFrPqa6K/iEF0a9
FGunk6OnYlXy+2gP/fr58Q7pxXZXme+U6VOn9oA9pMpMC0etDsGaFmElfdGTogQn
J2Zx6Ey9zD+TVrzoPEjdPojandEkkN+Wx/skJmRWnEAYXrSFSqJdTENZ0jxgb/vS
Y1+8L3OpOVvcrrdiulhPNI0rlgNa0hRnrvt11/WKCNqNKqhkZwXNxg3SDgmgybNU
5CtIzbsQMI3onPMpsdYDYQbInjAktV7X+LgYXM3e5IqC9WbUKnt6ADK34wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQrhByOrQ1h1ztba8LONoZG85xmMB8GA1UdIwQY
MBaAFLPdNcz/bCuGofrY8QO8IAcNCeUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEt
MmIxMDUwNTFiYTU5LzEvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEtMmIxMDUwNTFiYTU5
LzEvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMfWf90C
f9SBYcRO+sSqw7JFB+TaqaxWoaHzL4vqWTrofReDMdHG27xrKJUBkOSYiux6DztD
quMOIbKh6rBzK+hcyBJESXHjmJ4CcSkkxY3JZhnBKHJQV1PsTvME7GY07Gg84kIb
Crz40Wd03CIG4+QQ/qdLnP2I15Wxop0uekgois7VuNTXxC/gY00byk7BCgox+77g
aeJTBVKSDW+PdY+ITVlu8dikto227WifLn/T1OhEZN/Kjle+BgR+qESybgEN7e0g
o7bVMCDcPR/QlsqFmIBdcy9OtVWLa0cg0IWGDMbIw3GTe7UOLD4t9KK1T5LRjx6V
iRT3lfwxY7sRHg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:54 2025 by rpki-client