Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
File: p1f4f4bpOyXvTAQzZku-ctqY-_4.mft (raw, json)
Hash identifier: 7dfLPZTPgylSeqXuf/RSvGdY3V/hUMaG2X2qM7/1Fkg=
Subject key identifier: 10:F3:39:AC:9D:F2:2A:27:4F:62:C1:59:D4:8D:94:FB:90:AA:67:A6
Authority key identifier: A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE
Certificate issuer: /CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
Certificate serial: 019A50E3883738B336173EB813A650D50F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
Manifest number: 0525
Signing time: Tue 04 Nov 2025 22:01:19 +0000
Manifest this update: Tue 04 Nov 2025 22:01:19 +0000
Manifest next update: Wed 05 Nov 2025 22:01:19 +0000
Files and hashes: 1: IZ6vDZjMHwfmvRBOdfcy5i9E3QM.roa (hash: uS025afpY/Jz9tEZKMABnGMw3AujzF5/XTw1sc/dgNo=)
2: p1f4f4bpOyXvTAQzZku-ctqY-_4.crl (hash: SKdA8aTG1vatzcs3WPINjxItbyGfBxmVf5lZwHr+tuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:88:37:38:b3:36:17:3e:b8:13:a6:50:d5:0f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
Validity
Not Before: Nov 4 22:01:19 2025 GMT
Not After : Nov 5 22:01:19 2025 GMT
Subject: CN=10f339ac9df22a274f62c159d48d94fb90aa67a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fd:1a:81:2a:13:44:23:81:e7:67:3d:4b:40:
14:f1:a5:ef:df:cd:9a:7e:c6:a9:d7:2f:9b:7f:f5:
d1:b8:38:2f:7a:e7:25:fb:8c:6a:14:09:65:a4:1c:
a5:0e:91:1a:98:0d:37:cc:87:6a:0a:54:bc:47:88:
80:1b:23:25:63:13:28:79:6d:1c:97:79:01:6c:e5:
ca:db:82:86:28:7d:27:bf:d3:c4:9c:9b:f5:79:93:
a9:fe:f6:67:15:80:f9:ff:27:8d:e5:7e:1f:0d:6a:
fb:f4:79:b5:55:af:49:00:da:0d:57:a9:2f:2f:9f:
82:e8:b5:5d:77:63:50:1d:0a:90:60:e2:16:8d:dd:
0e:b9:7d:44:56:a6:93:81:c6:6c:1c:c8:1c:d1:c2:
b7:51:a6:ac:d8:c9:76:f4:95:9e:41:1a:0a:37:92:
d5:9e:f6:9f:82:55:3e:5d:86:8d:60:2c:6d:eb:ce:
0a:e7:13:1e:6f:aa:d9:c6:88:42:1a:d4:47:fb:e8:
8b:f2:64:12:31:a2:15:f0:34:c8:d7:4d:f3:ef:51:
66:db:58:3d:79:67:d7:73:72:69:b9:e2:f8:7a:97:
74:85:f8:e6:80:e9:e0:33:25:fa:b5:c1:24:4e:32:
5a:1b:b9:97:89:cc:c4:b1:f0:33:49:08:1d:f1:1c:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F3:39:AC:9D:F2:2A:27:4F:62:C1:59:D4:8D:94:FB:90:AA:67:A6
X509v3 Authority Key Identifier:
keyid:A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3f:05:2a:b5:1d:cc:0a:8d:be:f3:2b:36:96:e2:9a:51:97:
f8:e6:3f:78:ae:e0:dd:c3:54:74:4d:ec:3e:2a:f0:5f:a9:42:
95:cf:2b:f8:f0:75:62:15:03:96:5e:50:d7:77:b2:78:50:41:
c7:b3:57:4e:65:39:2e:06:d8:ef:82:8f:b0:ee:2c:f0:95:61:
b1:2b:fa:b1:65:00:22:86:1e:33:d6:ee:1d:fa:69:fc:63:cd:
f6:8b:e7:7c:fa:fe:6c:5d:b5:24:40:00:bf:10:d8:54:6e:ce:
db:5a:af:35:e4:d5:f9:b2:27:1e:da:49:38:ca:e5:a5:1b:28:
e0:df:6a:3a:6d:e4:8f:31:d8:e9:e1:b5:86:07:9e:2a:89:99:
75:1b:89:7f:a1:63:a8:fe:a4:13:02:7f:9c:51:ac:7e:85:35:
07:cb:b5:e8:b7:f9:a7:f8:09:03:76:98:89:04:25:e1:dc:1f:
2c:16:99:97:25:1a:38:7a:a4:61:cb:42:c6:fe:69:59:98:19:
bd:83:44:8d:1a:0b:90:59:b0:d0:4c:21:43:55:fe:1d:d4:ba:
eb:ef:c8:b0:30:3f:58:06:fd:7b:fb:37:a7:1b:91:d3:63:e3:
de:3f:cb:97:86:56:99:ee:4c:aa:d7:7f:14:34:cd:82:51:94:
3b:48:da:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ44g3OLM2Fz64E6ZQ1Q9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NTdmODdmODZlOTNiMjVlZjRjMDQzMzY2NGJiZTcyZGE5
OGZiZmUwHhcNMjUxMTA0MjIwMTE5WhcNMjUxMTA1MjIwMTE5WjAzMTEwLwYDVQQD
EygxMGYzMzlhYzlkZjIyYTI3NGY2MmMxNTlkNDhkOTRmYjkwYWE2N2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/0agSoTRCOB52c9S0AU8aXv382a
fsap1y+bf/XRuDgveucl+4xqFAllpBylDpEamA03zIdqClS8R4iAGyMlYxMoeW0c
l3kBbOXK24KGKH0nv9PEnJv1eZOp/vZnFYD5/yeN5X4fDWr79Hm1Va9JANoNV6kv
L5+C6LVdd2NQHQqQYOIWjd0OuX1EVqaTgcZsHMgc0cK3Uaas2Ml29JWeQRoKN5LV
nvafglU+XYaNYCxt684K5xMeb6rZxohCGtRH++iL8mQSMaIV8DTI103z71Fm21g9
eWfXc3JpueL4epd0hfjmgOngMyX6tcEkTjJaG7mXiczEsfAzSQgd8Rz6gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDzOayd8ionT2LBWdSNlPuQqmemMB8GA1UdIwQY
MBaAFKdX+H+G6Tsl70wEM2ZLvnLamPv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84NmU0MGMtMTU2My00MGVhLThmNGUt
YTE3ODMzMjUzM2UwLzEvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy84NmU0MGMtMTU2My00MGVhLThmNGUtYTE3ODMzMjUzM2Uw
LzEvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYT8FKrUd
zAqNvvMrNpbimlGX+OY/eK7g3cNUdE3sPirwX6lClc8r+PB1YhUDll5Q13eyeFBB
x7NXTmU5LgbY74KPsO4s8JVhsSv6sWUAIoYeM9buHfpp/GPN9ovnfPr+bF21JEAA
vxDYVG7O21qvNeTV+bInHtpJOMrlpRso4N9qOm3kjzHY6eG1hgeeKomZdRuJf6Fj
qP6kEwJ/nFGsfoU1B8u16Lf5p/gJA3aYiQQl4dwfLBaZlyUaOHqkYctCxv5pWZgZ
vYNEjRoLkFmw0EwhQ1X+HdS66+/IsDA/WAb9e/s3pxuR02Pj3j/Ll4ZWme5Mqtd/
FDTNglGUO0jaaw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:15:09 2025 by rpki-client