Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
File: 1vvg67NTA0y7YyjrPo4_zTYLL7s.mft (raw, json)
Hash identifier: GGyg72/AuCw6gZGuSBrn9R1XL+jjVegSAjp+egRUu18=
Subject key identifier: 11:83:5C:17:98:2C:69:39:BC:60:84:D1:DC:DE:94:ED:29:72:51:83
Authority key identifier: D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
Certificate issuer: /CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Certificate serial: 019A4EF5657CE4225289594C8AFF879B6DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:36 +0000
Manifest this update: Tue 04 Nov 2025 13:01:36 +0000
Manifest next update: Wed 05 Nov 2025 13:01:36 +0000
Files and hashes: 1: 1vvg67NTA0y7YyjrPo4_zTYLL7s.crl (hash: 6DtWvvmt2GwQ8Jbg475sSf4D+3L53nIHqpDk+UILBYY=)
2: ruk9oKCw5z4NLnJ9yGyr_UCfoEY.roa (hash: 3E2wFt0mctq9eZeC5gr+9q8G9wNZ7Xmn3ppu8VejkKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:65:7c:e4:22:52:89:59:4c:8a:ff:87:9b:6d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Validity
Not Before: Nov 4 13:01:36 2025 GMT
Not After : Nov 5 13:01:36 2025 GMT
Subject: CN=11835c17982c6939bc6084d1dcde94ed29725183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:8e:f4:5c:b6:0d:da:e1:46:eb:12:0c:2c:
f3:9c:7d:1c:36:12:f7:50:8f:0d:31:48:0c:81:ce:
70:91:d5:ac:56:05:aa:7e:2d:98:f1:76:d8:d7:9b:
ca:38:9e:b0:9f:a0:69:cf:72:53:82:13:7f:72:e7:
a0:15:ad:64:85:61:7a:c6:c2:a3:77:d7:64:fb:92:
4c:a5:6d:73:73:1d:71:53:8d:a6:fd:2d:5e:b7:22:
38:07:37:0d:b1:d3:92:1a:0e:e9:1c:4b:24:a7:b3:
b5:3b:86:d3:aa:48:6e:41:d7:6a:f0:55:ba:bb:39:
db:cd:e3:97:56:08:bf:50:13:e4:49:e5:fd:6f:57:
38:24:f3:b1:ce:62:7d:6f:f7:cd:a1:73:98:68:e2:
b1:fd:03:8d:bd:a6:71:27:22:e3:f6:0c:0f:bd:c0:
80:2b:cf:39:69:8c:14:cc:56:23:43:6e:b2:e5:93:
98:82:c9:c4:c1:87:76:38:74:fa:c2:9b:f2:d2:e9:
63:65:90:53:f9:ad:97:10:c0:f4:c3:39:94:23:60:
19:ce:08:37:13:d5:3f:07:da:ca:49:8c:cb:84:57:
36:26:92:3c:ca:9a:7a:b4:73:5b:4d:f8:86:f3:ea:
d5:0a:49:d7:40:30:79:72:4b:b1:9e:c0:9b:8f:5c:
e3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:83:5C:17:98:2C:69:39:BC:60:84:D1:DC:DE:94:ED:29:72:51:83
X509v3 Authority Key Identifier:
keyid:D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:68:a2:49:28:12:90:24:f6:f2:9a:b9:be:19:e6:9f:36:e3:
62:9f:a1:9a:82:12:43:c2:be:82:6e:09:e8:07:16:f5:4c:3e:
09:b5:7e:94:85:86:17:d4:f1:b6:a8:04:ba:20:84:3c:58:04:
