Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier: VgUFIXmQaNPNOIS7BxMtPR1SvG0D37uPuNbxFU9oEaw=
Subject key identifier: E9:CD:4A:A0:D6:F3:3B:44:58:F2:57:7F:5C:CE:A4:24:D0:A2:72:D3
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer: /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial: 019A4EF4C85541673AA1C9C21D76CEA081F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:00:56 +0000
Manifest this update: Tue 04 Nov 2025 13:00:56 +0000
Manifest next update: Wed 05 Nov 2025 13:00:56 +0000
Files and hashes: 1: 2x8hugS4Ui9KaT-LaqdbUf0gqfo.roa (hash: gyN6UkhIgLwcwZrGZA7Bh/uxosleTdxZNErSNAXGOno=)
2: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: CLIQDHFSk4fbm/c7MqG/OIMvT8C2+lS6+lBdVLRhF2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c8:55:41:67:3a:a1:c9:c2:1d:76:ce:a0:81:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Validity
Not Before: Nov 4 13:00:56 2025 GMT
Not After : Nov 5 13:00:56 2025 GMT
Subject: CN=e9cd4aa0d6f33b4458f2577f5ccea424d0a272d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:ee:33:3b:94:64:61:38:ea:8c:43:6d:fb:
9a:f4:54:3c:00:3d:d5:bd:1e:67:f3:3b:98:58:de:
1f:b9:ec:6d:4c:b2:3e:b5:d2:7a:7d:8c:d2:f5:f7:
03:e9:3a:09:61:07:fa:85:ef:10:cb:3d:02:91:8d:
ca:f0:25:85:5e:5f:7a:ed:f7:65:b4:f0:45:e9:2e:
d9:7b:6f:0e:b8:b0:14:06:91:20:93:97:cd:39:7e:
5e:0b:6d:f4:e1:06:be:14:43:76:85:a7:48:b7:4b:
dc:27:8c:5b:8b:38:e5:71:7e:dc:ce:14:a2:4d:73:
8f:41:28:14:d7:7b:0e:b5:0b:9c:c6:70:25:99:7a:
ff:3b:f4:96:6b:61:d5:34:36:45:cc:97:2e:bd:02:
9a:78:b2:c0:6f:e4:a4:9f:9f:a2:ba:fe:e2:d8:18:
0a:2d:84:2b:7d:d9:9e:e8:17:fe:a8:52:dd:28:18:
bd:77:8f:62:e0:45:d0:02:8b:5d:d1:aa:d7:7d:6d:
94:af:85:32:3e:70:c3:be:c9:76:da:85:ed:a5:91:
e7:23:f1:cf:0c:23:89:c2:0c:64:31:e0:e3:12:cd:
89:ce:ee:d7:3c:7c:46:60:d0:9e:41:34:2d:7b:49:
65:93:4e:91:eb:ec:3b:6a:f0:a5:1a:bd:b6:11:a6:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CD:4A:A0:D6:F3:3B:44:58:F2:57:7F:5C:CE:A4:24:D0:A2:72:D3
X509v3 Authority Key Identifier:
keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:d8:6b:5b:d5:ad:48:0c:ed:d8:d5:00:fa:f9:cd:95:aa:c3:
f4:15:57:d0:63:ab:2c:11:05:95:e3:63:e9:bb:45:6b:cc:86:
26:d7:3e:c6:00:3d:2d:e7:de:c4:e5:40:82:f3:dd:72:bb:f4:
eb:44:1a:90:e8:b0:bb:33:89:98:a5:3b:d1:51:03:62:dc:0c:
95:ad:4d:e1:66:29:0d:95:77:e6:22:f9:d5:52:b6:13:c1:4f:
24:9b:82:b3:c5:eb:a5:42:51:27:25:32:2b:15:1a:ba:c4:ed:
15:79:1b:82:93:a8:06:51:0f:3b:2f:0b:21:5d:e5:1d:cd:5c:
44:1f:d8:cd:0a:a8:5c:ae:07:bb:3f:23:15:ee:7c:e1:36:3f:
6c:34:b5:8a:a3:f3:bd:69:a0:b8:56:f5:b8:91:08:52:02:32:
85:80:fb:f5:6c:99:37:5c:59:d4:9f:85:f9:7e:96:eb:28:7f:
9a:c1:9a:91:4f:28:42:d8:61:4e:3b:a9:9e:b5:f3:da:9e:ce:
23:26:6c:75:39:1c:e5:c0:61:a8:86:24:d0:26:5a:00:79:90:
4c:f1:51:c4:a0:d5:e4:05:32:88:c1:15:5d:2d:07:22:bc:83:
dc:e4:0d:7e:87:98:bf:cc:03:7c:09:98:f0:a7:6d:a7:55:6e:
c1:5b:e3:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9MhVQWc6ocnCHXbOoIH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzM1ZDRmMmYyZDI0N2VhMDhjNGEwMTE3ZDMyOGU0ZThl
ZGYxNTIwHhcNMjUxMTA0MTMwMDU2WhcNMjUxMTA1MTMwMDU2WjAzMTEwLwYDVQQD
EyhlOWNkNGFhMGQ2ZjMzYjQ0NThmMjU3N2Y1Y2NlYTQyNGQwYTI3MmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNjuMzuUZGE46oxDbfua9FQ8AD3V
vR5n8zuYWN4fuextTLI+tdJ6fYzS9fcD6ToJYQf6he8Qyz0CkY3K8CWFXl967fdl
tPBF6S7Ze28OuLAUBpEgk5fNOX5eC2304Qa+FEN2hadIt0vcJ4xbizjlcX7czhSi
TXOPQSgU13sOtQucxnAlmXr/O/SWa2HVNDZFzJcuvQKaeLLAb+Skn5+iuv7i2BgK
LYQrfdme6Bf+qFLdKBi9d49i4EXQAotd0arXfW2Ur4UyPnDDvsl22oXtpZHnI/HP
DCOJwgxkMeDjEs2Jzu7XPHxGYNCeQTQte0llk06R6+w7avClGr22EaZvDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnNSqDW8ztEWPJXf1zOpCTQonLTMB8GA1UdIwQY
MBaAFP7DXU8vLSR+oIxKARfTKOTo7fFSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NOZFR5OHRKSDZnakVvQkY5TW81T2p0OFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9kMDAzYWUtMzVhNi00NGYyLWFhZDgt
ZjhiMTJmOTgyZmUyLzEvX3NOZFR5OHRKSDZnakVvQkY5TW81T2p0OFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9kMDAzYWUtMzVhNi00NGYyLWFhZDgtZjhiMTJmOTgyZmUy
LzEvX3NOZFR5OHRKSDZnakVvQkY5TW81T2p0OFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxthrW9Wt
SAzt2NUA+vnNlarD9BVX0GOrLBEFleNj6btFa8yGJtc+xgA9LefexOVAgvPdcrv0
60QakOiwuzOJmKU70VEDYtwMla1N4WYpDZV35iL51VK2E8FPJJuCs8XrpUJRJyUy
KxUausTtFXkbgpOoBlEPOy8LIV3lHc1cRB/YzQqoXK4Huz8jFe584TY/bDS1iqPz
vWmguFb1uJEIUgIyhYD79WyZN1xZ1J+F+X6W6yh/msGakU8oQthhTjupnrXz2p7O
IyZsdTkc5cBhqIYk0CZaAHmQTPFRxKDV5AUyiMEVXS0HIryD3OQNfoeYv8wDfAmY
8Kdtp1VuwVvjSQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:12 2025 by rpki-client