Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
File: 10zp2eGKKooGy02bCLWc12siEYQ.mft (raw, json)
Hash identifier: Mmsk5mqtv3/lXLEgnsjzx2FDVFR9BBcOrpx/RMhWk2w=
Subject key identifier: 53:02:96:C1:20:DB:96:11:E2:62:57:F2:00:09:0F:4C:48:76:FC:A0
Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
Certificate issuer: /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Certificate serial: 019A4D3D03A8AD52206527285612A4399B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 05:00:35 +0000
Manifest this update: Tue 04 Nov 2025 05:00:35 +0000
Manifest next update: Wed 05 Nov 2025 05:00:35 +0000
Files and hashes: 1: 10zp2eGKKooGy02bCLWc12siEYQ.crl (hash: GFZ1X5prhTFB3rrBYowZVhAuE2ABxelg7x5EpIejf7M=)
2: ukTm-wxzEJj-s_OEsyy8V9c_Wr4.roa (hash: fj9aOH6SJjD+OTCiFFLafnYvA1jJNlZv9daAJcHZMJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:03:a8:ad:52:20:65:27:28:56:12:a4:39:9b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Validity
Not Before: Nov 4 05:00:35 2025 GMT
Not After : Nov 5 05:00:35 2025 GMT
Subject: CN=530296c120db9611e26257f200090f4c4876fca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:5c:4b:fe:c9:d1:05:24:fa:e2:d1:96:b9:
78:1a:c3:2c:b7:30:fa:be:7a:b5:7b:dd:8d:83:64:
8c:50:e3:c6:e3:d5:99:24:f6:00:e6:88:a4:cf:21:
0d:de:4f:93:38:90:1f:29:b5:ff:ae:6e:89:a5:be:
21:3a:b8:5f:ae:c3:c6:5a:fb:51:8d:64:a8:e9:0f:
d7:fb:07:1a:75:e4:04:a8:ae:86:be:7f:b3:f4:c3:
a2:f0:c4:53:3e:f2:ba:2a:04:72:27:78:48:68:03:
45:5c:fb:be:79:25:02:c2:6f:80:40:03:f5:b5:65:
c7:b9:b0:20:f3:7e:e3:c9:6e:c2:0d:16:8f:04:3b:
c2:55:31:cd:01:af:20:ad:42:c6:cd:69:88:ac:6a:
a8:cf:3c:dd:d0:7d:9a:9b:d5:07:fb:43:b3:14:e5:
65:cc:09:30:ea:5c:19:61:93:28:2a:b0:f5:54:67:
0c:02:07:5d:59:7f:24:6e:0e:c5:41:0b:04:67:94:
ae:94:d0:d1:4a:8b:4c:f1:13:4f:5a:3f:27:ea:93:
d1:1c:bd:42:27:62:a7:08:b7:7c:55:71:a9:3d:0a:
6f:71:22:5c:fc:ba:e7:e7:b0:cd:fe:50:81:d3:86:
7a:f9:4f:96:03:68:7b:36:54:d7:0d:69:c9:51:58:
ed:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:02:96:C1:20:DB:96:11:E2:62:57:F2:00:09:0F:4C:48:76:FC:A0
X509v3 Authority Key Identifier:
keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ff:ee:5a:6e:43:be:2f:ce:86:db:92:35:33:0d:9b:0e:0b:
8b:df:d7:24:86:fa:ed:d1:c6:78:88:70:ce:58:90:af:2f:ef:
5a:51:a1:e8:75:0a:e0:f0:84:47:21:9b:79:03:02:b7:60:e3:
f3:e1:1b:62:a1:56:65:4e:ca:0e:9b:a9:33:09:5c:a1:c6:94:
02:c1:22:78:c0:01:29:b5:33:d4:23:1a:84:9d:42:a2:d1:83:
69:19:0a:f8:7f:d7:61:6a:90:41:58:5e:92:64:96:76:be:33:
9e:6d:14:cd:22:29:b9:b5:8e:80:a4:35:ec:0a:02:b7:46:97:
78:86:46:d1:9c:fa:df:32:b8:61:80:e8:12:75:a5:12:2d:73:
6d:14:20:f6:1e:01:a0:85:cc:17:91:35:38:00:85:1e:77:64:
7f:52:e6:8d:e6:b6:3d:58:1b:36:97:89:41:dc:7e:26:22:a7:
18:0f:3c:b4:4b:23:15:4e:7d:7d:9a:27:db:6e:2a:e4:f4:9d:
6a:4c:4b:bb:d8:9a:bd:3f:6c:dd:d7:b7:2a:d1:b9:82:42:62:
f8:0e:33:7b:fa:ee:a0:b1:8c:85:b3:92:a6:4e:6d:91:9a:64:
5d:4b:52:e6:24:cc:b7:4a:dd:9f:3b:34:0d:73:2a:9a:65:1d:
25:bb:a1:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPQOorVIgZScoVhKkOZsrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NGNlOWQ5ZTE4YTJhOGEwNmNiNGQ5YjA4YjU5Y2Q3NmIy
MjExODQwHhcNMjUxMTA0MDUwMDM1WhcNMjUxMTA1MDUwMDM1WjAzMTEwLwYDVQQD
Eyg1MzAyOTZjMTIwZGI5NjExZTI2MjU3ZjIwMDA5MGY0YzQ4NzZmY2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWlcS/7J0QUk+uLRlrl4GsMstzD6
vnq1e92Ng2SMUOPG49WZJPYA5oikzyEN3k+TOJAfKbX/rm6Jpb4hOrhfrsPGWvtR
jWSo6Q/X+wcadeQEqK6Gvn+z9MOi8MRTPvK6KgRyJ3hIaANFXPu+eSUCwm+AQAP1
tWXHubAg837jyW7CDRaPBDvCVTHNAa8grULGzWmIrGqozzzd0H2am9UH+0OzFOVl
zAkw6lwZYZMoKrD1VGcMAgddWX8kbg7FQQsEZ5SulNDRSotM8RNPWj8n6pPRHL1C
J2KnCLd8VXGpPQpvcSJc/Lrn57DN/lCB04Z6+U+WA2h7NlTXDWnJUVjtqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMClsEg25YR4mJX8gAJD0xIdvygMB8GA1UdIwQY
MBaAFNdM6dnhiiqKBstNmwi1nNdrIhGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lZDVjMWUtMmQ1Zi00MjIyLWJkYzct
NjNiOTUyNDBkNzQ1LzEvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lZDVjMWUtMmQ1Zi00MjIyLWJkYzctNjNiOTUyNDBkNzQ1
LzEvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg//uWm5D
vi/OhtuSNTMNmw4Li9/XJIb67dHGeIhwzliQry/vWlGh6HUK4PCERyGbeQMCt2Dj
8+EbYqFWZU7KDpupMwlcocaUAsEieMABKbUz1CMahJ1CotGDaRkK+H/XYWqQQVhe
kmSWdr4znm0UzSIpubWOgKQ17AoCt0aXeIZG0Zz63zK4YYDoEnWlEi1zbRQg9h4B
oIXMF5E1OACFHndkf1Lmjea2PVgbNpeJQdx+JiKnGA88tEsjFU59fZon224q5PSd
akxLu9iavT9s3de3KtG5gkJi+A4ze/ruoLGMhbOSpk5tkZpkXUtS5iTMt0rdnzs0
DXMqmmUdJbuhJg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:05 2025 by rpki-client