Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
File: Rk2NgKs3p1e503SClf5mn04JOyM.mft (raw, json)
Hash identifier: vcpIovcpfEgiGFKrxWuOZ8MrR2CUYCzY4H1M16pKF/U=
Subject key identifier: F8:53:2B:9B:CC:37:31:07:A3:16:CC:04:F2:13:E2:DC:AF:24:85:9B
Authority key identifier: 46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
Certificate issuer: /CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Certificate serial: 019A5006F46C978D80DDF66329D273BEECDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
Manifest number: 1156
Signing time: Tue 04 Nov 2025 18:00:24 +0000
Manifest this update: Tue 04 Nov 2025 18:00:24 +0000
Manifest next update: Wed 05 Nov 2025 18:00:24 +0000
Files and hashes: 1: Rk2NgKs3p1e503SClf5mn04JOyM.crl (hash: lGNuniKl7cL+mN8FeY8NKhqJE7XxRcDvT7pmB8sSiMo=)
2: xJnPr2RyvvePQVXn-sWgNe1aA9M.roa (hash: yJ4J4gghIQZp1yxWa+HqkTzf9ODjqBVN9nX0iZFZokQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:f4:6c:97:8d:80:dd:f6:63:29:d2:73:be:ec:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Validity
Not Before: Nov 4 18:00:24 2025 GMT
Not After : Nov 5 18:00:24 2025 GMT
Subject: CN=f8532b9bcc373107a316cc04f213e2dcaf24859b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:c2:8a:5c:d9:67:90:7b:46:b5:62:7d:9d:
a5:c6:4b:08:39:5c:81:a8:05:a9:0a:fa:67:f3:f8:
65:09:8e:8f:63:1b:64:4d:7d:ac:f6:3a:51:6f:be:
a0:ce:d8:e3:2a:3d:40:9e:77:aa:72:ac:c7:18:74:
c7:b6:b9:7e:04:29:e9:27:cd:e4:66:13:b7:bf:5f:
1b:c8:44:65:82:b7:2a:1c:0d:89:8a:9f:e5:88:cb:
a4:80:ac:fa:18:f8:5e:f4:ad:a4:2d:b9:23:95:48:
e6:ea:92:52:29:2b:33:33:e4:30:0d:6c:59:fa:6b:
86:a9:34:b2:3b:b1:03:8d:47:96:08:02:5e:b1:fa:
b0:8a:71:d4:90:84:0e:e2:80:8b:3e:e7:9c:83:89:
0e:ec:f2:77:c7:71:41:82:8f:09:ab:40:59:e4:7b:
1f:a0:b1:ac:64:e4:80:a8:50:b2:bc:b5:76:df:d6:
3a:23:97:78:e0:e9:0d:4f:8f:78:9b:ba:4d:84:d8:
96:b4:e4:08:f1:84:88:51:99:15:c0:be:6f:f9:18:
4a:52:5d:b5:08:67:1e:3f:29:60:b2:7d:bd:9e:38:
80:8b:25:d5:17:10:c4:b1:51:34:f3:6c:e6:af:5d:
c5:79:ba:c2:97:c1:b5:30:55:d9:be:28:1a:b9:61:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:53:2B:9B:CC:37:31:07:A3:16:CC:04:F2:13:E2:DC:AF:24:85:9B
X509v3 Authority Key Identifier:
keyid:46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1a:4f:74:ea:de:89:3f:0a:fa:3c:6d:c4:7e:6b:d1:95:f9:
6c:1f:bb:a4:5f:cc:e8:11:af:88:e5:55:99:02:57:7e:9a:c6:
