Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: tdCGdYlfyKoW0OpBRmqr/c+DPvW29GsvFUqA2ECmlck=
Subject key identifier: 99:E1:C9:A4:5B:2A:78:76:37:4D:3B:6D:40:75:B9:B4:08:43:2D:9F
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 019A4F6250DF074952D01C9E0FADC40FC5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 15:00:34 +0000
Manifest this update: Tue 04 Nov 2025 15:00:34 +0000
Manifest next update: Wed 05 Nov 2025 15:00:34 +0000
Files and hashes: 1: ElkjMSo_kXjP6q9aSDUGnZi_eU0.roa (hash: 7q4VbgFNWa3tnFNDab0oMeZop6uPRWY6PGIt1SoGlFs=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: b+qfLt5avCgKjkdQIhfOmY0FP+g+U5yINxIBL2wURvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:50:df:07:49:52:d0:1c:9e:0f:ad:c4:0f:c5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Nov 4 15:00:34 2025 GMT
Not After : Nov 5 15:00:34 2025 GMT
Subject: CN=99e1c9a45b2a7876374d3b6d4075b9b408432d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e4:57:d5:0a:99:20:d8:1d:d0:e6:db:3a:a4:
5d:12:cf:04:28:9f:7e:a0:8c:ff:21:3f:51:b0:7e:
e1:68:4d:ec:52:f4:d6:49:76:1a:5c:c7:90:3f:bb:
4c:23:e1:48:70:ac:6d:0d:ed:1c:56:cd:5d:93:43:
c1:15:0e:98:af:83:e8:72:46:ed:a1:af:09:4b:72:
35:eb:b9:20:0d:f4:93:7f:e6:94:db:4f:e6:89:8c:
23:5a:18:2a:52:03:25:d1:03:8c:9b:40:54:1c:9c:
9c:e9:a3:ae:72:00:0e:2d:56:55:cd:91:d9:8f:11:
94:86:c5:d9:b9:1f:4b:3d:e1:3b:0c:13:ec:03:e9:
3f:f6:a3:a7:c3:8d:1c:2e:4c:78:d4:9b:b4:90:b5:
8d:aa:cd:2f:a6:32:a4:1d:c4:0c:b1:3a:39:1b:a1:
cc:29:38:69:6b:2b:0f:c7:c6:79:68:74:1c:25:cb:
77:dc:82:ea:cc:31:18:f0:f8:71:71:96:bc:f0:ba:
5e:5f:b5:25:00:08:57:34:50:ae:e2:4a:99:d4:26:
9f:e9:dc:15:ba:0a:a5:e4:ed:f3:0a:21:1c:5a:5b:
b4:b1:68:2b:db:a0:e0:dc:a9:71:3f:da:84:e1:37:
6f:70:a4:c1:81:a4:ac:f7:bc:cb:8a:34:2d:ce:63:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E1:C9:A4:5B:2A:78:76:37:4D:3B:6D:40:75:B9:B4:08:43:2D:9F
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:63:96:41:b6:d7:3b:53:81:a4:b8:30:2d:8c:36:96:65:0a:
cb:09:f1:7d:53:42:c6:12:66:8c:35:87:fd:5f:b1:85:d6:4c:
45:d9:6e:5a:ad:e5:c6:ec:d2:77:5b:86:7e:31:9a:4f:f2:fd:
ab:a3:bc:3d:a2:e8:a2:fa:97:74:ca:88:6c:f5:3a:66:85:4e:
cc:b1:46:65:7a:0f:3f:56:e2:f2:6b:2a:72:cd:05:9e:c3:e8:
81:db:04:ba:5a:ef:a4:69:5f:08:11:bd:38:8a:3e:0c:92:3b:
dc:93:7a:ab:dd:06:48:e9:7d:e3:a7:24:c7:44:bd:11:30:c5:
70:25:03:bc:6f:64:ca:44:21:a9:96:dc:6f:fe:f7:32:7e:4d:
da:62:8d:9a:cf:16:b2:83:58:67:46:2f:69:66:d5:34:99:b9:
51:12:e2:73:9d:23:b1:6a:d8:bd:ce:9f:fd:fc:28:a0:14:9c:
a6:c3:a9:df:62:6b:00:ee:5a:f4:3a:75:32:e4:ec:77:ea:26:
62:1f:3b:43:6b:72:a5:ec:78:52:50:53:0b:7b:0b:cb:d9:bb:
ae:fb:5e:62:29:47:a3:23:f3:d3:8f:52:43:1f:15:1a:3a:90:
57:55:32:96:4a:b1:28:2b:b0:0c:c9:f4:30:ce:05:e1:d3:0b:
af:c6:85:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYlDfB0lS0ByeD63ED8WqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNTBiYWFkZmYyYzI4NmM2MGI5NjEwN2QyYzY0ZDUzN2Vj
MGFjYTYwHhcNMjUxMTA0MTUwMDM0WhcNMjUxMTA1MTUwMDM0WjAzMTEwLwYDVQQD
Eyg5OWUxYzlhNDViMmE3ODc2Mzc0ZDNiNmQ0MDc1YjliNDA4NDMyZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieRX1QqZINgd0ObbOqRdEs8EKJ9+
oIz/IT9RsH7haE3sUvTWSXYaXMeQP7tMI+FIcKxtDe0cVs1dk0PBFQ6Yr4Pockbt
oa8JS3I167kgDfSTf+aU20/miYwjWhgqUgMl0QOMm0BUHJyc6aOucgAOLVZVzZHZ
jxGUhsXZuR9LPeE7DBPsA+k/9qOnw40cLkx41Ju0kLWNqs0vpjKkHcQMsTo5G6HM
KThpaysPx8Z5aHQcJct33ILqzDEY8PhxcZa88LpeX7UlAAhXNFCu4kqZ1Caf6dwV
ugql5O3zCiEcWlu0sWgr26Dg3KlxP9qE4TdvcKTBgaSs97zLijQtzmOKtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnhyaRbKnh2N007bUB1ubQIQy2fMB8GA1UdIwQY
MBaAFHJQuq3/LChsYLlhB9LGTVN+wKymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yN2UwMzEtMTM4Ni00ZmNhLWJiZTEt
OGU5YjUxMWNhYzFhLzEvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8yN2UwMzEtMTM4Ni00ZmNhLWJiZTEtOGU5YjUxMWNhYzFh
LzEvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2OWQbbX
O1OBpLgwLYw2lmUKywnxfVNCxhJmjDWH/V+xhdZMRdluWq3lxuzSd1uGfjGaT/L9
q6O8PaLoovqXdMqIbPU6ZoVOzLFGZXoPP1bi8msqcs0FnsPogdsEulrvpGlfCBG9
OIo+DJI73JN6q90GSOl946ckx0S9ETDFcCUDvG9kykQhqZbcb/73Mn5N2mKNms8W
soNYZ0YvaWbVNJm5URLic50jsWrYvc6f/fwooBScpsOp32JrAO5a9Dp1MuTsd+om
Yh87Q2typex4UlBTC3sLy9m7rvteYilHoyPz049SQx8VGjqQV1UylkqxKCuwDMn0
MM4F4dMLr8aFMg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:27:40 2025 by rpki-client