77:64:ed:d7:2a:7a:d1:32:4c:0f:f8:6d:e3:47:73:fd:87:a5:
16:27:d9:c1:c3:6c:53:5d:be:39:3d:8c:52:b2:b1:43:38:63:
e2:55:5b:8f:18:fa:fe:db:9b:4a:7e:6e:ad:cb:3b:5e:93:70:
ba:85:83:f9:07:02:fc:36:20:60:0c:ff:d9:11:a1:df:9c:92:
a5:4e:60:da:af:e0:0c:82:3d:83:ed:7f:cf:fd:73:cb:3c:e4:
16:b5:de:12:e1:71:1d:98:26:48:f4:4f:e7:2d:b8:22:ed:13:
0d:4e:64:2d:3c:b4:fc:70:5d:a0:39:97:90:c6:bd:e9:fe:05:
d8:11:f2:0d:71:b9:1e:93:03:14:b0:1c:13:82:09:96:cd:ef:
10:4f:4a:50:66:ca:d6:d2:fe:3c:09:cd:3f:62:ff:cf:7b:62:
fe:29:d7:7a:08:ae:f3:68:14:e5:c6:57:45:76:b4:9f:c3:b7:
3d:cd:26:71:a0:64:85:3b:25:3d:2d:22:ea:fa:61:5e:8c:be:
32:a6:56:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9WV85CJSiVlMiv+Hm238MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZmJlMGViYjM1MzAzNGNiYjYzMjhlYjNlOGUzZmNkMzYw
YjJmYmIwHhcNMjUxMTA0MTMwMTM2WhcNMjUxMTA1MTMwMTM2WjAzMTEwLwYDVQQD
EygxMTgzNWMxNzk4MmM2OTM5YmM2MDg0ZDFkY2RlOTRlZDI5NzI1MTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaeO9Fy2DdrhRusSDCzznH0cNhL3
UI8NMUgMgc5wkdWsVgWqfi2Y8XbY15vKOJ6wn6Bpz3JTghN/cuegFa1khWF6xsKj
d9dk+5JMpW1zcx1xU42m/S1etyI4BzcNsdOSGg7pHEskp7O1O4bTqkhuQddq8FW6
uznbzeOXVgi/UBPkSeX9b1c4JPOxzmJ9b/fNoXOYaOKx/QONvaZxJyLj9gwPvcCA
K885aYwUzFYjQ26y5ZOYgsnEwYd2OHT6wpvy0uljZZBT+a2XEMD0wzmUI2AZzgg3
E9U/B9rKSYzLhFc2JpI8ypp6tHNbTfiG8+rVCknXQDB5ckuxnsCbj1zjlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGDXBeYLGk5vGCE0dzelO0pclGDMB8GA1UdIwQY
MBaAFNb74OuzUwNMu2Mo6z6OP802Cy+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZ2ZzY3TlRBMHk3WXlqclBvNF96VFlMTDdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zMzUwNjAtMWIyNy00YzExLWEyYmMt
MDBlYmRmY2JiODZmLzEvMXZ2ZzY3TlRBMHk3WXlqclBvNF96VFlMTDdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8zMzUwNjAtMWIyNy00YzExLWEyYmMtMDBlYmRmY2JiODZm
LzEvMXZ2ZzY3TlRBMHk3WXlqclBvNF96VFlMTDdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWiiSSgS
kCT28pq5vhnmnzbjYp+hmoISQ8K+gm4J6AcW9Uw+CbV+lIWGF9TxtqgEuiCEPFgE
d2Tt1yp60TJMD/ht40dz/YelFifZwcNsU12+OT2MUrKxQzhj4lVbjxj6/tubSn5u
rcs7XpNwuoWD+QcC/DYgYAz/2RGh35ySpU5g2q/gDII9g+1/z/1zyzzkFrXeEuFx
HZgmSPRP5y24Iu0TDU5kLTy0/HBdoDmXkMa96f4F2BHyDXG5HpMDFLAcE4IJls3v
EE9KUGbK1tL+PAnNP2L/z3ti/inXegiu82gU5cZXRXa0n8O3Pc0mcaBkhTslPS0i
6vphXoy+MqZW4w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:47 2025 by rpki-client