Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
File: CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json)
Hash identifier: Q4+HQ7KIqBhRhAjDfFCchM0/GEMYbuusCy7XYsdaQNc=
Subject key identifier: 39:3F:82:26:64:12:A0:3A:37:AB:84:82:55:2F:20:5E:A6:92:63:02
Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
Certificate issuer: /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Certificate serial: 019A4D7451E5328BB1EE838C17E11ECE84F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:59 +0000
Manifest this update: Tue 04 Nov 2025 06:00:59 +0000
Manifest next update: Wed 05 Nov 2025 06:00:59 +0000
Files and hashes: 1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: AhbKSjFJC0Fux5HZS0h41JdlgUVIHrr8J2YzemSimgI=)
2: ZnV_8X8pYoAVKjZWPYlTDet39Po.roa (hash: AQ2CtHZNHtcjULxTw0rAIotVl7Ai3G/vKLwZOUyWiLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:51:e5:32:8b:b1:ee:83:8c:17:e1:1e:ce:84:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Validity
Not Before: Nov 4 06:00:59 2025 GMT
Not After : Nov 5 06:00:59 2025 GMT
Subject: CN=393f82266412a03a37ab8482552f205ea6926302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:99:68:be:ea:57:3c:69:6f:b0:41:cc:7d:a2:
43:03:e7:02:2f:d0:0c:10:68:62:07:11:65:e1:47:
42:d6:2a:59:79:25:6a:f2:29:1c:e3:eb:83:ec:69:
23:55:20:54:f6:24:22:1c:87:5c:cc:64:28:0a:c0:
4d:66:aa:26:50:b8:9f:32:0d:a9:b6:eb:5e:38:30:
e6:83:53:cf:09:b0:40:ae:a6:29:ec:93:4c:07:96:
f7:4f:2d:dd:64:91:9b:b8:26:2d:b4:7d:5c:3f:4e:
4b:ca:fc:d1:3d:6a:27:42:b9:15:a0:3d:a6:9e:03:
2a:9b:d0:ac:dc:ed:63:c7:96:b2:b0:4d:aa:d2:9e:
e4:e6:8f:f8:7d:7b:a5:2f:7a:59:bf:13:c3:9b:2d:
52:ac:b8:c7:61:cd:ff:57:d8:c3:9a:2d:03:f5:bc:
43:c0:61:9c:d7:ba:45:23:5b:ff:6b:c3:78:9e:06:
25:f4:f6:17:63:e0:0f:2a:3a:c1:30:25:3d:14:b9:
f5:34:51:ed:6c:68:48:e8:86:e5:d1:43:8e:3b:ea:
fa:91:09:ae:d8:0d:7d:df:be:11:5b:d5:9a:9a:c3:
14:64:58:6d:f4:b5:49:1f:b6:17:9c:99:5b:c2:f0:
87:58:8d:14:e6:32:3a:b4:c8:8a:1d:b5:bf:8c:ed:
ac:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3F:82:26:64:12:A0:3A:37:AB:84:82:55:2F:20:5E:A6:92:63:02
X509v3 Authority Key Identifier:
keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0e:59:97:7c:6d:59:a5:c2:3d:b9:b4:af:9e:22:d8:06:59:
c0:c1:49:e0:8e:9b:33:c0:8f:20:2b:89:1b:a7:cb:a3:23:71:
9b:33:17:1d:b7:be:3e:25:d9:d1:f0:c8:d9:e7:fc:2f:e7:9b:
d5:fc:a9:f2:76:18:0d:f5:62:9e:7b:66:45:d1:87:ec:ff:20:
8e:6e:f5:f9:27:21:cb:60:7b:0d:e9:9c:2d:c3:3c:12:45:7c:
6d:82:18:0a:aa:00:02:ce:64:76:7d:2e:d0:d8:3f:19:92:b2:
da:57:4f:0e:45:09:36:60:02:0b:b5:2e:e5:df:8b:6a:f1:82:
d1:73:a8:9d:1c:5a:d8:c7:4f:c5:0f:3f:37:99:72:91:e6:48:
b5:56:1d:5f:62:fd:a2:90:0c:ba:f4:07:ab:3d:f5:69:38:ac:
cc:c0:e3:2c:da:e3:ca:52:f5:36:fc:16:45:eb:bd:4d:e7:78:
d0:6f:1b:28:f0:4c:62:22:1c:95:1e:57:ac:f4:2f:14:79:5b:
64:90:5e:08:ee:33:5d:9e:6b:8e:ab:36:3c:8a:f5:ba:69:fa:
4d:2a:0a:2b:ab:69:cb:5c:fb:6f:60:f9:c2:87:58:ea:c2:07:
5a:89:94:46:7c:47:47:03:cc:90:3e:a5:e8:1c:b9:cc:41:42:
1e:7e:fa:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdFHlMoux7oOMF+EezoT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWNhNjBlMDQ4NDdiZDJmN2M0NWM4Njg3ZTVmNWFhZDFm
ZWU4ZmIwHhcNMjUxMTA0MDYwMDU5WhcNMjUxMTA1MDYwMDU5WjAzMTEwLwYDVQQD
EygzOTNmODIyNjY0MTJhMDNhMzdhYjg0ODI1NTJmMjA1ZWE2OTI2MzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZlovupXPGlvsEHMfaJDA+cCL9AM
EGhiBxFl4UdC1ipZeSVq8ikc4+uD7GkjVSBU9iQiHIdczGQoCsBNZqomULifMg2p
tuteODDmg1PPCbBArqYp7JNMB5b3Ty3dZJGbuCYttH1cP05LyvzRPWonQrkVoD2m
ngMqm9Cs3O1jx5aysE2q0p7k5o/4fXulL3pZvxPDmy1SrLjHYc3/V9jDmi0D9bxD
wGGc17pFI1v/a8N4ngYl9PYXY+APKjrBMCU9FLn1NFHtbGhI6Ibl0UOOO+r6kQmu
2A19374RW9WamsMUZFht9LVJH7YXnJlbwvCHWI0U5jI6tMiKHbW/jO2sEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDk/giZkEqA6N6uEglUvIF6mkmMCMB8GA1UdIwQY
MBaAFAgcpg4EhHvS98Rchofl9arR/uj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kOTRmY2UtNTQ3ZS00MjQyLWI3MmMt
YjdhYjY4NmMwNzZlLzEvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kOTRmY2UtNTQ3ZS00MjQyLWI3MmMtYjdhYjY4NmMwNzZl
LzEvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQ5Zl3xt
WaXCPbm0r54i2AZZwMFJ4I6bM8CPICuJG6fLoyNxmzMXHbe+PiXZ0fDI2ef8L+eb
1fyp8nYYDfVinntmRdGH7P8gjm71+Schy2B7DemcLcM8EkV8bYIYCqoAAs5kdn0u
0Ng/GZKy2ldPDkUJNmACC7Uu5d+LavGC0XOonRxa2MdPxQ8/N5lykeZItVYdX2L9
opAMuvQHqz31aTiszMDjLNrjylL1NvwWReu9Ted40G8bKPBMYiIclR5XrPQvFHlb
ZJBeCO4zXZ5rjqs2PIr1umn6TSoKK6tpy1z7b2D5wodY6sIHWomURnxHRwPMkD6l
6By5zEFCHn76QQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:02 2025 by rpki-client