Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
File: R60fV24_cbT2wzkfL6ND1Qi2se4.mft (raw, json)
Hash identifier: cSJkP7ttj87ordY/7hiU2iZiwVlbq3M0bCs6/CZ8vCk=
Subject key identifier: F6:9B:DB:C4:A3:76:47:6A:19:E5:61:F5:2D:A9:8D:A5:96:B1:A7:E6
Authority key identifier: 47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
Certificate issuer: /CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Certificate serial: 019A4F98FF3F6A97B14227EEE01340560EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 16:00:18 +0000
Manifest this update: Tue 04 Nov 2025 16:00:18 +0000
Manifest next update: Wed 05 Nov 2025 16:00:18 +0000
Files and hashes: 1: R60fV24_cbT2wzkfL6ND1Qi2se4.crl (hash: Nbc5HOCaYbo/PrZ5nEr0NDX0/J6pCa38eR5qI/GeoCw=)
2: aO3r11e9FzxFIAvzci6U1ugRCX4.roa (hash: RN1LPTFZ9dixQeq/j0V0Euzw3FqtnyCrfR7culnL03E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:ff:3f:6a:97:b1:42:27:ee:e0:13:40:56:0e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Validity
Not Before: Nov 4 16:00:18 2025 GMT
Not After : Nov 5 16:00:18 2025 GMT
Subject: CN=f69bdbc4a376476a19e561f52da98da596b1a7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:05:5a:8a:c5:8b:c4:d2:a9:95:10:4c:74:
1e:4f:f3:64:ad:cb:5f:ea:47:4e:94:24:c4:35:e9:
93:be:e2:e2:9f:26:5f:a6:61:ee:1f:57:3f:82:a5:
6d:61:05:d9:c6:ba:c7:14:83:10:cf:27:fa:ab:3d:
79:de:8f:2a:c7:4f:cf:b4:e2:7c:fd:dd:ab:b3:03:
8b:cd:62:1b:28:94:f2:88:aa:f6:de:36:c9:81:bd:
a0:4a:23:e5:22:7b:40:d8:aa:d8:19:31:c3:53:1e:
3a:fe:3a:41:4e:95:c3:21:19:b7:9b:d1:1e:10:4a:
bb:50:c9:08:31:d8:61:1d:bd:1a:b4:e5:c2:9c:ae:
49:60:c4:7e:6a:1f:15:05:58:50:ee:01:13:74:34:
56:59:fc:e5:01:db:6e:d5:64:fb:08:4c:bd:fb:9c:
ce:5e:d5:60:59:12:74:be:44:ac:f6:1b:99:11:ff:
91:ad:1b:3c:bb:f6:d4:e9:03:f2:2f:26:d5:68:08:
98:37:5a:e6:08:dd:cc:56:33:29:1f:31:71:db:7f:
5f:c5:8b:79:62:e7:51:46:ef:5e:e2:d2:5b:ad:72:
53:ac:d6:e7:9d:20:fc:40:5c:63:d8:57:1a:3a:71:
4c:ef:00:7f:a5:7a:52:6f:f2:16:b7:36:54:86:a1:
01:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9B:DB:C4:A3:76:47:6A:19:E5:61:F5:2D:A9:8D:A5:96:B1:A7:E6
X509v3 Authority Key Identifier:
keyid:47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c5:07:5b:e7:04:67:44:11:23:3d:f3:3e:06:3b:5c:68:fc:
99:90:29:c4:57:55:b7:26:75:11:08:37:c1:55:a9:68:6b:84:
25:48:87:72:37:46:d1:67:9c:c0:21:cd:59:2f:f8:91:39:fd:
1c:5d:57:df:36:1e:a5:f2:f1:ef:95:62:22:2e:13:01:55:e9:
6e:7f:c5:fa:42:17:60:22:1d:97:86:f8:5e:bd:e8:3d:0d:fe:
1a:37:00:db:a7:86:77:cd:94:5e:55:90:34:a1:6d:06:ab:49:
b1:b4:3a:76:15:d8:c5:08:16:8d:32:d9:60:d9:85:3a:69:cd:
31:f7:e6:73:de:cb:2a:cf:65:41:e6:ba:22:68:42:0a:58:3b:
8e:03:df:51:54:b4:2a:8b:f7:e5:cc:fb:80:0f:d1:6c:cf:2d:
52:9c:aa:dd:a0:b4:2f:4e:c6:fd:f6:be:b1:64:77:5b:35:26:
ba:14:28:3b:a8:b6:a5:48:a8:c5:97:dd:e7:a7:0e:63:32:5d:
c1:fd:cd:b9:5d:c5:85:4e:ac:96:8e:22:dc:7d:f8:73:cd:60:
4c:2f:d3:48:c0:71:15:46:51:ba:9b:17:69:4d:34:a8:0e:c1:
ae:ae:57:8d:d7:20:7d:d5:0a:8d:60:51:16:73:6c:29:db:50:
24:84:47:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmP8/apexQifu4BNAVg65MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YWQxZjU3NmUzZjcxYjRmNmMzMzkxZjJmYTM0M2Q1MDhi
NmIxZWUwHhcNMjUxMTA0MTYwMDE4WhcNMjUxMTA1MTYwMDE4WjAzMTEwLwYDVQQD
EyhmNjliZGJjNGEzNzY0NzZhMTllNTYxZjUyZGE5OGRhNTk2YjFhN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBoFWorFi8TSqZUQTHQeT/Nkrctf
6kdOlCTENemTvuLinyZfpmHuH1c/gqVtYQXZxrrHFIMQzyf6qz153o8qx0/PtOJ8
/d2rswOLzWIbKJTyiKr23jbJgb2gSiPlIntA2KrYGTHDUx46/jpBTpXDIRm3m9Ee
EEq7UMkIMdhhHb0atOXCnK5JYMR+ah8VBVhQ7gETdDRWWfzlAdtu1WT7CEy9+5zO
XtVgWRJ0vkSs9huZEf+RrRs8u/bU6QPyLybVaAiYN1rmCN3MVjMpHzFx239fxYt5
YudRRu9e4tJbrXJTrNbnnSD8QFxj2FcaOnFM7wB/pXpSb/IWtzZUhqEBtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPab28SjdkdqGeVh9S2pjaWWsafmMB8GA1UdIwQY
MBaAFEetH1duP3G09sM5Hy+jQ9UItrHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjYwZlYyNF9jYlQyd3prZkw2TkQxUWkyc2U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8yZTAyODYtNTYzOS00YTFjLThiZjIt
M2NjYjMwNzQwMjBmLzEvUjYwZlYyNF9jYlQyd3prZkw2TkQxUWkyc2U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8yZTAyODYtNTYzOS00YTFjLThiZjItM2NjYjMwNzQwMjBm
LzEvUjYwZlYyNF9jYlQyd3prZkw2TkQxUWkyc2U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcUHW+cE
Z0QRIz3zPgY7XGj8mZApxFdVtyZ1EQg3wVWpaGuEJUiHcjdG0WecwCHNWS/4kTn9
HF1X3zYepfLx75ViIi4TAVXpbn/F+kIXYCIdl4b4Xr3oPQ3+GjcA26eGd82UXlWQ
NKFtBqtJsbQ6dhXYxQgWjTLZYNmFOmnNMffmc97LKs9lQea6ImhCClg7jgPfUVS0
Kov35cz7gA/RbM8tUpyq3aC0L07G/fa+sWR3WzUmuhQoO6i2pUioxZfd56cOYzJd
wf3NuV3FhU6slo4i3H34c81gTC/TSMBxFUZRupsXaU00qA7Brq5XjdcgfdUKjWBR
FnNsKdtQJIRHrw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:57 2025 by rpki-client