Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: 5RYmg9i5gt4o8nZ/xCReOKw9EYyfnm41zSOyWXyxqog=
Subject key identifier: A5:47:70:CE:A9:D6:03:5E:87:D3:4A:01:5C:DB:F3:75:A9:EC:B1:AB
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 019A4E86AF5216F70C68ADA267830724A3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 171D
Signing time: Tue 04 Nov 2025 11:00:40 +0000
Manifest this update: Tue 04 Nov 2025 11:00:40 +0000
Manifest next update: Wed 05 Nov 2025 11:00:40 +0000
Files and hashes: 1: BnZ18m27JG41iStc-0bf7RUhMqc.roa (hash: 506prusX3qMZHHvl16GjdziNik+Zaiptx5uE6D2elAc=)
2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: WzFvfvChioBMUuE79ds63jr6Ub1Re6A4jHwjLNrLBPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:af:52:16:f7:0c:68:ad:a2:67:83:07:24:a3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Nov 4 11:00:40 2025 GMT
Not After : Nov 5 11:00:40 2025 GMT
Subject: CN=a54770cea9d6035e87d34a015cdbf375a9ecb1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fe:96:58:b1:7c:85:53:12:b9:81:35:2c:c2:
e8:8e:c1:ef:96:43:94:8c:03:79:69:f1:e9:a3:73:
9f:b6:ff:74:20:2f:86:1c:90:f2:6a:8a:8c:42:87:
b3:0a:12:2b:0e:72:25:0f:c4:c6:63:21:8c:21:4c:
05:db:87:4f:eb:c6:0b:41:bc:19:f7:a8:01:92:d1:
b9:46:72:13:93:cb:80:ed:02:cf:05:13:68:5a:8b:
b6:7f:d6:80:4e:a4:8d:4a:83:f8:f0:2b:73:cb:e8:
de:a5:7c:c8:d1:f2:94:27:3f:df:d5:ca:6d:fa:a5:
21:55:c2:7f:23:10:53:3c:79:fd:5e:aa:d8:0c:a0:
01:84:cd:e7:fc:6c:1c:cd:f2:e2:11:f7:92:02:a2:
af:dc:cf:d1:b3:21:28:53:8d:01:dd:6c:26:4b:a0:
49:63:58:14:e3:1e:d3:eb:01:82:59:d2:41:c1:62:
5c:fc:b3:5c:31:cd:a0:e0:e7:ed:84:60:06:b2:5e:
dc:f4:b2:e9:a3:8b:d0:ec:fc:81:5f:bc:13:0e:d8:
a5:68:86:a9:1f:93:76:81:8f:c8:57:88:cf:d1:07:
06:60:62:a8:fd:a9:dd:c8:95:1a:c4:e5:59:b8:c5:
f7:13:eb:3e:13:0c:78:18:cb:42:6b:ac:ef:ca:b0:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:47:70:CE:A9:D6:03:5E:87:D3:4A:01:5C:DB:F3:75:A9:EC:B1:AB
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:37:ec:46:fa:d6:41:59:7e:bc:2c:9b:68:f3:1f:43:e9:eb:
f7:0d:b1:c1:ef:d9:1a:8d:dd:e5:a8:69:8f:ad:cd:e7:9a:db:
58:32:95:a1:d7:5d:e1:8e:28:6d:d9:58:fc:30:3e:9c:c0:3c:
96:f9:6b:76:fb:c8:dc:f0:c5:0e:59:8b:18:6e:3c:70:52:5d:
fa:8d:c1:1c:64:60:94:37:e9:72:56:5e:53:0d:04:e2:87:7e:
3a:2e:7c:67:d1:31:16:2f:d1:c5:4f:41:7d:fa:1c:e5:7c:a8:
46:7f:9f:a9:f7:db:26:8d:f1:8e:1b:17:8f:c0:3d:c8:d6:9a:
45:a0:00:b4:2e:3a:17:50:b6:cf:f2:35:a6:ff:13:d1:60:52:
f4:f5:be:91:63:8e:62:dc:a3:b8:2e:14:e7:e1:8c:db:b0:c5:
8d:00:d3:29:af:ab:70:3e:1c:8d:fa:be:5a:ee:65:c2:b1:c2:
3c:62:9b:b2:1a:4d:c5:df:03:38:52:b0:6f:78:46:11:92:92:
86:4e:31:c2:6b:d3:28:57:08:2f:5d:b6:08:42:8e:02:5c:06:
12:df:82:17:c7:9f:3c:21:0e:b8:4f:3a:5b:be:11:51:69:6a:
7e:0e:f5:6c:c8:98:90:76:5d:21:d8:b9:f3:27:13:37:94:96:
cb:60:4b:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhq9SFvcMaK2iZ4MHJKPRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOWQ4NjA5NmE0OTExMGNmOWJmNjcwMjQwYjUxOTMxNWI2
NmFiY2IwHhcNMjUxMTA0MTEwMDQwWhcNMjUxMTA1MTEwMDQwWjAzMTEwLwYDVQQD
EyhhNTQ3NzBjZWE5ZDYwMzVlODdkMzRhMDE1Y2RiZjM3NWE5ZWNiMWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v6WWLF8hVMSuYE1LMLojsHvlkOU
jAN5afHpo3Oftv90IC+GHJDyaoqMQoezChIrDnIlD8TGYyGMIUwF24dP68YLQbwZ
96gBktG5RnITk8uA7QLPBRNoWou2f9aATqSNSoP48Ctzy+jepXzI0fKUJz/f1cpt
+qUhVcJ/IxBTPHn9XqrYDKABhM3n/GwczfLiEfeSAqKv3M/RsyEoU40B3WwmS6BJ
Y1gU4x7T6wGCWdJBwWJc/LNcMc2g4OfthGAGsl7c9LLpo4vQ7PyBX7wTDtilaIap
H5N2gY/IV4jP0QcGYGKo/andyJUaxOVZuMX3E+s+Ewx4GMtCa6zvyrBy6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVHcM6p1gNeh9NKAVzb83Wp7LGrMB8GA1UdIwQY
MBaAFAudhglqSREM+b9nAkC1GTFbZqvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUt
OGMxMDkwOWE0ODVjLzEvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUtOGMxMDkwOWE0ODVj
LzEvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezfsRvrW
QVl+vCybaPMfQ+nr9w2xwe/ZGo3d5ahpj63N55rbWDKVoddd4Y4obdlY/DA+nMA8
lvlrdvvI3PDFDlmLGG48cFJd+o3BHGRglDfpclZeUw0E4od+Oi58Z9ExFi/RxU9B
ffoc5XyoRn+fqffbJo3xjhsXj8A9yNaaRaAAtC46F1C2z/I1pv8T0WBS9PW+kWOO
YtyjuC4U5+GM27DFjQDTKa+rcD4cjfq+Wu5lwrHCPGKbshpNxd8DOFKwb3hGEZKS
hk4xwmvTKFcIL122CEKOAlwGEt+CF8efPCEOuE86W74RUWlqfg71bMiYkHZdIdi5
8ycTN5SWy2BL8w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:15 2025 by rpki-client