Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
File: 18pTroRCI2dXp4Bm5OIXM_dYQHo.mft (raw, json)
Hash identifier: zlaDTUvRGrGIpsnZoHxTRJq9GB8eX69kaBWPrtuK3OY=
Subject key identifier: C5:F0:2F:43:8A:79:1D:CC:85:D7:E6:04:27:05:3E:8A:6B:91:E2:75
Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
Certificate issuer: /CN=d7ca53ae8442236757a78066e4e21733f758407a
Certificate serial: 019A4EF4AD3C6BBB03CA968C938474FA57EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
Manifest number: 1295
Signing time: Tue 04 Nov 2025 13:00:49 +0000
Manifest this update: Tue 04 Nov 2025 13:00:49 +0000
Manifest next update: Wed 05 Nov 2025 13:00:49 +0000
Files and hashes: 1: 18pTroRCI2dXp4Bm5OIXM_dYQHo.crl (hash: iBCV6naqA1O7UJK6HEtxen1M+R24vfaVIV2JcC1AuV8=)
2: 38s2EfLKTKzwDnKrug63iitVwN4.roa (hash: e5mS3BLPFSR7Y2uJcSkAUNlVQiD5b7eKpGpMN+urBn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ad:3c:6b:bb:03:ca:96:8c:93:84:74:fa:57:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a
Validity
Not Before: Nov 4 13:00:49 2025 GMT
Not After : Nov 5 13:00:49 2025 GMT
Subject: CN=c5f02f438a791dcc85d7e60427053e8a6b91e275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:33:c1:d3:12:93:8d:0d:5d:62:5d:fd:40:ec:
74:5b:3c:b4:31:c3:5c:f0:ff:16:9c:f0:c5:6f:20:
30:11:2a:30:d2:92:ea:cf:94:86:fc:83:eb:a6:f1:
b6:dc:2c:32:47:48:e3:df:31:27:a2:75:95:c0:b5:
ec:c5:7b:96:70:03:1f:06:02:50:e1:f3:51:24:42:
7a:ad:de:66:73:fb:ce:97:db:ac:89:49:49:d1:f8:
89:83:ff:ee:28:05:8b:b8:2b:1b:03:08:6a:88:97:
a4:ab:03:3c:7f:ee:30:f1:59:d5:e6:93:71:80:28:
75:9d:89:29:08:91:19:4a:1e:a1:27:da:b9:94:bb:
67:9c:e6:a7:43:ec:47:57:97:d1:d4:ca:e2:3b:0e:
27:8b:ea:f9:76:3e:36:8b:2a:e5:e0:1a:b4:f7:f2:
68:52:50:4c:b2:24:44:1a:18:bb:3b:7b:4a:9d:12:
ec:73:6f:34:b4:42:26:34:58:08:ac:68:0e:7f:99:
a8:de:2d:90:28:7d:aa:e7:90:af:cb:6d:d9:2c:14:
29:2c:2e:05:c1:45:ff:a3:c2:5d:16:dd:54:10:96:
91:4a:6c:38:56:c1:d7:40:a7:e6:ad:c6:25:91:a0:
42:3a:5d:ee:77:08:01:14:cf:83:4f:82:90:72:47:
87:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F0:2F:43:8A:79:1D:CC:85:D7:E6:04:27:05:3E:8A:6B:91:E2:75
X509v3 Authority Key Identifier:
keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2d:dd:34:b0:0e:87:19:a8:37:3e:dc:73:59:14:47:8d:a8:
56:c1:dd:44:85:70:fd:95:9d:a1:6c:29:4e:3b:e3:86:71:53:
f4:4d:3d:90:6c:a5:41:74:b3:01:b4:cc:6f:0e:7b:21:d5:4b:
79:40:7c:40:df:89:4b:2a:c1:99:2b:7d:02:5d:bf:c6:d3:0a:
0f:99:98:b1:0d:47:37:8c:8f:52:d0:c2:7b:2c:ef:a4:02:19:
c5:09:c8:83:12:61:b8:03:20:71:8b:12:bd:68:b2:29:63:e8:
42:1c:8c:1e:e9:2e:07:f1:9d:d8:f9:06:8d:64:cb:46:3a:08:
26:c3:a8:f9:d2:35:35:7b:c9:ad:73:5f:12:06:3e:b1:d6:49:
e6:04:98:1d:64:ae:ee:f6:3b:ab:17:32:9f:2f:9e:af:11:1e:
07:a3:25:96:ad:81:9a:33:b3:45:20:12:45:dd:9a:36:55:91:
cb:78:b9:a2:ec:00:d9:0b:d9:77:c2:72:17:80:ee:c2:90:55:
30:7b:3f:fe:bb:ee:05:e7:a1:df:29:58:36:24:6f:31:65:3f:
0e:63:4b:35:64:72:20:4d:49:95:16:49:a0:a1:03:94:dd:e3:
e9:94:ac:61:92:f2:96:b2:f1:24:b4:c1:cc:1a:41:f3:e8:d0:
26:c9:4e:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9K08a7sDypaMk4R0+lfqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Y2E1M2FlODQ0MjIzNjc1N2E3ODA2NmU0ZTIxNzMzZjc1
ODQwN2EwHhcNMjUxMTA0MTMwMDQ5WhcNMjUxMTA1MTMwMDQ5WjAzMTEwLwYDVQQD
EyhjNWYwMmY0MzhhNzkxZGNjODVkN2U2MDQyNzA1M2U4YTZiOTFlMjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DPB0xKTjQ1dYl39QOx0Wzy0McNc
8P8WnPDFbyAwESow0pLqz5SG/IPrpvG23CwyR0jj3zEnonWVwLXsxXuWcAMfBgJQ
4fNRJEJ6rd5mc/vOl9usiUlJ0fiJg//uKAWLuCsbAwhqiJekqwM8f+4w8VnV5pNx
gCh1nYkpCJEZSh6hJ9q5lLtnnOanQ+xHV5fR1MriOw4ni+r5dj42iyrl4Bq09/Jo
UlBMsiREGhi7O3tKnRLsc280tEImNFgIrGgOf5mo3i2QKH2q55Cvy23ZLBQpLC4F
wUX/o8JdFt1UEJaRSmw4VsHXQKfmrcYlkaBCOl3udwgBFM+DT4KQckeHtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXwL0OKeR3MhdfmBCcFPoprkeJ1MB8GA1UdIwQY
MBaAFNfKU66EQiNnV6eAZuTiFzP3WEB6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82YjE2OWQtN2YxZi00MjE0LWEyNWIt
OGM0OTgwNzc1NzhmLzEvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS82YjE2OWQtN2YxZi00MjE0LWEyNWItOGM0OTgwNzc1Nzhm
LzEvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbS3dNLAO
hxmoNz7cc1kUR42oVsHdRIVw/ZWdoWwpTjvjhnFT9E09kGylQXSzAbTMbw57IdVL
eUB8QN+JSyrBmSt9Al2/xtMKD5mYsQ1HN4yPUtDCeyzvpAIZxQnIgxJhuAMgcYsS
vWiyKWPoQhyMHukuB/Gd2PkGjWTLRjoIJsOo+dI1NXvJrXNfEgY+sdZJ5gSYHWSu
7vY7qxcyny+erxEeB6Mllq2BmjOzRSASRd2aNlWRy3i5ouwA2QvZd8JyF4DuwpBV
MHs//rvuBeeh3ylYNiRvMWU/DmNLNWRyIE1JlRZJoKEDlN3j6ZSsYZLylrLxJLTB
zBpB8+jQJslOlw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:13 2025 by rpki-client