Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
File: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft (raw, json)
Hash identifier: ff12UoIbwd4D+GnuhqwOYncv4CPsEQOvWccVIHrcVuY=
Subject key identifier: E5:29:06:F1:DD:9C:D6:1D:6B:C8:60:1B:D0:4B:02:2A:BC:57:52:46
Authority key identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
Certificate issuer: /CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Certificate serial: 019A4F62A1AE061CA20973A79E41881823D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 15:00:55 +0000
Manifest this update: Tue 04 Nov 2025 15:00:55 +0000
Manifest next update: Wed 05 Nov 2025 15:00:55 +0000
Files and hashes: 1: Ja_97273VAEHJD8U1oqoC_9aF9c.roa (hash: vJfC/52sLPqoQGFApNLbUAegOgUUxIE6GeG0+RQdWv8=)
2: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl (hash: m2F7VkrUm24sAy/43QaQpacXdh1oDUDsFZU4tQ2B7a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a1:ae:06:1c:a2:09:73:a7:9e:41:88:18:23:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Validity
Not Before: Nov 4 15:00:55 2025 GMT
Not After : Nov 5 15:00:55 2025 GMT
Subject: CN=e52906f1dd9cd61d6bc8601bd04b022abc575246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:c3:ae:db:6c:7b:a6:29:78:eb:2c:25:b3:
34:88:d3:cb:4f:0a:f0:b7:ff:d9:3c:04:44:04:0c:
23:71:26:69:6c:d1:45:23:f2:43:a3:fc:97:24:a9:
25:42:c5:cc:5d:1a:58:f3:5a:6f:f1:e7:db:47:80:
32:f7:86:65:11:84:fa:f9:fb:ba:e2:2e:02:40:8f:
2d:43:39:89:8c:4f:0c:1c:5f:60:77:c1:19:38:57:
a0:51:19:dc:53:e9:8a:f0:28:e7:71:e0:c7:17:cc:
a5:18:b9:d0:10:06:cb:1e:68:c9:25:20:cf:97:74:
24:1c:3f:1e:52:e7:51:34:21:95:f3:3b:25:bf:2d:
d1:c2:23:81:d5:18:06:d5:4b:7e:93:23:83:c0:7c:
4a:e6:c1:94:cf:1e:f5:ea:5c:0f:e8:38:d0:fb:8b:
75:8f:81:71:ba:9d:b3:fe:3d:43:4f:01:31:4f:bc:
3c:37:a1:59:83:c4:f6:1a:89:b8:5f:4a:62:a9:1e:
52:2f:a6:82:a1:ab:b4:a1:92:21:6f:45:9d:ee:55:
cb:43:47:d9:d9:eb:00:07:0d:1d:09:64:2a:a1:78:
6b:f3:a7:9f:eb:a4:c4:3c:0d:64:23:74:ad:ee:1e:
d2:d4:fe:12:a8:b6:ca:15:0b:e2:e0:0b:90:51:99:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:29:06:F1:DD:9C:D6:1D:6B:C8:60:1B:D0:4B:02:2A:BC:57:52:46
X509v3 Authority Key Identifier:
keyid:AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1e:e1:18:ba:ce:04:ac:41:a6:ea:d7:01:b0:45:a5:df:50:
55:a9:29:f8:b6:67:ae:68:77:6f:25:69:d9:90:07:b1:cb:8a:
af:40:08:3b:c8:ef:41:6c:a0:b1:65:d4:72:df:37:57:0c:43:
4e:6a:ca:cb:0c:47:07:34:ae:ad:80:4f:e8:10:04:2b:41:2a:
16:9e:4d:65:a5:79:60:69:13:42:2f:fa:a3:77:17:ea:e1:cc:
42:70:6e:6f:f5:0d:a7:a6:e2:b2:36:14:22:5e:3a:0c:7d:2f:
19:b8:eb:4f:59:26:64:d4:2a:8c:fe:23:6e:0c:03:a9:41:cd:
93:1f:21:2f:08:7a:97:d8:e0:d4:d6:6c:c4:e5:5f:f8:37:80:
1a:3a:2e:df:40:33:aa:da:87:9c:1b:d4:cf:b6:f0:fa:bb:9d:
8b:e7:fd:06:e6:65:27:e0:e2:ae:ea:da:c3:8d:a3:a0:7e:9f:
9d:e8:3f:39:8f:10:86:1f:3c:78:b0:c3:91:5f:bd:0e:a7:08:
b1:1a:7e:76:1b:0d:a8:0a:fe:09:a9:79:98:7e:d3:da:e3:7c:
6d:ac:51:85:2a:04:30:eb:2c:5c:fb:e0:a5:b6:0d:21:9e:c9:
d8:56:aa:f8:a9:94:fa:13:d4:2a:0d:66:0f:e0:b1:84:47:ba:
b8:17:16:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYqGuBhyiCXOnnkGIGCPZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMTBjZGQwYjhiNzMzMDRjOTg1ZmRlMWIxMGU0MDE4MmJm
MTM5MDIwHhcNMjUxMTA0MTUwMDU1WhcNMjUxMTA1MTUwMDU1WjAzMTEwLwYDVQQD
EyhlNTI5MDZmMWRkOWNkNjFkNmJjODYwMWJkMDRiMDIyYWJjNTc1MjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk7Drttse6YpeOssJbM0iNPLTwrw
t//ZPAREBAwjcSZpbNFFI/JDo/yXJKklQsXMXRpY81pv8efbR4Ay94ZlEYT6+fu6
4i4CQI8tQzmJjE8MHF9gd8EZOFegURncU+mK8CjnceDHF8ylGLnQEAbLHmjJJSDP
l3QkHD8eUudRNCGV8zslvy3RwiOB1RgG1Ut+kyODwHxK5sGUzx716lwP6DjQ+4t1
j4Fxup2z/j1DTwExT7w8N6FZg8T2Gom4X0piqR5SL6aCoau0oZIhb0Wd7lXLQ0fZ
2esABw0dCWQqoXhr86ef66TEPA1kI3St7h7S1P4SqLbKFQvi4AuQUZkR/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUpBvHdnNYda8hgG9BLAiq8V1JGMB8GA1UdIwQY
MBaAFK0QzdC4tzMEyYX94bEOQBgr8TkCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kZWI4NzQtZjkwYi00MmM0LWJjZDIt
NDdiYmYyMWVhYzlmLzEvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9kZWI4NzQtZjkwYi00MmM0LWJjZDItNDdiYmYyMWVhYzlm
LzEvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArh7hGLrO
BKxBpurXAbBFpd9QVakp+LZnrmh3byVp2ZAHscuKr0AIO8jvQWygsWXUct83VwxD
TmrKywxHBzSurYBP6BAEK0EqFp5NZaV5YGkTQi/6o3cX6uHMQnBub/UNp6bisjYU
Il46DH0vGbjrT1kmZNQqjP4jbgwDqUHNkx8hLwh6l9jg1NZsxOVf+DeAGjou30Az
qtqHnBvUz7bw+rudi+f9BuZlJ+Diruraw42joH6fneg/OY8Qhh88eLDDkV+9DqcI
sRp+dhsNqAr+Cal5mH7T2uN8baxRhSoEMOssXPvgpbYNIZ7J2Faq+KmU+hPUKg1m
D+CxhEe6uBcWMA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:41 2025 by rpki-client