Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
File: tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft (raw, json)
Hash identifier: QgOOIUwPPhNmWTbThFQDoiVqCNWwmZ2KRc7dBcRTlwY=
Subject key identifier: 3B:12:2D:C9:2D:10:F9:53:68:82:66:AD:94:35:16:AD:54:1C:E8:91
Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
Certificate issuer: /CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Certificate serial: 019A52D0F9290A55EDDC7CCFE3898852167B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 07:00:18 +0000
Manifest this update: Wed 05 Nov 2025 07:00:18 +0000
Manifest next update: Thu 06 Nov 2025 07:00:18 +0000
Files and hashes: 1: ag-uYpovt5JPQ3cFAXtXn4zz86A.roa (hash: 2LKnP2sHY9S5jGwYqiGKID4jG+yM+87plZe5I7Vq4ns=)
2: tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl (hash: nlVVSHdawwcpic4hBuXM/RlyXPGJehMHpuTv2o/A4UE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d0:f9:29:0a:55:ed:dc:7c:cf:e3:89:88:52:16:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Validity
Not Before: Nov 5 07:00:18 2025 GMT
Not After : Nov 6 07:00:18 2025 GMT
Subject: CN=3b122dc92d10f953688266ad943516ad541ce891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:23:af:07:ac:54:93:ee:1b:b1:f8:9c:bb:
02:09:ba:af:96:43:64:77:ea:1e:7c:90:8b:8b:db:
e4:3f:a4:5a:2e:6d:74:a9:11:31:01:bf:e3:b9:75:
50:cf:cd:bc:71:16:64:31:08:f2:ec:32:5b:33:4c:
fd:bc:f2:b3:ab:5c:14:70:29:a8:23:83:6d:13:7b:
83:43:3d:55:aa:11:c2:16:e6:7b:ce:f6:ac:54:8e:
b9:26:59:0c:c4:7f:c2:ce:c9:46:70:5d:4d:db:0e:
d6:8d:3b:78:fa:2c:d7:a9:67:7b:b4:01:95:19:f6:
47:1c:f1:3d:79:2e:cf:5e:3f:ba:4d:c1:57:b9:91:
7b:e3:08:9b:d4:41:24:6c:7f:97:da:61:26:92:55:
00:5c:f3:d3:ae:88:95:ae:4b:10:67:26:46:39:07:
2f:a8:15:5c:ba:c9:9b:4c:8c:5f:aa:34:3b:44:a7:
9c:cf:e2:47:cb:4a:ad:f0:4f:23:cc:89:fb:34:83:
cb:05:d2:50:2a:0b:4c:a8:70:0e:09:5c:d4:ed:c6:
d6:73:6f:55:14:6e:79:dc:d2:50:f8:5f:a5:99:32:
0f:b4:55:6c:28:e5:c0:1b:90:52:ab:da:59:76:3d:
13:17:71:3e:61:d6:47:34:46:dd:3a:2c:fc:e9:04:
e3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:12:2D:C9:2D:10:F9:53:68:82:66:AD:94:35:16:AD:54:1C:E8:91
X509v3 Authority Key Identifier:
keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:32:72:4d:ac:5c:3f:1c:1a:24:cc:67:34:4a:15:fc:8b:74:
0c:f9:01:ed:78:39:ed:52:56:53:7a:ca:a3:72:82:8d:23:04:
91:00:3a:15:04:d9:ce:ef:9f:f2:d2:d1:0e:ad:e7:45:94:23:
3c:c7:59:dd:0a:3b:a9:ed:ee:54:3e:68:85:ea:68:a3:94:bf:
f0:ae:6e:1e:99:c6:bf:6a:9e:a5:46:ef:72:d8:13:4e:c8:61:
05:75:9c:a2:ab:52:56:d9:b2:b9:ea:af:0e:66:0c:95:d1:36:
64:d3:42:6b:e1:b3:11:f7:c1:e6:39:f5:48:59:24:78:63:b8:
44:8f:d3:24:55:42:3c:29:4a:11:30:32:85:b9:c5:8a:77:4a:
46:f6:00:66:05:8b:38:f0:ef:5e:0e:4c:73:dc:ff:99:82:c4:
fc:d8:c6:bf:33:c1:20:7d:df:ed:5e:4f:29:fe:9a:55:55:83:
b2:c0:ff:02:a0:2e:de:a8:46:b7:91:5f:64:67:e7:15:82:2d:
c5:2a:b8:54:84:13:49:d9:31:c1:9c:f0:4c:c2:12:a6:f6:7a:
a8:62:9d:08:7b:e6:97:86:0d:a6:13:53:47:29:c7:b2:1e:61:
f0:2c:8c:3e:47:65:8d:85:44:3f:70:e7:bb:53:37:67:fd:4a:
49:cf:a3:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0PkpClXt3HzP44mIUhZ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YmRkZTc4NDE1YjY5YzMxMjc3YzBhYWM3ZmNhNjYwN2Q2
MzVkODgwHhcNMjUxMTA1MDcwMDE4WhcNMjUxMTA2MDcwMDE4WjAzMTEwLwYDVQQD
EygzYjEyMmRjOTJkMTBmOTUzNjg4MjY2YWQ5NDM1MTZhZDU0MWNlODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaMjrwesVJPuG7H4nLsCCbqvlkNk
d+oefJCLi9vkP6RaLm10qRExAb/juXVQz828cRZkMQjy7DJbM0z9vPKzq1wUcCmo
I4NtE3uDQz1VqhHCFuZ7zvasVI65JlkMxH/CzslGcF1N2w7WjTt4+izXqWd7tAGV
GfZHHPE9eS7PXj+6TcFXuZF74wib1EEkbH+X2mEmklUAXPPTroiVrksQZyZGOQcv
qBVcusmbTIxfqjQ7RKecz+JHy0qt8E8jzIn7NIPLBdJQKgtMqHAOCVzU7cbWc29V
FG553NJQ+F+lmTIPtFVsKOXAG5BSq9pZdj0TF3E+YdZHNEbdOiz86QTjewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsSLcktEPlTaIJmrZQ1Fq1UHOiRMB8GA1UdIwQY
MBaAFLS93nhBW2nDEnfAqsf8pmB9Y12IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEwzZWVFRmJhY01TZDhDcXhfeW1ZSDFqWFlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zNGQ0NzAtNDlmNy00YWUwLWI2MWEt
MDk0NGJlZDBlZDI2LzEvdEwzZWVFRmJhY01TZDhDcXhfeW1ZSDFqWFlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zNGQ0NzAtNDlmNy00YWUwLWI2MWEtMDk0NGJlZDBlZDI2
LzEvdEwzZWVFRmJhY01TZDhDcXhfeW1ZSDFqWFlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTJyTaxc
PxwaJMxnNEoV/It0DPkB7Xg57VJWU3rKo3KCjSMEkQA6FQTZzu+f8tLRDq3nRZQj
PMdZ3Qo7qe3uVD5ohepoo5S/8K5uHpnGv2qepUbvctgTTshhBXWcoqtSVtmyueqv
DmYMldE2ZNNCa+GzEffB5jn1SFkkeGO4RI/TJFVCPClKETAyhbnFindKRvYAZgWL
OPDvXg5Mc9z/mYLE/NjGvzPBIH3f7V5PKf6aVVWDssD/AqAu3qhGt5FfZGfnFYIt
xSq4VIQTSdkxwZzwTMISpvZ6qGKdCHvml4YNphNTRynHsh5h8CyMPkdljYVEP3Dn
u1M3Z/1KSc+jLw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:12:43 2025 by rpki-client