Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
File: edQ3WEq9tIITYw3KpfAMnSw8wXk.mft (raw, json)
Hash identifier: htno6ITGRssuN73rO1kkP875p050qiI4EI8sP12o+es=
Subject key identifier: 8B:A8:09:46:88:D7:7A:8F:E5:04:DB:57:03:0D:C3:BE:9E:61:29:50
Authority key identifier: 79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
Certificate issuer: /CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Certificate serial: 019A533F5FDA3AEECA7064A1643F8CF5F2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
Manifest number: 11BE
Signing time: Wed 05 Nov 2025 09:00:53 +0000
Manifest this update: Wed 05 Nov 2025 09:00:53 +0000
Manifest next update: Thu 06 Nov 2025 09:00:53 +0000
Files and hashes: 1: _6bJkuzxLJMC8zZKQrB-nCnecco.roa (hash: GqXUAXRZkYfH9YlSLUwHS7QBNR7+ywl2PUwYOYs72Io=)
2: edQ3WEq9tIITYw3KpfAMnSw8wXk.crl (hash: k9hPGvmMvK/Bg6/KjnMTYdhFHSckvZoKe6J8GgueiZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:5f:da:3a:ee:ca:70:64:a1:64:3f:8c:f5:f2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Validity
Not Before: Nov 5 09:00:53 2025 GMT
Not After : Nov 6 09:00:53 2025 GMT
Subject: CN=8ba8094688d77a8fe504db57030dc3be9e612950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:0f:16:c3:18:65:d1:f1:fc:4d:d5:e3:f1:
12:88:41:50:81:f3:43:36:b6:72:b3:2b:8e:26:57:
66:71:6b:93:6f:25:4b:eb:a1:57:3d:24:3e:6b:fc:
bf:0f:1a:41:e8:77:e5:39:17:e8:3c:44:13:cb:15:
4c:d5:da:6e:65:de:a2:ca:79:50:f9:5c:b4:e8:37:
ac:60:aa:39:a2:d4:60:74:24:e2:76:9c:1c:02:77:
c8:f6:32:43:59:d2:fe:67:06:38:ab:48:94:2c:c7:
a7:6d:e3:4b:cd:91:17:5e:62:c0:ec:55:8a:34:63:
71:12:85:97:62:8a:1c:3b:0d:83:d2:b9:83:25:8d:
ed:8e:1c:1d:04:73:f3:27:b2:48:27:bd:3a:9f:e6:
fa:6a:4d:7c:3d:93:fe:eb:2a:89:96:67:ac:10:36:
fd:1a:c9:2b:a3:eb:19:58:4b:76:df:09:45:0b:ff:
24:89:90:0e:0f:19:e1:d4:5e:06:8d:7a:dc:40:64:
6d:2d:ef:35:c6:0d:5f:60:96:f1:3f:1c:b8:ad:6c:
a4:11:1e:56:bb:e4:aa:21:c3:c6:eb:2c:75:8f:65:
88:80:1b:c2:f5:06:cf:21:ca:d0:5e:70:a7:89:24:
9e:fc:03:7d:c2:ea:1c:50:5e:f0:4c:11:ad:e5:68:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A8:09:46:88:D7:7A:8F:E5:04:DB:57:03:0D:C3:BE:9E:61:29:50
X509v3 Authority Key Identifier:
keyid:79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:25:34:7d:d2:fd:f8:95:c7:f7:db:d8:68:de:64:ca:9d:c3:
ef:39:12:f3:b6:c6:b6:1f:82:e8:e7:ef:09:eb:63:4c:34:ea:
