Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
File: RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft (raw, json)
Hash identifier: od589VCG2Czg8kAwOpFdwRRxDetsvUm+yuIly4Opq/0=
Subject key identifier: 2A:18:DB:70:BF:B6:CE:B3:02:7B:32:66:1A:32:52:C8:2C:59:CC:C6
Authority key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
Certificate issuer: /CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Certificate serial: 019A4C98783F0FC0E253ABC3E4A1DD302F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
Manifest number: 141B
Signing time: Tue 04 Nov 2025 02:00:51 +0000
Manifest this update: Tue 04 Nov 2025 02:00:51 +0000
Manifest next update: Wed 05 Nov 2025 02:00:51 +0000
Files and hashes: 1: 7IOpXXsSdgZOXKMUMqGRoYqSO7Y.roa (hash: eWhYbG4w7zhq0NpzbdSAGZQzXbPmck0Kggk9IJsP8fM=)
2: 8McigDSjzbaDusYUdfACWlAEraE.roa (hash: 8SiJAwZ4dMuVXUj8DbNfpd2t9t4+7zlehuNbJBAbbw4=)
3: RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl (hash: wEVxqru+6N6vm/O7SqPRmM/yN7z182vwEGL+PHC9/ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:78:3f:0f:c0:e2:53:ab:c3:e4:a1:dd:30:2f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Validity
Not Before: Nov 4 02:00:51 2025 GMT
Not After : Nov 5 02:00:51 2025 GMT
Subject: CN=2a18db70bfb6ceb3027b32661a3252c82c59ccc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:2b:cb:fa:c1:4e:74:19:2f:7d:86:df:03:
52:80:c4:e9:d1:0a:1c:30:c2:6a:eb:99:63:12:6c:
11:ac:91:59:b4:11:9b:71:3a:3a:ba:b6:9e:1c:b8:
9b:1c:0f:b3:e8:e3:c6:5c:13:34:5a:2c:d2:06:20:
91:41:c2:36:0b:93:24:b5:d9:8a:38:c7:b0:15:c8:
f1:8e:fa:5f:49:df:ff:1a:7a:8a:1e:26:33:3f:72:
b8:2e:a3:15:0a:17:da:dd:ea:43:83:ea:e6:94:f6:
58:06:89:15:28:d5:21:73:58:7c:10:ac:39:45:5e:
7f:90:b9:2d:27:80:54:12:09:b6:92:5a:8f:17:54:
f8:24:52:26:8f:8a:39:6e:20:f9:68:c8:41:98:56:
17:ba:e9:a7:31:8b:81:d2:03:96:1d:2f:e7:88:b4:
e8:50:28:76:e4:5d:74:a5:f7:9d:d9:de:e2:11:e8:
06:b3:6e:23:1e:4e:ad:3f:9b:00:d9:d9:00:b6:ee:
55:d7:7e:6e:cd:7e:2e:fe:7a:13:98:c5:bc:3e:74:
db:6b:ae:03:3d:82:a2:61:e3:67:aa:13:ba:2d:a6:
40:4b:d8:11:ec:b2:4e:7d:19:79:02:f2:ae:61:7e:
12:f5:38:f8:a6:00:73:fd:32:09:e2:33:54:0e:f5:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:18:DB:70:BF:B6:CE:B3:02:7B:32:66:1A:32:52:C8:2C:59:CC:C6
X509v3 Authority Key Identifier:
keyid:44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:89:9c:0e:64:b5:7b:44:3a:ad:ed:58:82:7b:2e:f0:34:93:
8d:e9:d0:87:dd:21:c6:33:19:81:07:3e:59:33:67:c2:10:eb:
17:58:9f:93:bd:fd:b8:54:5a:66:62:f5:c0:13:36:b9:24:b4:
33:e8:09:fd:46:8a:63:2f:2d:6a:09:d4:5c:05:07:0d:3e:ae:
f0:5c:93:17:a1:8a:cf:e9:0e:40:b0:2e:b1:bb:b0:c3:0c:57:
8e:5f:11:70:66:d8:f4:99:fc:69:a2:36:b6:42:fb:08:61:8b:
4e:89:bc:78:5d:55:21:a8:b1:00:30:cc:b0:6f:70:1a:e0:f1:
9c:68:11:41:e5:ce:aa:93:81:8e:49:22:49:5e:e4:85:41:7a:
58:5d:0b:59:2e:7b:0d:6a:f1:e6:dd:6b:32:f5:2e:5b:15:d2:
84:9e:da:93:64:ea:f2:b8:4d:74:3a:8d:ef:34:54:e3:51:bd:
89:ea:0c:30:b6:4f:d8:06:97:da:e2:db:69:f9:a5:95:f0:df:
b2:e1:53:5e:0d:13:9f:75:b1:6c:1d:4a:b2:43:64:61:3c:74:
74:5e:fa:26:8f:9e:04:c0:0e:3b:94:67:21:12:7c:80:08:7d:
04:3f:7c:e5:a8:b6:58:7a:8f:65:f9:fc:bf:8f:e3:63:f1:7f:
ee:6c:2e:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMmHg/D8DiU6vD5KHdMC80MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0Zjg4NTIyMGYxNzE5ZjU4MzdjYjVhMzZmYTYyZjNmNTM3
ZThlM2YwHhcNMjUxMTA0MDIwMDUxWhcNMjUxMTA1MDIwMDUxWjAzMTEwLwYDVQQD
EygyYTE4ZGI3MGJmYjZjZWIzMDI3YjMyNjYxYTMyNTJjODJjNTljY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqsry/rBTnQZL32G3wNSgMTp0Qoc
MMJq65ljEmwRrJFZtBGbcTo6uraeHLibHA+z6OPGXBM0WizSBiCRQcI2C5MktdmK
OMewFcjxjvpfSd//GnqKHiYzP3K4LqMVChfa3epDg+rmlPZYBokVKNUhc1h8EKw5
RV5/kLktJ4BUEgm2klqPF1T4JFImj4o5biD5aMhBmFYXuumnMYuB0gOWHS/niLTo
UCh25F10pfed2d7iEegGs24jHk6tP5sA2dkAtu5V135uzX4u/noTmMW8PnTba64D
PYKiYeNnqhO6LaZAS9gR7LJOfRl5AvKuYX4S9Tj4pgBz/TIJ4jNUDvV+wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoY23C/ts6zAnsyZhoyUsgsWczGMB8GA1UdIwQY
MBaAFET4hSIPFxn1g3y1o2+mLz9Tfo4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iYWIxOTQtNWUyNC00ZWFkLThmNDkt
MzdlZDk5MTQzYWFlLzEvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iYWIxOTQtNWUyNC00ZWFkLThmNDktMzdlZDk5MTQzYWFl
LzEvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcomcDmS1
e0Q6re1Ygnsu8DSTjenQh90hxjMZgQc+WTNnwhDrF1ifk739uFRaZmL1wBM2uSS0
M+gJ/UaKYy8tagnUXAUHDT6u8FyTF6GKz+kOQLAusbuwwwxXjl8RcGbY9Jn8aaI2
tkL7CGGLTom8eF1VIaixADDMsG9wGuDxnGgRQeXOqpOBjkkiSV7khUF6WF0LWS57
DWrx5t1rMvUuWxXShJ7ak2Tq8rhNdDqN7zRU41G9ieoMMLZP2AaX2uLbafmllfDf
suFTXg0Tn3WxbB1KskNkYTx0dF76Jo+eBMAOO5RnIRJ8gAh9BD985ai2WHqPZfn8
v4/jY/F/7mwugQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:50 2025 by rpki-client