Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
File: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft (raw, json)
Hash identifier: TNSt4/Tl7D8SyF+2HPz/yEKCuEE3lVoGOAvB5dEhneI=
Subject key identifier: 17:7B:EF:E5:89:0B:7D:5A:B7:C0:AF:07:12:87:FB:B4:31:F8:BD:D0
Authority key identifier: D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
Certificate issuer: /CN=d276c41a2176254f236d23d391fd56090619670d
Certificate serial: 019A53E3F6CD633F66A6AB1DBFCDDFD6C5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
Manifest number: 020D
Signing time: Wed 05 Nov 2025 12:00:40 +0000
Manifest this update: Wed 05 Nov 2025 12:00:40 +0000
Manifest next update: Thu 06 Nov 2025 12:00:40 +0000
Files and hashes: 1: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl (hash: EwuLXVJILVeoVqB8LE2Da3Kl4jQPhMAjQTmBnSVGQO4=)
2: zLfUqXqKYrDSmOI3zuAuH7VW9AQ.roa (hash: ooYWSL91Gfinkq+JOzjVpKfIwzWfTooJXNIHzh0/MJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:f6:cd:63:3f:66:a6:ab:1d:bf:cd:df:d6:c5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d276c41a2176254f236d23d391fd56090619670d
Validity
Not Before: Nov 5 12:00:40 2025 GMT
Not After : Nov 6 12:00:40 2025 GMT
Subject: CN=177befe5890b7d5ab7c0af071287fbb431f8bdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:17:92:6a:d6:97:19:99:d2:b8:4a:51:08:
3c:5a:71:2e:81:52:11:17:96:12:67:0e:44:4c:d3:
4e:94:0b:92:c6:36:2c:a7:be:f6:66:8d:d1:d2:46:
ff:44:a9:7a:aa:d0:92:8a:3e:89:67:22:1d:cb:a4:
d9:c5:5e:38:89:f3:d9:f9:ad:68:e9:9d:62:b4:fe:
51:82:d5:7b:72:98:6b:79:34:18:93:78:bb:a9:2a:
39:1d:6b:0a:3e:d6:1f:cb:16:5f:c6:6c:2c:2b:8a:
f1:28:95:fc:3f:fd:08:e9:b3:e2:29:04:67:64:d2:
0a:21:24:84:59:99:5e:7d:8d:ba:f6:87:59:d8:85:
57:22:54:9f:2f:53:45:7a:88:a7:a1:35:7e:17:28:
4e:45:11:87:ea:39:84:ff:6c:ad:8d:1d:f9:c2:4e:
22:f4:9b:de:13:bd:75:04:dd:c8:6d:d1:08:03:40:
15:b9:96:da:56:4d:30:30:52:1f:26:8b:d9:92:d0:
15:2a:75:72:ff:8b:97:71:f9:14:57:55:25:83:3f:
77:9a:b6:df:9d:65:81:33:ae:3c:4b:e5:fa:28:4a:
53:14:dd:8c:59:27:4b:e5:78:b9:b4:fd:a9:36:95:
74:15:d0:f0:70:cb:9e:ca:98:cf:a9:b7:5c:e2:01:
6a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7B:EF:E5:89:0B:7D:5A:B7:C0:AF:07:12:87:FB:B4:31:F8:BD:D0
X509v3 Authority Key Identifier:
keyid:D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:33:7d:e8:95:a6:a9:d5:a0:20:69:c2:75:5c:4c:29:d6:a4:
59:dc:de:2f:00:73:f4:e0:a2:8f:c9:d6:cf:9d:11:60:00:66:
be:80:84:de:2d:a5:73:fd:6a:13:25:f3:d0:00:1b:ae:70:ac:
38:26:98:a6:06:a5:22:37:06:76:c8:0f:78:32:50:82:2c:8c:
8d:01:9f:d5:d1:f7:0d:ff:2e:9b:c9:b6:33:bc:a2:84:e2:b6:
99:24:e1:c8:ab:93:37:6c:6d:b4:19:58:d4:98:32:2b:cf:5f:
48:2a:22:c2:40:09:8f:18:2a:fa:82:2f:90:46:9f:12:ad:74:
21:32:c0:0d:be:d8:53:06:54:f3:35:2f:01:92:e3:53:71:00:
12:d6:e1:00:d1:57:ae:e6:ce:17:2b:34:cb:48:d7:71:91:eb:
3c:7b:09:0c:0a:d5:6f:3f:9d:56:7a:82:66:11:4a:7b:21:2a:
7c:20:5b:e1:80:01:f5:ee:e1:f5:80:c0:cf:b7:b9:b0:e8:a2:
e2:b3:24:e4:a3:48:82:e3:9b:be:02:30:84:da:19:4c:ea:a3:
02:34:0d:c8:92:10:8c:a4:5d:33:83:e5:bf:17:f4:0f:9a:88:
e9:49:52:52:a4:2a:7f:dd:80:16:33:c2:64:9c:67:34:00:3d:
1e:b1:5b:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT4/bNYz9mpqsdv83f1sXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNzZjNDFhMjE3NjI1NGYyMzZkMjNkMzkxZmQ1NjA5MDYx
OTY3MGQwHhcNMjUxMTA1MTIwMDQwWhcNMjUxMTA2MTIwMDQwWjAzMTEwLwYDVQQD
EygxNzdiZWZlNTg5MGI3ZDVhYjdjMGFmMDcxMjg3ZmJiNDMxZjhiZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvesXkmrWlxmZ0rhKUQg8WnEugVIR
F5YSZw5ETNNOlAuSxjYsp772Zo3R0kb/RKl6qtCSij6JZyIdy6TZxV44ifPZ+a1o
6Z1itP5RgtV7cphreTQYk3i7qSo5HWsKPtYfyxZfxmwsK4rxKJX8P/0I6bPiKQRn
ZNIKISSEWZlefY269odZ2IVXIlSfL1NFeoinoTV+FyhORRGH6jmE/2ytjR35wk4i
9JveE711BN3IbdEIA0AVuZbaVk0wMFIfJovZktAVKnVy/4uXcfkUV1Ulgz93mrbf
nWWBM648S+X6KEpTFN2MWSdL5Xi5tP2pNpV0FdDwcMueypjPqbdc4gFq6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBd77+WJC31at8CvBxKH+7Qx+L3QMB8GA1UdIwQY
MBaAFNJ2xBohdiVPI20j05H9VgkGGWcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81M2MzZTItZDMzNS00YTgyLWE3OTAt
MGQ2YmNkMDE0OGJmLzEvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81M2MzZTItZDMzNS00YTgyLWE3OTAtMGQ2YmNkMDE0OGJm
LzEvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjN96JWm
qdWgIGnCdVxMKdakWdzeLwBz9OCij8nWz50RYABmvoCE3i2lc/1qEyXz0AAbrnCs
OCaYpgalIjcGdsgPeDJQgiyMjQGf1dH3Df8um8m2M7yihOK2mSThyKuTN2xttBlY
1JgyK89fSCoiwkAJjxgq+oIvkEafEq10ITLADb7YUwZU8zUvAZLjU3EAEtbhANFX
rubOFys0y0jXcZHrPHsJDArVbz+dVnqCZhFKeyEqfCBb4YAB9e7h9YDAz7e5sOii
4rMk5KNIguObvgIwhNoZTOqjAjQNyJIQjKRdM4Plvxf0D5qI6UlSUqQqf92AFjPC
ZJxnNAA9HrFbzw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:06:39 2025 by rpki-client