b5:31:0a:69:1e:00:be:cb:4b:3f:71:b1:72:69:ac:f0:ac:ca:
22:f9:f4:9a:ed:2b:cb:41:d1:ba:c6:70:96:47:3f:ac:ac:f2:
3c:cd:07:30:78:4d:28:65:6d:00:72:33:ea:78:30:09:43:0e:
fd:c9:d7:d3:45:ec:2a:6a:a5:7d:3b:92:c4:c4:11:e6:0b:be:
d9:ab:90:bd:e1:f3:d2:fa:ec:59:13:0e:61:28:99:f6:1b:6e:
c8:4e:30:67:22:7a:3b:d1:48:14:10:4c:65:1c:0f:6e:72:f9:
c9:04:4e:d1:6b:8f:2c:3e:ca:03:7a:c6:f7:d1:fe:8b:a5:7c:
dd:ca:d3:28:f7:e8:48:9a:57:76:ac:cf:e9:9c:c8:e8:eb:5d:
df:cb:ef:d6:72:4a:b0:cf:a1:1e:37:ac:24:8f:dc:19:73:98:
c4:91:00:7c:2f:0d:91:c1:b7:35:2b:0e:11:66:fd:2d:32:26:
bf:9a:ca:c9:4f:70:7f:81:ee:95:b3:a4:52:ee:b4:60:9f:9a:
56:15:99:80:75:34:7a:e6:46:bb:58:a1:13:87:b5:8f:9c:59:
1a:ec:f8:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTP1/aOu7KcGShZD+M9fKvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDQzNzU4NGFiZGI0ODIxMzYzMGRjYWE1ZjAwYzlkMmMz
Y2MxNzkwHhcNMjUxMTA1MDkwMDUzWhcNMjUxMTA2MDkwMDUzWjAzMTEwLwYDVQQD
Eyg4YmE4MDk0Njg4ZDc3YThmZTUwNGRiNTcwMzBkYzNiZTllNjEyOTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/QPFsMYZdHx/E3V4/ESiEFQgfND
NrZysyuOJldmcWuTbyVL66FXPSQ+a/y/DxpB6HflORfoPEQTyxVM1dpuZd6iynlQ
+Vy06DesYKo5otRgdCTidpwcAnfI9jJDWdL+ZwY4q0iULMenbeNLzZEXXmLA7FWK
NGNxEoWXYoocOw2D0rmDJY3tjhwdBHPzJ7JIJ706n+b6ak18PZP+6yqJlmesEDb9
Gskro+sZWEt23wlFC/8kiZAODxnh1F4GjXrcQGRtLe81xg1fYJbxPxy4rWykER5W
u+SqIcPG6yx1j2WIgBvC9QbPIcrQXnCniSSe/AN9wuocUF7wTBGt5WjpVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuoCUaI13qP5QTbVwMNw76eYSlQMB8GA1UdIwQY
MBaAFHnUN1hKvbSCE2MNyqXwDJ0sPMF5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWRRM1dFcTl0SUlUWXczS3BmQU1uU3c4d1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNDk2YTQtY2M5Zi00NDE5LWFkODEt
YWFhMjM4MDk4MmJjLzEvZWRRM1dFcTl0SUlUWXczS3BmQU1uU3c4d1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zNDk2YTQtY2M5Zi00NDE5LWFkODEtYWFhMjM4MDk4MmJj
LzEvZWRRM1dFcTl0SUlUWXczS3BmQU1uU3c4d1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACU0fdL9
+JXH99vYaN5kyp3D7zkS87bGth+C6OfvCetjTDTqtTEKaR4AvstLP3Gxcmms8KzK
Ivn0mu0ry0HRusZwlkc/rKzyPM0HMHhNKGVtAHIz6ngwCUMO/cnX00XsKmqlfTuS
xMQR5gu+2auQveHz0vrsWRMOYSiZ9htuyE4wZyJ6O9FIFBBMZRwPbnL5yQRO0WuP
LD7KA3rG99H+i6V83crTKPfoSJpXdqzP6ZzI6Otd38vv1nJKsM+hHjesJI/cGXOY
xJEAfC8NkcG3NSsOEWb9LTImv5rKyU9wf4HulbOkUu60YJ+aVhWZgHU0euZGu1ih
E4e1j5xZGuz4Zw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:45:46 2025 by rpki-client