55:a6:73:c5:7d:de:86:da:c6:1d:70:71:e9:6c:0c:a4:52:5f:
46:d9:a5:ea:26:f0:30:9f:87:b9:80:4b:7c:ca:6d:58:73:1d:
d0:31:2a:3c:cd:98:3d:42:17:6b:36:14:a0:d0:57:e0:bb:53:
4f:66:e7:43:4a:a2:e5:f0:e4:8a:bb:3c:3d:b2:ef:ee:63:ab:
17:ad:c0:4d:a7:88:0c:88:e9:72:16:98:90:e3:b0:f7:1c:33:
1d:08:5d:8f:1b:a8:9b:13:8e:b3:af:b7:8d:29:94:b9:d4:6b:
f3:ad:45:76:84:65:cf:4f:1f:90:08:e3:c9:89:24:fd:d4:fc:
50:65:36:1b:b7:26:74:90:fc:d2:81:2a:1f:0e:64:79:d7:fe:
ed:5a:59:42:2c:7c:3f:3c:0f:75:7b:86:91:16:9f:47:bf:51:
b6:50:51:37:2a:18:6d:c4:5c:89:91:44:f4:bd:91:0e:72:26:
7d:07:fb:ab:cc:88:40:d7:2b:56:cd:00:c1:0c:7e:69:66:3f:
e6:f4:18:18:76:aa:9c:e7:ce:95:83:1b:69:9a:a9:1a:88:c7:
b2:2c:49:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBvRsl42A3fZjKdJzvuzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NGQ4ZDgwYWIzN2E3NTdiOWQzNzQ4Mjk1ZmU2NjlmNGUw
OTNiMjMwHhcNMjUxMTA0MTgwMDI0WhcNMjUxMTA1MTgwMDI0WjAzMTEwLwYDVQQD
EyhmODUzMmI5YmNjMzczMTA3YTMxNmNjMDRmMjEzZTJkY2FmMjQ4NTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweXCilzZZ5B7RrVifZ2lxksIOVyB
qAWpCvpn8/hlCY6PYxtkTX2s9jpRb76gztjjKj1AnneqcqzHGHTHtrl+BCnpJ83k
ZhO3v18byERlgrcqHA2Jip/liMukgKz6GPhe9K2kLbkjlUjm6pJSKSszM+QwDWxZ
+muGqTSyO7EDjUeWCAJesfqwinHUkIQO4oCLPuecg4kO7PJ3x3FBgo8Jq0BZ5Hsf
oLGsZOSAqFCyvLV239Y6I5d44OkNT494m7pNhNiWtOQI8YSIUZkVwL5v+RhKUl21
CGcePylgsn29njiAiyXVFxDEsVE082zmr13FebrCl8G1MFXZvigauWE46QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhTK5vMNzEHoxbMBPIT4tyvJIWbMB8GA1UdIwQY
MBaAFEZNjYCrN6dXudN0gpX+Zp9OCTsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmsyTmdLczNwMWU1MDNTQ2xmNW1uMDRKT3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jZTQ3ZDItN2U3MS00NWRlLThmMTgt
OTExYmIzZGNmMGQ3LzEvUmsyTmdLczNwMWU1MDNTQ2xmNW1uMDRKT3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jZTQ3ZDItN2U3MS00NWRlLThmMTgtOTExYmIzZGNmMGQ3
LzEvUmsyTmdLczNwMWU1MDNTQ2xmNW1uMDRKT3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYhpPdOre
iT8K+jxtxH5r0ZX5bB+7pF/M6BGviOVVmQJXfprGVaZzxX3ehtrGHXBx6WwMpFJf
Rtml6ibwMJ+HuYBLfMptWHMd0DEqPM2YPUIXazYUoNBX4LtTT2bnQ0qi5fDkirs8
PbLv7mOrF63ATaeIDIjpchaYkOOw9xwzHQhdjxuomxOOs6+3jSmUudRr861FdoRl
z08fkAjjyYkk/dT8UGU2G7cmdJD80oEqHw5kedf+7VpZQix8PzwPdXuGkRafR79R
tlBRNyoYbcRciZFE9L2RDnImfQf7q8yIQNcrVs0AwQx+aWY/5vQYGHaqnOfOlYMb
aZqpGojHsixJMA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:41:06 2025 by rpki-client