Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
File: RJsY4ylteV06nJWb4lxwqqs2UgA.mft (raw, json)
Hash identifier: 1YlZoRsoM+l2G7hJ3V9eBpDINduNefeOSU6uGso4pic=
Subject key identifier: 5E:78:30:D8:77:87:3A:62:31:DE:20:2B:47:76:02:A7:B2:BD:02:F2
Authority key identifier: 44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00
Certificate issuer: /CN=449b18e3296d795d3a9c959be25c70aaab365200
Certificate serial: 019A4E4F42A3965C044B93DC16631BF191A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 10:00:08 +0000
Manifest this update: Tue 04 Nov 2025 10:00:08 +0000
Manifest next update: Wed 05 Nov 2025 10:00:08 +0000
Files and hashes: 1: J8QjZax-mkvPxfZhhHMPCwubpys.roa (hash: rmal6rcTiDBRBlMMyLquXrrXQpuz0JgUekU0ozpEKqs=)
2: RJsY4ylteV06nJWb4lxwqqs2UgA.crl (hash: f83DiA/Y/YJ6HegeB7xWkKnq25Qo9tIohafldml82Jw=)
3: SoB8_0B4GOtYomyJQxt0uZ0Oeww.roa (hash: OQVaFQPCwhrwCF+WYF+druX/sOmGI/9eo2Z2LvF9GLs=)
4: leAAH4rGishsnZoufTD0XzRz9UE.roa (hash: XYLINiTCGoUfisGhej9/jS2otE2Loul2nvXuv/CwfdM=)
5: x0AcTRasjy0qWZOIGUnT1Kbz4uk.roa (hash: zaM3VnNG9RVFofm3T8ZoNUTLDhK3X/kEUyA6UhvyMf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:42:a3:96:5c:04:4b:93:dc:16:63:1b:f1:91:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449b18e3296d795d3a9c959be25c70aaab365200
Validity
Not Before: Nov 4 10:00:08 2025 GMT
Not After : Nov 5 10:00:08 2025 GMT
Subject: CN=5e7830d877873a6231de202b477602a7b2bd02f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3c:c6:83:2b:d9:ee:94:56:74:7c:a5:bd:aa:
3a:df:a2:47:63:5c:d1:9d:f0:65:39:14:a9:59:78:
02:30:f7:4c:be:55:a7:38:37:63:b1:88:9e:f2:34:
4f:a4:ae:5c:75:d9:9b:6d:70:11:53:17:29:5c:b2:
5f:c2:08:d1:57:39:4d:1c:9f:55:9b:e2:8a:e5:10:
3b:17:de:ca:1b:4d:66:21:6f:37:ab:e5:bd:ad:7f:
1b:32:c4:39:ef:34:b5:f7:f4:aa:5b:f8:8e:b2:b2:
dd:d4:8c:f6:68:98:50:40:17:21:46:2b:a5:57:6a:
ae:13:38:27:2a:9e:70:c6:b7:e6:78:3c:77:78:f1:
f7:d3:17:2c:43:55:8d:29:6a:aa:b0:9d:45:4e:b2:
0f:aa:4b:04:1d:34:10:a5:25:cb:01:26:0c:d1:38:
92:7e:4a:20:73:ad:d6:90:d4:a1:f7:a2:3d:5b:99:
c9:5e:5b:67:8c:fa:29:1e:31:cd:f5:f2:70:64:4c:
f2:ba:c2:dc:4d:cc:95:ea:e8:39:78:c7:ca:5a:75:
7e:18:69:cb:ae:e1:c3:ca:7b:de:b6:5f:3b:f0:65:
6d:05:26:2f:c5:e9:f1:00:f0:60:86:a9:45:c6:cd:
a5:bb:21:94:cb:17:5b:dd:35:65:b5:65:7f:a4:34:
49:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:78:30:D8:77:87:3A:62:31:DE:20:2B:47:76:02:A7:B2:BD:02:F2
X509v3 Authority Key Identifier:
