Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
File: 12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json)
Hash identifier: befKzqbY5NPQocVapwAQxjLV897wrVjs5GVcVdc7vfs=
Subject key identifier: 51:51:2A:F6:32:AA:84:6E:28:AB:3D:61:27:2E:D7:D2:05:87:83:03
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 019A51BE1A9C9A1934E34FC39130EE808430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
Manifest number: 171D
Signing time: Wed 05 Nov 2025 02:00:04 +0000
Manifest this update: Wed 05 Nov 2025 02:00:04 +0000
Manifest next update: Thu 06 Nov 2025 02:00:04 +0000
Files and hashes: 1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: n1w8wlgWPj/wnMz6fWmuhb3TmpS19TC4nncH7JdOdYU=)
2: qGuTXxX3KPPGE7gornZUmtCgXus.roa (hash: hoxbUVU+eahUxnAmZd8qLyauIUnjncf8aJqcwbWkeXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:1a:9c:9a:19:34:e3:4f:c3:91:30:ee:80:84:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Nov 5 02:00:04 2025 GMT
Not After : Nov 6 02:00:04 2025 GMT
Subject: CN=51512af632aa846e28ab3d61272ed7d205878303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:16:1b:8a:c0:03:12:50:a1:28:70:73:4b:ad:
c8:20:58:5f:98:4b:de:c6:53:ad:76:65:99:64:2a:
0a:5e:32:a9:84:43:f8:68:dc:90:1c:49:9a:64:4a:
f3:ea:2c:cd:bb:7a:19:28:40:12:39:83:16:a1:47:
f1:8d:21:86:b1:7f:61:d3:18:d1:c1:f2:e1:12:89:
88:46:49:67:3b:1a:42:9b:87:01:2a:70:16:18:86:
c1:79:c4:81:a5:21:c4:81:1e:67:f9:ea:2e:70:63:
43:f6:2b:04:33:68:23:3e:2e:0e:44:8c:e1:d1:21:
4d:27:ed:77:bc:e3:89:93:06:aa:20:3d:25:6a:41:
ce:1e:1d:e9:8a:16:af:91:25:bd:0f:0b:cf:36:76:
23:5e:0c:93:11:4d:2d:1c:8a:91:f4:de:05:16:85:
86:43:8c:7c:a3:eb:9f:61:e5:02:32:3f:ac:86:78:
31:58:6d:3d:8c:f6:41:23:c1:2b:73:92:27:84:0c:
59:1c:fb:8d:6c:2e:c6:c5:43:32:2c:b3:25:61:83:
46:66:20:d4:4d:1d:36:7c:7e:9b:f6:94:0f:1f:53:
b6:c6:e5:89:80:68:f8:f3:a4:59:97:b3:60:42:99:
76:a7:8f:9b:3e:43:e2:5d:bc:7a:e3:58:b0:fb:7b:
8d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:51:2A:F6:32:AA:84:6E:28:AB:3D:61:27:2E:D7:D2:05:87:83:03
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:db:85:d0:c9:35:28:9c:68:97:20:8e:a0:9b:fb:d9:b8:2c:
81:60:c6:5e:26:6f:a9:e7:73:30:89:cc:ee:46:e0:9e:18:7c:
52:5d:fd:19:a2:64:f5:07:5a:54:38:0d:ac:c2:00:e1:5b:55:
8e:5b:f6:25:ef:98:7e:12:95:c7:f0:90:43:3a:88:e5:c4:50:
ac:cc:b4:7a:50:d6:be:d7:d0:67:9d:58:ff:ef:74:c5:63:54:
27:7f:e7:e5:7e:ae:16:d1:62:3a:96:71:81:c2:4b:52:72:57:
62:9c:d2:e4:77:66:06:e7:b7:01:0f:e1:61:22:ec:1f:6a:f7:
a2:83:e3:44:bb:1f:82:e6:d5:10:8c:23:7c:7e:ad:19:20:92:
0b:f6:16:fa:c4:77:67:bb:6c:31:4d:83:7f:3f:89:14:2e:64:
b2:12:fd:c9:30:93:a2:99:f8:64:ea:f7:31:66:3e:28:f8:6e:
3a:60:bb:03:d6:8e:19:9b:be:8d:8f:f4:51:59:72:19:72:86:
d0:aa:48:ac:ed:a1:c7:e6:c3:03:24:e0:36:f3:fc:71:e2:d8:
2a:96:12:34:29:05:88:06:00:b7:f9:19:bf:60:f8:54:75:28:
13:4a:be:19:83:d9:55:cd:c2:ac:9d:a3:77:4c:37:4a:46:91:
f4:0e:d3:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvhqcmhk040/DkTDugIQwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjZmYzZmMWI4ZTJiNjA0ZjdmYjczYzI5ZmQ1ZDY4OWEw
ZWE4MWQwHhcNMjUxMTA1MDIwMDA0WhcNMjUxMTA2MDIwMDA0WjAzMTEwLwYDVQQD
Eyg1MTUxMmFmNjMyYWE4NDZlMjhhYjNkNjEyNzJlZDdkMjA1ODc4MzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RYbisADElChKHBzS63IIFhfmEve
xlOtdmWZZCoKXjKphEP4aNyQHEmaZErz6izNu3oZKEASOYMWoUfxjSGGsX9h0xjR
wfLhEomIRklnOxpCm4cBKnAWGIbBecSBpSHEgR5n+eoucGND9isEM2gjPi4ORIzh
0SFNJ+13vOOJkwaqID0lakHOHh3pihavkSW9DwvPNnYjXgyTEU0tHIqR9N4FFoWG
Q4x8o+ufYeUCMj+shngxWG09jPZBI8Erc5InhAxZHPuNbC7GxUMyLLMlYYNGZiDU
TR02fH6b9pQPH1O2xuWJgGj486RZl7NgQpl2p4+bPkPiXbx641iw+3uNqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFRKvYyqoRuKKs9YScu19IFh4MDMB8GA1UdIwQY
MBaAFNdm/G8bjitgT3+3PCn9XWiaDqgdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzIt
M2VmM2ZkOTY5OTU3LzEvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzItM2VmM2ZkOTY5OTU3
LzEvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9uF0Mk1
KJxolyCOoJv72bgsgWDGXiZvqedzMInM7kbgnhh8Ul39GaJk9QdaVDgNrMIA4VtV
jlv2Je+YfhKVx/CQQzqI5cRQrMy0elDWvtfQZ51Y/+90xWNUJ3/n5X6uFtFiOpZx
gcJLUnJXYpzS5HdmBue3AQ/hYSLsH2r3ooPjRLsfgubVEIwjfH6tGSCSC/YW+sR3
Z7tsMU2Dfz+JFC5kshL9yTCTopn4ZOr3MWY+KPhuOmC7A9aOGZu+jY/0UVlyGXKG
0KpIrO2hx+bDAyTgNvP8ceLYKpYSNCkFiAYAt/kZv2D4VHUoE0q+GYPZVc3CrJ2j
d0w3SkaR9A7Twg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:30 2025 by rpki-client