Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
File: rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json)
Hash identifier: UlTBqfxcxt++78YY1fcYrj8AjJDARWcoANHy7E4YJxw=
Subject key identifier: C3:4D:4C:F6:A3:BD:13:49:42:53:D6:86:7E:6C:7B:77:45:AA:29:5B
Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Certificate issuer: /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Certificate serial: 019A530805683E177F276C44885ED481615E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 08:00:25 +0000
Manifest this update: Wed 05 Nov 2025 08:00:25 +0000
Manifest next update: Thu 06 Nov 2025 08:00:25 +0000
Files and hashes: 1: DTYyZuafFj4qXWfudssAoo7YyUc.roa (hash: XFaAmLI0e2ldAKL+t4MvCZW7ieWrsLzA21ljUa5d0Uc=)
2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: A4kaWu+1BXQCaZGu66EtGB1M2Z8BrNr/bjhhQgY/ugM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:05:68:3e:17:7f:27:6c:44:88:5e:d4:81:61:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Validity
Not Before: Nov 5 08:00:25 2025 GMT
Not After : Nov 6 08:00:25 2025 GMT
Subject: CN=c34d4cf6a3bd13494253d6867e6c7b7745aa295b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:32:73:f8:19:08:bb:52:d6:98:2a:4e:ef:
eb:26:e7:7f:84:1f:7b:21:66:cc:c7:09:2c:e4:38:
e4:3d:ce:19:cb:6f:10:e2:5b:01:dd:de:92:0e:13:
c1:39:f5:1d:ee:6e:72:99:a1:93:c6:ba:87:ab:c6:
dd:42:74:90:3a:3c:20:84:e5:47:b5:67:ec:da:19:
7a:2b:73:94:35:1f:39:89:95:87:75:d6:67:98:7b:
43:d4:c6:95:fa:a7:6f:ad:69:b1:62:6c:4c:85:00:
95:b7:5b:53:6b:ca:bf:d6:87:09:e6:44:02:9e:fa:
f7:41:5a:15:ad:67:11:8e:c6:86:fd:b9:c7:27:c2:
19:fd:de:97:f1:76:8e:3f:c9:65:bb:48:f0:3d:d0:
83:df:3a:09:14:5c:6f:b8:76:a4:d0:50:74:c1:aa:
42:30:49:33:8f:ad:f4:3a:87:c6:e5:f3:bd:09:d6:
77:78:af:93:45:51:c1:f8:26:87:fe:90:4a:91:f9:
08:1f:e4:11:75:6e:99:65:0f:8e:ac:63:d7:b2:2d:
4b:fa:be:ac:a4:ec:b6:2a:18:55:c2:8b:d4:91:35:
42:38:6b:1d:68:75:04:8b:a2:72:cf:92:d5:6f:f6:
16:d8:aa:a2:e8:a3:ce:16:49:27:c9:a0:20:2f:0d:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4D:4C:F6:A3:BD:13:49:42:53:D6:86:7E:6C:7B:77:45:AA:29:5B
X509v3 Authority Key Identifier:
keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a0:8b:b7:4e:08:87:6b:a6:cf:e4:53:d5:80:49:d8:e3:4d:
20:01:cb:34:fb:98:aa:84:0e:24:01:a2:cb:5e:b5:a4:87:ab:
4a:5f:b5:bc:8b:5c:ea:94:a6:9f:e4:9d:4b:16:57:77:cf:21:
6c:1f:8f:b6:9c:98:a8:11:31:e7:f3:7e:fc:51:d7:32:7e:07:
d1:8f:ba:47:3a:43:cb:a2:0a:f2:09:c9:48:bb:8d:95:10:1f:
7d:5e:3b:cd:57:95:b5:8a:1b:d7:44:74:11:37:b7:8c:b3:1f:
3d:21:af:cc:f7:60:a5:0a:12:63:b7:03:75:f8:22:c7:e9:ab:
eb:c7:be:dc:80:a4:65:55:fa:3e:1f:10:91:16:a0:b3:e3:7c:
8d:31:c8:6e:cc:c9:8c:8b:73:c0:96:93:d8:89:62:6c:c9:cd:
c9:f5:9a:23:6f:91:83:d6:34:1c:23:42:54:73:25:f5:dc:4a:
e2:4e:e1:5d:e4:d5:3d:e7:ed:88:64:3e:d3:8b:83:eb:1e:e1:
74:2d:9d:3f:17:35:05:e3:93:e7:71:a1:96:cc:34:3b:68:07:
c7:d3:54:e8:79:c4:b8:85:bf:f0:d7:89:f2:e9:65:45:36:96:
fb:8d:24:34:56:fa:e1:f8:4c:fd:c3:0f:5b:36:0e:0e:c3:07:
45:36:34:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTCAVoPhd/J2xEiF7UgWFeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNmNjODYwMzM1M2Q3MzJlNGIxY2NiYTdlYWNhMGI2Y2Vl
NGM0Y2YwHhcNMjUxMTA1MDgwMDI1WhcNMjUxMTA2MDgwMDI1WjAzMTEwLwYDVQQD
EyhjMzRkNGNmNmEzYmQxMzQ5NDI1M2Q2ODY3ZTZjN2I3NzQ1YWEyOTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrcyc/gZCLtS1pgqTu/rJud/hB97
IWbMxwks5DjkPc4Zy28Q4lsB3d6SDhPBOfUd7m5ymaGTxrqHq8bdQnSQOjwghOVH
tWfs2hl6K3OUNR85iZWHddZnmHtD1MaV+qdvrWmxYmxMhQCVt1tTa8q/1ocJ5kQC
nvr3QVoVrWcRjsaG/bnHJ8IZ/d6X8XaOP8llu0jwPdCD3zoJFFxvuHak0FB0wapC
MEkzj630OofG5fO9CdZ3eK+TRVHB+CaH/pBKkfkIH+QRdW6ZZQ+OrGPXsi1L+r6s
pOy2KhhVwovUkTVCOGsdaHUEi6Jyz5LVb/YW2Kqi6KPOFkknyaAgLw1EtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNNTPajvRNJQlPWhn5se3dFqilbMB8GA1UdIwQY
MBaAFKxsyGAzU9cy5LHMun6soLbO5MTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckd6SVlETlQxekxrc2N5NmZxeWd0czdreE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iMzQ2NDItYzdlYy00ZDQ3LTlkNmYt
MjcxYTE1NWVlYjkyLzEvckd6SVlETlQxekxrc2N5NmZxeWd0czdreE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iMzQ2NDItYzdlYy00ZDQ3LTlkNmYtMjcxYTE1NWVlYjky
LzEvckd6SVlETlQxekxrc2N5NmZxeWd0czdreE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaCLt04I
h2umz+RT1YBJ2ONNIAHLNPuYqoQOJAGiy161pIerSl+1vItc6pSmn+SdSxZXd88h
bB+PtpyYqBEx5/N+/FHXMn4H0Y+6RzpDy6IK8gnJSLuNlRAffV47zVeVtYob10R0
ETe3jLMfPSGvzPdgpQoSY7cDdfgix+mr68e+3ICkZVX6Ph8QkRags+N8jTHIbszJ
jItzwJaT2IlibMnNyfWaI2+Rg9Y0HCNCVHMl9dxK4k7hXeTVPeftiGQ+04uD6x7h
dC2dPxc1BeOT53Ghlsw0O2gHx9NU6HnEuIW/8NeJ8ullRTaW+40kNFb64fhM/cMP
WzYODsMHRTY0XQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:53:10 2025 by rpki-client