keyid:44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e5:d0:3a:32:e9:f0:36:d8:f1:96:71:ef:0e:5f:9c:e5:a9:
06:a8:dd:b8:07:42:30:88:b4:5c:64:e4:0b:bd:94:96:74:d6:
d1:ed:58:91:d8:9c:15:38:78:33:fd:3d:c0:b0:82:dd:25:7c:
fc:9a:a1:db:d6:04:80:df:58:d1:7d:23:f4:f8:1e:c2:38:dd:
0e:e4:3f:c4:03:e0:f2:3d:57:e0:f9:e6:7a:8e:6d:3a:fc:2d:
7d:15:46:77:d5:e9:40:15:60:70:d0:18:0d:6a:a6:d9:95:04:
49:87:01:19:10:f3:d1:0f:5b:1c:70:b8:df:30:ef:a3:c9:ab:
c3:40:53:4f:0b:63:e0:7a:e3:6e:a2:d1:bb:b0:1f:a2:e3:21:
94:d9:e9:9d:a6:30:a9:30:7e:68:77:48:fa:d2:66:83:74:87:
93:01:5d:20:63:7e:99:8c:9a:93:39:4a:a2:16:76:77:df:2c:
9a:0b:01:2e:d0:6e:d6:ec:59:bf:cf:a3:4c:87:9d:f5:1e:6d:
11:04:64:2b:7d:c3:ac:48:0c:5c:e9:41:5d:25:3e:b1:82:af:
72:37:10:ba:f2:58:2d:e3:9f:5b:c3:4c:f3:f4:54:bc:9e:25:
25:17:34:64:61:66:68:de:50:1d:1f:48:d2:41:bc:1c:9f:b4:
42:ea:de:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT0KjllwES5PcFmMb8ZGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0OWIxOGUzMjk2ZDc5NWQzYTljOTU5YmUyNWM3MGFhYWIz
NjUyMDAwHhcNMjUxMTA0MTAwMDA4WhcNMjUxMTA1MTAwMDA4WjAzMTEwLwYDVQQD
Eyg1ZTc4MzBkODc3ODczYTYyMzFkZTIwMmI0Nzc2MDJhN2IyYmQwMmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTzGgyvZ7pRWdHylvao636JHY1zR
nfBlORSpWXgCMPdMvlWnODdjsYie8jRPpK5cddmbbXARUxcpXLJfwgjRVzlNHJ9V
m+KK5RA7F97KG01mIW83q+W9rX8bMsQ57zS19/SqW/iOsrLd1Iz2aJhQQBchRiul
V2quEzgnKp5wxrfmeDx3ePH30xcsQ1WNKWqqsJ1FTrIPqksEHTQQpSXLASYM0TiS
fkogc63WkNSh96I9W5nJXltnjPopHjHN9fJwZEzyusLcTcyV6ug5eMfKWnV+GGnL
ruHDynvetl878GVtBSYvxenxAPBghqlFxs2luyGUyxdb3TVltWV/pDRJ6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF54MNh3hzpiMd4gK0d2AqeyvQLyMB8GA1UdIwQY
MBaAFESbGOMpbXldOpyVm+JccKqrNlIAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkpzWTR5bHRlVjA2bkpXYjRseHdxcXMyVWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mYjM5ZWQtN2M3My00NDc4LTkwMWQt
NjVhODk5YTYwMzY2LzEvUkpzWTR5bHRlVjA2bkpXYjRseHdxcXMyVWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9mYjM5ZWQtN2M3My00NDc4LTkwMWQtNjVhODk5YTYwMzY2
LzEvUkpzWTR5bHRlVjA2bkpXYjRseHdxcXMyVWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+XQOjLp
8DbY8ZZx7w5fnOWpBqjduAdCMIi0XGTkC72UlnTW0e1YkdicFTh4M/09wLCC3SV8
/Jqh29YEgN9Y0X0j9PgewjjdDuQ/xAPg8j1X4Pnmeo5tOvwtfRVGd9XpQBVgcNAY
DWqm2ZUESYcBGRDz0Q9bHHC43zDvo8mrw0BTTwtj4HrjbqLRu7AfouMhlNnpnaYw
qTB+aHdI+tJmg3SHkwFdIGN+mYyakzlKohZ2d98smgsBLtBu1uxZv8+jTIed9R5t
EQRkK33DrEgMXOlBXSU+sYKvcjcQuvJYLeOfW8NM8/RUvJ4lJRc0ZGFmaN5QHR9I
0kG8HJ+0QureGg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:45 2025 by rpki-client