Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
File: CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json)
Hash identifier: Ssyjivnl9jg/EPzlTDkDbpEQgqB8Rz95R+VWr598eGw=
Subject key identifier: 89:05:F2:E4:E1:06:BA:F6:08:E7:9F:5C:70:50:79:09:3F:0C:10:F6
Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Certificate serial: 019A4D3D3C8C5F04E7C9E56CB02D9BC6D547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
Manifest number: 1170
Signing time: Tue 04 Nov 2025 05:00:50 +0000
Manifest this update: Tue 04 Nov 2025 05:00:50 +0000
Manifest next update: Wed 05 Nov 2025 05:00:50 +0000
Files and hashes: 1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: 9P+w2Pr+ghKqzuTEdhFWPmeG6SbXIsLWftHn5nFACmA=)
2: aZ04YotwMN5NF6QJ2ZcHvh79g-w.roa (hash: dZyQQffGI8dAk3Ily2WBsTj4NOYJ+9MtNaWUE01PNh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:3c:8c:5f:04:e7:c9:e5:6c:b0:2d:9b:c6:d5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Validity
Not Before: Nov 4 05:00:50 2025 GMT
Not After : Nov 5 05:00:50 2025 GMT
Subject: CN=8905f2e4e106baf608e79f5c705079093f0c10f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:64:f3:e4:75:72:b9:98:0f:8f:18:96:b1:
ae:e4:d4:00:39:fe:12:3d:31:f9:a0:f0:c2:dd:bf:
b2:d5:e5:7b:55:9c:fc:d3:d3:6d:eb:b5:e8:7e:c4:
6a:d6:e8:a4:dc:0a:39:e3:01:88:ae:61:7e:83:74:
d9:53:0f:3f:37:72:da:a2:a3:72:aa:f5:a9:2d:f0:
53:c2:22:94:ce:c5:42:6e:f7:fc:db:e4:42:1d:47:
aa:78:34:67:3f:bd:d5:e2:bf:f9:4a:14:e6:b3:76:
ae:bc:4b:9e:4d:25:71:6f:53:a3:9c:df:ab:3f:03:
d4:17:8f:af:2a:80:a0:a3:5f:30:94:13:d6:67:87:
c7:15:df:40:e8:5d:de:46:ce:6e:90:1d:04:19:78:
25:56:ea:ba:43:e4:4b:22:86:0e:a3:67:fe:72:22:
c8:a4:f2:88:7b:a3:7e:6d:c2:57:03:3a:00:78:a3:
67:26:03:c4:be:7b:73:d8:45:8e:fc:d9:22:75:06:
6c:f5:81:b0:b1:8b:19:fd:45:38:6e:26:0f:00:b7:
48:25:25:76:a8:3b:8b:ae:cf:8f:22:c3:7e:49:90:
61:14:9f:7b:e4:f5:96:73:1c:ae:cf:d3:58:13:6c:
1c:24:ae:1e:76:56:a8:75:bb:dc:cb:70:4f:eb:e5:
35:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:05:F2:E4:E1:06:BA:F6:08:E7:9F:5C:70:50:79:09:3F:0C:10:F6
X509v3 Authority Key Identifier:
keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b0:7a:c4:a2:b7:90:5d:fd:04:13:44:30:b0:14:e7:4e:c2:
06:34:54:99:3f:20:51:29:86:c4:37:56:e4:43:fd:33:48:d4:
49:ec:fc:49:fd:fc:72:c3:ab:9a:4e:5d:a7:2b:23:ef:0e:bd:
4a:20:6c:ec:e6:71:b1:cc:8c:c7:10:0c:e9:b1:ae:b1:cc:4f:
48:68:20:41:5f:d1:f7:82:4f:22:41:d9:ca:96:5f:2c:17:f2:
b1:91:3b:0d:67:99:fb:b7:72:e6:6d:ef:c6:21:03:2d:81:72:
6a:7a:3f:53:a7:e2:b7:52:64:03:88:25:31:b0:16:35:20:d3:
d2:30:33:70:f0:29:b4:29:d6:87:c8:cc:7f:b7:66:59:b2:e1:
8f:3f:a3:99:b6:59:36:09:fc:4d:1f:98:74:94:59:d2:95:c3:
76:7c:11:9d:c1:e9:85:8d:88:18:07:76:9f:dc:12:da:7f:06:
55:f4:6e:29:bc:ae:ab:94:c8:d6:5c:4a:46:c0:27:48:fa:76:
e6:c2:5b:b3:af:3e:25:e3:2e:22:1d:83:b6:6b:6f:47:90:55:
58:6d:76:2a:b0:04:0c:85:b6:eb:22:0f:09:7d:d0:8b:8d:1e:
5a:42:e3:5f:21:16:31:5e:e8:d8:f1:64:5f:93:05:ce:55:0e:
6d:24:90:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPTyMXwTnyeVssC2bxtVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTg2OGVlODRjNWYyN2Q5MTY5ZDI0M2MzMzdiNzRiNmZm
OGMxNGQwHhcNMjUxMTA0MDUwMDUwWhcNMjUxMTA1MDUwMDUwWjAzMTEwLwYDVQQD
Eyg4OTA1ZjJlNGUxMDZiYWY2MDhlNzlmNWM3MDUwNzkwOTNmMGMxMGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog9k8+R1crmYD48YlrGu5NQAOf4S
PTH5oPDC3b+y1eV7VZz809Nt67XofsRq1uik3Ao54wGIrmF+g3TZUw8/N3LaoqNy
qvWpLfBTwiKUzsVCbvf82+RCHUeqeDRnP73V4r/5ShTms3auvEueTSVxb1OjnN+r
PwPUF4+vKoCgo18wlBPWZ4fHFd9A6F3eRs5ukB0EGXglVuq6Q+RLIoYOo2f+ciLI
pPKIe6N+bcJXAzoAeKNnJgPEvntz2EWO/NkidQZs9YGwsYsZ/UU4biYPALdIJSV2
qDuLrs+PIsN+SZBhFJ975PWWcxyuz9NYE2wcJK4edlaodbvcy3BP6+U1DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkF8uThBrr2COefXHBQeQk/DBD2MB8GA1UdIwQY
MBaAFAgYaO6ExfJ9kWnSQ8M3t0tv+MFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMt
YTMwZjUzN2Q5YzViLzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMtYTMwZjUzN2Q5YzVi
LzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7B6xKK3
kF39BBNEMLAU507CBjRUmT8gUSmGxDdW5EP9M0jUSez8Sf38csOrmk5dpysj7w69
SiBs7OZxscyMxxAM6bGuscxPSGggQV/R94JPIkHZypZfLBfysZE7DWeZ+7dy5m3v
xiEDLYFyano/U6fit1JkA4glMbAWNSDT0jAzcPAptCnWh8jMf7dmWbLhjz+jmbZZ
Ngn8TR+YdJRZ0pXDdnwRncHphY2IGAd2n9wS2n8GVfRuKbyuq5TI1lxKRsAnSPp2
5sJbs68+JeMuIh2DtmtvR5BVWG12KrAEDIW26yIPCX3Qi40eWkLjXyEWMV7o2PFk
X5MFzlUObSSQMw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:15 2025 by rpki-client