Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File: 13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier: JaayvyZfNZPA6PNJs/j07ksqFBDI2PdP+3SqFmZygic=
Subject key identifier: 76:A6:86:DC:09:76:CB:05:27:69:70:CD:58:E5:5B:E8:46:11:0B:71
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 019A4EF45D8EBD3E8CD8C984729B05490D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:28 +0000
Manifest this update: Tue 04 Nov 2025 13:00:28 +0000
Manifest next update: Wed 05 Nov 2025 13:00:28 +0000
Files and hashes: 1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: NDjQMOLhN0OC1ngaoSPeDxUNjLZ0/Gs3B9wfCigirbQ=)
2: f0gof4jxw94Oa83YFTdbTbKjLPk.roa (hash: TTuzPsw9kpuOO/S82uUhytdELCayKcLt12jYeRdVVIg=)
3: fI_1hDVc0AIsq5nMQmL9xfz1kXA.roa (hash: 89mtvnCyTjJUBdmS9eZxdF32JISfZjUl73RykEZkqVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:5d:8e:bd:3e:8c:d8:c9:84:72:9b:05:49:0d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: Nov 4 13:00:28 2025 GMT
Not After : Nov 5 13:00:28 2025 GMT
Subject: CN=76a686dc0976cb05276970cd58e55be846110b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:de:cd:c2:2f:41:38:b9:68:4e:3e:da:0d:39:
5d:18:63:d4:7a:25:b3:ff:a5:b7:81:54:8d:13:47:
e6:8b:8e:5b:04:96:4c:65:4b:6f:28:c9:3b:0b:93:
82:ab:02:96:c3:05:34:3e:51:0d:a7:c2:7a:4d:dd:
ab:5c:ec:6e:c1:50:24:b4:14:5a:fd:c5:37:6c:d1:
70:db:6a:0c:16:95:77:3f:cf:36:c8:ad:74:17:9b:
09:3b:9b:2f:38:0f:bc:02:2c:65:ec:91:1f:d0:91:
2d:46:b2:ef:0e:1a:24:03:e9:7a:d0:d8:92:0e:b8:
2c:2b:75:fa:e8:07:19:58:9c:c0:75:4b:3e:7c:3b:
c8:2a:ff:49:4a:03:1b:26:21:d2:0d:c5:c5:9a:b8:
fa:7d:24:8e:fc:22:f9:63:56:d3:af:42:18:00:02:
b1:be:d6:0b:1b:7c:05:63:73:7b:86:81:41:86:dd:
95:df:fd:6a:8e:ce:6c:24:95:11:4a:7c:fa:7c:7c:
65:eb:d9:ff:3d:b0:97:c3:9f:f3:81:ca:11:6a:28:
ce:7d:86:34:db:b6:f4:38:77:5a:7a:9f:ea:db:d9:
78:78:82:90:a8:2b:58:19:ee:a8:85:db:e5:18:de:
57:15:d3:19:48:71:e2:15:f6:70:ef:52:18:1c:c3:
3b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A6:86:DC:09:76:CB:05:27:69:70:CD:58:E5:5B:E8:46:11:0B:71
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e7:09:b9:5a:42:0f:e6:2a:25:25:fc:98:27:99:49:f4:c1:
44:89:95:27:e5:0e:23:18:9c:32:2e:07:f8:24:7d:75:0e:99:
11:b2:0b:75:a8:49:64:b2:ba:af:85:d0:79:2c:f7:c3:59:65:
ce:1d:1d:65:fa:e0:af:e9:15:6f:2f:78:7a:30:1d:99:aa:6e:
fb:13:95:2e:2e:ae:9f:5a:af:d7:87:be:5d:61:3d:1e:7a:c2:
d6:71:57:d1:17:ce:98:40:2d:a3:18:9e:b5:6b:10:17:84:61:
28:77:57:22:d8:8c:0e:50:fa:dc:3c:eb:bd:4c:be:67:b0:55:
8e:0d:24:be:75:fc:98:9a:56:3f:e6:66:b0:97:6f:b4:cf:20:
0d:a5:cc:d3:7c:65:16:7c:ae:b4:3c:5c:a4:f2:11:7f:a0:13:
02:e4:a8:8e:43:fa:43:cd:4d:85:eb:70:24:72:ad:f1:6a:42:
0e:28:4a:4f:c9:da:74:7a:e4:9c:2e:d0:e4:31:7b:3a:c7:30:
31:31:49:f0:5e:e9:1d:35:7a:f8:e2:9c:cd:93:3c:11:20:0e:
ee:ce:87:16:cc:75:c0:37:c7:0f:8e:23:84:a9:6c:74:c2:ae:
d8:28:95:96:b3:45:fd:cc:f8:3e:3d:6e:f8:18:2d:4e:fb:d7:
c9:2a:0e:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9F2OvT6M2MmEcpsFSQ0bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Nzc5NDNiMzQxMTg4ZTljZDJlOTNkZTI4OGIzM2ZmZTA0
MWM3ZDIwHhcNMjUxMTA0MTMwMDI4WhcNMjUxMTA1MTMwMDI4WjAzMTEwLwYDVQQD
Eyg3NmE2ODZkYzA5NzZjYjA1Mjc2OTcwY2Q1OGU1NWJlODQ2MTEwYjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9d7Nwi9BOLloTj7aDTldGGPUeiWz
/6W3gVSNE0fmi45bBJZMZUtvKMk7C5OCqwKWwwU0PlENp8J6Td2rXOxuwVAktBRa
/cU3bNFw22oMFpV3P882yK10F5sJO5svOA+8Aixl7JEf0JEtRrLvDhokA+l60NiS
DrgsK3X66AcZWJzAdUs+fDvIKv9JSgMbJiHSDcXFmrj6fSSO/CL5Y1bTr0IYAAKx
vtYLG3wFY3N7hoFBht2V3/1qjs5sJJURSnz6fHxl69n/PbCXw5/zgcoRaijOfYY0
27b0OHdaep/q29l4eIKQqCtYGe6ohdvlGN5XFdMZSHHiFfZw71IYHMM7awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHamhtwJdssFJ2lwzVjlW+hGEQtxMB8GA1UdIwQY
MBaAFNd3lDs0EYjpzS6T3iiLM//gQcfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNlVU96UVJpT25OTHBQZUtJc3pfLUJCeDlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zNWIxZGYtNzhjZi00ODE4LWIzM2Et
Y2RhN2ZjN2ViMDkyLzEvMTNlVU96UVJpT25OTHBQZUtJc3pfLUJCeDlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8zNWIxZGYtNzhjZi00ODE4LWIzM2EtY2RhN2ZjN2ViMDky
LzEvMTNlVU96UVJpT25OTHBQZUtJc3pfLUJCeDlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOcJuVpC
D+YqJSX8mCeZSfTBRImVJ+UOIxicMi4H+CR9dQ6ZEbILdahJZLK6r4XQeSz3w1ll
zh0dZfrgr+kVby94ejAdmapu+xOVLi6un1qv14e+XWE9HnrC1nFX0RfOmEAtoxie
tWsQF4RhKHdXItiMDlD63DzrvUy+Z7BVjg0kvnX8mJpWP+ZmsJdvtM8gDaXM03xl
FnyutDxcpPIRf6ATAuSojkP6Q81NhetwJHKt8WpCDihKT8nadHrknC7Q5DF7Oscw
MTFJ8F7pHTV6+OKczZM8ESAO7s6HFsx1wDfHD44jhKlsdMKu2CiVlrNF/cz4Pj1u
+BgtTvvXySoOsw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:41 2025 by rpki-client