Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: Pw60+Sd7+1SoaUqVfqBq1NJ8CKYc8oMuc8Oea9E0Bos=
Subject key identifier: 2A:C9:2F:22:ED:A1:AD:52:92:ED:20:A5:26:6E:DE:B3:89:EC:42:CB
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 019A51509A061FF26B6DA07C38565A3D6442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 0FA3
Signing time: Wed 05 Nov 2025 00:00:27 +0000
Manifest this update: Wed 05 Nov 2025 00:00:27 +0000
Manifest next update: Thu 06 Nov 2025 00:00:27 +0000
Files and hashes: 1: RGqdJBDPEJ4NHCF91EROwq2LZhE.roa (hash: Hlulf3Fm39IzIDGq4R3bEURkvT1bInO2vsqwAXSwJiE=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: VeC+zLprKhQJ3sBrGBVByiVlMyeSlRi+RlP2xFa1YEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:9a:06:1f:f2:6b:6d:a0:7c:38:56:5a:3d:64:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Nov 5 00:00:27 2025 GMT
Not After : Nov 6 00:00:27 2025 GMT
Subject: CN=2ac92f22eda1ad5292ed20a5266edeb389ec42cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c3:ed:a8:b8:e5:7f:9a:64:56:0b:05:9d:8f:
7c:52:2d:c2:d9:86:32:de:e6:f7:bb:b1:c6:ed:aa:
df:62:8a:c3:37:aa:bb:5e:04:75:da:7b:41:e5:6f:
ad:98:7e:c0:c0:8f:8a:3b:d1:1c:c1:16:0d:7b:f7:
9d:23:88:8d:b4:e5:22:5a:7c:21:49:d4:ed:a4:58:
b7:71:7e:91:96:6a:e0:19:e2:c6:0d:28:02:fc:c6:
a7:e6:4f:8b:51:28:b9:aa:c3:58:fd:65:fb:10:8e:
a7:f1:69:1e:cd:fa:df:e3:bc:40:0d:d1:a8:72:fd:
2d:20:cf:60:af:fe:05:ed:1e:77:f6:8f:2a:51:07:
8d:de:b6:a8:2b:80:c8:44:a9:10:d5:2d:4c:90:5f:
5c:6c:b4:03:e6:19:5d:0b:83:0b:c8:04:6f:50:53:
4c:5a:a4:aa:a4:62:8b:39:d1:e2:91:1f:8d:38:58:
c4:44:a4:1f:9c:fb:6f:8e:ad:13:66:b6:81:f9:66:
d1:4a:9c:cd:3a:bc:06:f0:6a:d9:e2:1f:50:e4:5e:
95:ba:c0:cd:2b:ca:79:1d:ed:cf:d0:ff:6b:2c:e9:
c0:47:57:42:3d:9d:93:0c:41:18:25:42:0f:74:20:
c9:e4:96:a8:02:1f:cb:93:b0:1c:43:d9:17:e1:33:
f1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C9:2F:22:ED:A1:AD:52:92:ED:20:A5:26:6E:DE:B3:89:EC:42:CB
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a2:d3:81:2f:47:f4:54:17:9e:ea:d9:8d:85:36:45:c4:ea:
f2:69:63:1f:5e:01:6c:1d:9f:88:39:fb:5e:93:f8:78:4f:a3:
b4:f3:1d:7d:41:fe:2e:38:f3:ab:f1:fd:38:1b:f9:f7:57:ec:
47:1b:20:d0:b6:10:d0:e0:aa:4b:b4:cb:1f:6a:62:b1:b3:48:
0a:ff:c2:0b:77:7b:ba:98:39:25:ae:df:ac:53:1b:fe:1c:02:
f2:ef:7a:c7:87:69:a1:d3:43:2c:46:95:5b:35:7e:b5:52:58:
2e:c5:d0:1a:86:07:13:5c:4e:f2:26:38:a4:e9:9d:ba:70:ef:
9f:29:49:cf:ce:a6:ac:0d:c9:97:85:f7:e0:ae:8b:3b:5d:6d:
fc:2f:42:3f:72:42:ff:a7:a4:12:b6:f1:62:2b:e0:0a:9b:ff:
47:73:d1:e4:51:e3:45:17:cf:c5:1d:37:a4:b8:83:22:05:a5:
11:8f:52:4c:c8:89:70:9b:db:75:0c:38:20:d9:64:00:98:5d:
be:51:f9:c8:f4:07:37:12:f3:78:6f:96:3a:36:68:5c:df:e3:
f4:e7:14:e7:91:84:b3:47:53:39:32:df:a6:a1:07:6b:09:24:
68:90:37:d0:44:9e:2f:87:6e:13:83:86:e1:a6:ce:ab:88:75:
2f:49:c4:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUJoGH/JrbaB8OFZaPWRCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzY3YmMxOWYwNjY5OTY0OTBhMjA2Njc0YzhkYThmNWVk
MmNkMGUwHhcNMjUxMTA1MDAwMDI3WhcNMjUxMTA2MDAwMDI3WjAzMTEwLwYDVQQD
EygyYWM5MmYyMmVkYTFhZDUyOTJlZDIwYTUyNjZlZGViMzg5ZWM0MmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cPtqLjlf5pkVgsFnY98Ui3C2YYy
3ub3u7HG7arfYorDN6q7XgR12ntB5W+tmH7AwI+KO9EcwRYNe/edI4iNtOUiWnwh
SdTtpFi3cX6RlmrgGeLGDSgC/Man5k+LUSi5qsNY/WX7EI6n8Wkezfrf47xADdGo
cv0tIM9gr/4F7R539o8qUQeN3raoK4DIRKkQ1S1MkF9cbLQD5hldC4MLyARvUFNM
WqSqpGKLOdHikR+NOFjERKQfnPtvjq0TZraB+WbRSpzNOrwG8GrZ4h9Q5F6VusDN
K8p5He3P0P9rLOnAR1dCPZ2TDEEYJUIPdCDJ5JaoAh/Lk7AcQ9kX4TPx0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrJLyLtoa1Sku0gpSZu3rOJ7ELLMB8GA1UdIwQY
MBaAFK02e8GfBmmWSQogZnTI2o9e0s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQt
ODRiNjdiNDcwYjA0LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQtODRiNjdiNDcwYjA0
LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6LTgS9H
9FQXnurZjYU2RcTq8mljH14BbB2fiDn7XpP4eE+jtPMdfUH+Ljjzq/H9OBv591fs
Rxsg0LYQ0OCqS7TLH2pisbNICv/CC3d7upg5Ja7frFMb/hwC8u96x4dpodNDLEaV
WzV+tVJYLsXQGoYHE1xO8iY4pOmdunDvnylJz86mrA3Jl4X34K6LO11t/C9CP3JC
/6ekErbxYivgCpv/R3PR5FHjRRfPxR03pLiDIgWlEY9STMiJcJvbdQw4INlkAJhd
vlH5yPQHNxLzeG+WOjZoXN/j9OcU55GEs0dTOTLfpqEHawkkaJA30ESeL4duE4OG
4abOq4h1L0nEIA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:19:36 2025 by rpki-client