Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier: oDiighlzUoFa1yPPE6nqn7b4rcSrQVR2scOcEZTIu98=
Subject key identifier: 11:10:95:2A:31:F1:DB:02:7B:32:62:FD:6C:55:58:66:C7:F0:48:77
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 019A4F2B306B3F1BE1282F1A1AF8AE337294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number: 1459
Signing time: Tue 04 Nov 2025 14:00:21 +0000
Manifest this update: Tue 04 Nov 2025 14:00:21 +0000
Manifest next update: Wed 05 Nov 2025 14:00:21 +0000
Files and hashes: 1: 4xZ5ORo-JniyG_UP3X4ZjI8vP5g.roa (hash: aS+lefUlxdDyZxk7hvBM2gPb0KZ4ihSIRGGBXAMkKqI=)
2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: qM8axD3I9VnOX3OqNtUwb1zYlc/1+AANCBXX8n/1awU=)
3: P5dWxSLpxtp-49eZGd_31_JRHHo.roa (hash: NT3aNwht6fMF/zfz0JOvuz5n/skNMJxnJBDVpcrq8Dc=)
4: c7fpJhGeGEDD59_FpWUO82fzF7I.roa (hash: P2sJUsVRcw69DdEldFG6V18oZpVmrOXfMzx820qI+8E=)
5: oT4_ERJ1NK-RUR-knGGnWo2w3XU.roa (hash: gXeEbcCW9pl3CKjG36RJur3xaPc6GaReOGS3i/R+/dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:30:6b:3f:1b:e1:28:2f:1a:1a:f8:ae:33:72:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Nov 4 14:00:21 2025 GMT
Not After : Nov 5 14:00:21 2025 GMT
Subject: CN=1110952a31f1db027b3262fd6c555866c7f04877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ac:f5:46:f4:23:cc:5a:13:06:18:c5:b3:92:
74:70:96:a8:c1:f7:c1:c2:25:99:97:36:d4:2b:97:
11:93:ad:06:a3:28:93:16:73:6e:ed:f7:dc:10:9b:
12:c5:a3:bd:08:44:92:e6:db:25:bf:e6:fb:49:0f:
e4:35:95:9c:6f:f0:db:79:f9:2c:75:f3:bd:bc:a1:
f4:e4:4b:48:18:4a:52:ff:15:a3:be:e5:1b:f1:4c:
1a:a2:a0:42:c6:ab:52:53:86:0b:e0:12:79:8d:54:
3f:5e:91:4f:31:bc:d6:9b:42:64:b0:85:71:94:54:
73:df:e2:83:94:3f:94:e9:a1:60:84:13:f0:22:d3:
53:0b:c6:ab:54:f7:0a:23:93:5c:a5:73:6c:a0:b0:
85:80:df:c8:41:d7:ef:a5:c5:46:f5:5e:24:14:c1:
84:cb:bd:0d:f5:05:9b:04:9e:96:7c:d9:6b:1c:d3:
c7:ac:cc:0c:df:06:b9:9f:f5:3a:17:71:bd:4a:6e:
10:42:a7:61:fe:e2:0f:fc:1e:21:34:54:d1:dd:1d:
7e:99:55:fd:7d:90:ef:70:6b:58:a0:66:39:b9:6e:
23:2a:ef:df:19:c9:23:70:31:7e:f2:02:10:25:2a:
88:93:e6:c4:4a:d0:d9:d5:a8:a9:5f:8a:e1:d3:14:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:10:95:2A:31:F1:DB:02:7B:32:62:FD:6C:55:58:66:C7:F0:48:77
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:02:1d:dd:b4:77:f8:21:9b:e1:29:c4:b2:98:4e:d5:7c:99:
41:a1:ed:b0:a5:8c:66:e8:81:33:d7:c3:1c:1a:1e:4e:51:4d:
a7:37:3a:24:17:a9:e5:e0:18:aa:32:a8:bd:ff:77:87:89:e0:
ad:b8:1e:95:17:5a:00:8c:b4:79:01:2f:42:57:63:d9:80:e2:
40:49:78:e9:ac:eb:af:97:94:e1:5b:f0:04:8d:90:8e:41:c3:
5b:39:32:f0:2f:c3:9e:a3:6e:89:f0:bc:ce:21:82:d9:d6:e4:
29:98:ae:b5:e0:c9:55:f8:bb:b3:aa:55:8c:28:65:6a:ea:08:
51:68:e2:68:27:3f:52:c2:19:59:3e:63:06:8e:06:35:f9:fc:
63:2c:26:56:b4:de:ad:d4:db:3e:fb:d3:89:b9:9e:e0:e0:77:
0c:15:af:c9:e7:99:29:10:33:f0:1d:dd:9c:a4:81:3c:65:d6:
28:d8:47:e6:79:9d:6a:1c:cb:05:8a:75:68:fa:59:30:a5:e1:
96:25:6b:0b:0b:84:c9:75:6a:4b:5b:1e:e4:d9:2f:1c:a5:25:
41:ee:fd:33:43:c5:4c:0c:a3:a6:cb:52:bd:d7:d1:5c:87:44:
8f:df:0b:28:60:e4:cf:a1:f5:a4:db:a8:b2:21:e7:02:89:6a:
c6:d3:82:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKzBrPxvhKC8aGviuM3KUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNzcxOTYzNDBkMjE0NGI4Y2E3YjA3Nzg5ODRiYjA0YmMx
Y2IzNzgwHhcNMjUxMTA0MTQwMDIxWhcNMjUxMTA1MTQwMDIxWjAzMTEwLwYDVQQD
EygxMTEwOTUyYTMxZjFkYjAyN2IzMjYyZmQ2YzU1NTg2NmM3ZjA0ODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6z1RvQjzFoTBhjFs5J0cJaowffB
wiWZlzbUK5cRk60GoyiTFnNu7ffcEJsSxaO9CESS5tslv+b7SQ/kNZWcb/Dbefks
dfO9vKH05EtIGEpS/xWjvuUb8UwaoqBCxqtSU4YL4BJ5jVQ/XpFPMbzWm0JksIVx
lFRz3+KDlD+U6aFghBPwItNTC8arVPcKI5NcpXNsoLCFgN/IQdfvpcVG9V4kFMGE
y70N9QWbBJ6WfNlrHNPHrMwM3wa5n/U6F3G9Sm4QQqdh/uIP/B4hNFTR3R1+mVX9
fZDvcGtYoGY5uW4jKu/fGckjcDF+8gIQJSqIk+bEStDZ1aipX4rh0xRtowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEQlSox8dsCezJi/WxVWGbH8Eh3MB8GA1UdIwQY
MBaAFAp3GWNA0hRLjKewd4mEuwS8HLN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQt
ZWI5NzcxNjRhN2U0LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQtZWI5NzcxNjRhN2U0
LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyQId3bR3
+CGb4SnEsphO1XyZQaHtsKWMZuiBM9fDHBoeTlFNpzc6JBep5eAYqjKovf93h4ng
rbgelRdaAIy0eQEvQldj2YDiQEl46azrr5eU4VvwBI2QjkHDWzky8C/DnqNuifC8
ziGC2dbkKZiuteDJVfi7s6pVjChlauoIUWjiaCc/UsIZWT5jBo4GNfn8YywmVrTe
rdTbPvvTibme4OB3DBWvyeeZKRAz8B3dnKSBPGXWKNhH5nmdahzLBYp1aPpZMKXh
liVrCwuEyXVqS1se5NkvHKUlQe79M0PFTAyjpstSvdfRXIdEj98LKGDkz6H1pNuo
siHnAolqxtOC/A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:35 2025 by rpki-client