Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: 34vx109EX2w8jnxUlM6vP2jh2WsInI9kkNsVRUD1KnI=
Subject key identifier: 1C:34:F3:1F:A7:54:B3:94:C1:1E:6C:40:0D:C7:3A:37:71:05:5D:4F
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 019A4EF5D1974C0BBC2B02D29866BCF5E18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:02:04 +0000
Manifest this update: Tue 04 Nov 2025 13:02:04 +0000
Manifest next update: Wed 05 Nov 2025 13:02:04 +0000
Files and hashes: 1: 5giw-glAqkb4ga3tho0-9kOiFpQ.roa (hash: wPSRGEewfNLQ9tlgNj7BpPtVBQPthONm5g14lvlKftQ=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: ZrRFcR5/9es1OskVbRS09qY9qfiZ8G8bDbWE5zyJwtk=)
3: lO9ygzFEh6vlzFwa5Ivf2tcAutc.roa (hash: 0P+81vJocBAhACHTKyLTeE5L1N5kiVqd+TGA07c8eWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d1:97:4c:0b:bc:2b:02:d2:98:66:bc:f5:e1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Nov 4 13:02:04 2025 GMT
Not After : Nov 5 13:02:04 2025 GMT
Subject: CN=1c34f31fa754b394c11e6c400dc73a3771055d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:32:1b:c4:b2:49:1a:03:bc:43:18:17:04:5b:
dc:30:60:06:24:3e:73:02:b6:dc:8e:c1:99:86:12:
62:81:d5:8f:09:72:99:d8:47:8d:e9:3e:da:98:78:
08:6a:28:4c:a4:a5:46:d0:dd:cc:e4:c2:c5:aa:d9:
8b:69:d6:69:dd:67:d2:d7:fe:9b:17:52:88:2b:fd:
bf:ce:47:1f:35:46:ec:d3:73:83:01:81:59:db:fe:
11:36:64:31:75:ee:2d:8d:8b:98:e1:95:66:30:64:
6d:96:b9:86:bf:aa:5b:40:70:27:11:77:51:09:d9:
67:ab:cb:24:ff:53:15:dc:e6:6e:42:a6:ed:bd:e1:
31:1e:e7:98:9d:df:dc:ad:cf:7d:69:de:4e:86:1f:
4b:a0:5d:ab:1e:1a:9a:34:54:fd:a8:6f:01:60:31:
a1:ac:44:30:f0:87:2c:5c:db:9a:d9:0c:8c:6b:e9:
49:e4:42:20:5e:f2:7f:da:30:18:cb:ee:16:46:21:
66:be:7a:10:43:ab:a7:8f:d0:7d:13:8c:03:b0:1c:
84:ed:e5:f6:d9:79:bb:59:03:d6:67:a8:00:7b:74:
29:ef:83:2c:c4:ea:fe:d8:2f:1c:2e:9c:44:80:ef:
66:26:17:c6:00:7f:a8:81:83:9a:98:30:b4:26:e9:
9a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:34:F3:1F:A7:54:B3:94:C1:1E:6C:40:0D:C7:3A:37:71:05:5D:4F
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ad:b5:d9:a7:ee:c0:53:17:c8:b5:3d:a0:09:97:a7:18:64:
bc:57:bd:2b:86:0d:17:fe:e3:69:df:8e:9c:52:cb:d1:51:ee:
76:e6:3b:ae:53:d7:a2:65:46:3a:15:aa:77:0c:c1:fa:26:01:
6b:ec:07:b4:19:5b:9d:1a:df:8f:22:58:9a:16:11:15:7a:94:
7f:67:5e:e3:3b:ec:70:32:52:f5:b8:53:6a:64:52:67:ab:96:
68:1f:b9:20:a2:37:39:31:9a:52:a8:55:55:28:99:b5:f9:c6:
d9:4c:a4:f6:21:61:68:88:d4:d8:65:8e:dd:85:af:b3:10:cb:
c9:a0:24:f6:58:2c:d0:66:dd:9b:89:2d:4f:61:c3:c2:b0:59:
34:d8:56:97:40:d9:c5:bb:77:0a:19:b8:ac:84:a8:f6:a7:3b:
93:f5:7b:cf:ca:28:b8:46:2a:55:96:33:62:97:8b:3a:f7:8a:
38:08:95:d9:aa:08:28:35:eb:99:7c:6c:41:ef:a0:26:3b:08:
8e:ca:a0:f5:f7:75:de:2f:1a:ee:6c:de:82:65:50:bf:46:13:
fc:f9:49:7c:49:cb:73:f8:03:93:5e:e6:17:69:58:a8:ca:36:
b7:4f:2b:3d:07:3e:a8:89:cf:9a:05:86:75:57:5a:cc:23:f6:
37:bd:b6:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9dGXTAu8KwLSmGa89eGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYzlkMDZjNTFhZGQ2ODI5MDYzZjFiNjdiMTc1ZDBjMDAw
MWU3MzYwHhcNMjUxMTA0MTMwMjA0WhcNMjUxMTA1MTMwMjA0WjAzMTEwLwYDVQQD
EygxYzM0ZjMxZmE3NTRiMzk0YzExZTZjNDAwZGM3M2EzNzcxMDU1ZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DIbxLJJGgO8QxgXBFvcMGAGJD5z
ArbcjsGZhhJigdWPCXKZ2EeN6T7amHgIaihMpKVG0N3M5MLFqtmLadZp3WfS1/6b
F1KIK/2/zkcfNUbs03ODAYFZ2/4RNmQxde4tjYuY4ZVmMGRtlrmGv6pbQHAnEXdR
Cdlnq8sk/1MV3OZuQqbtveExHueYnd/crc99ad5Ohh9LoF2rHhqaNFT9qG8BYDGh
rEQw8IcsXNua2QyMa+lJ5EIgXvJ/2jAYy+4WRiFmvnoQQ6unj9B9E4wDsByE7eX2
2Xm7WQPWZ6gAe3Qp74MsxOr+2C8cLpxEgO9mJhfGAH+ogYOamDC0JumaxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBw08x+nVLOUwR5sQA3HOjdxBV1PMB8GA1UdIwQY
MBaAFHDJ0GxRrdaCkGPxtnsXXQwAAec2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yOGRkMzAtZWMwOC00ZGM4LWExZDEt
NWQzYTg2NDk0Nzc1LzEvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8yOGRkMzAtZWMwOC00ZGM4LWExZDEtNWQzYTg2NDk0Nzc1
LzEvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADK212afu
wFMXyLU9oAmXpxhkvFe9K4YNF/7jad+OnFLL0VHuduY7rlPXomVGOhWqdwzB+iYB
a+wHtBlbnRrfjyJYmhYRFXqUf2de4zvscDJS9bhTamRSZ6uWaB+5IKI3OTGaUqhV
VSiZtfnG2Uyk9iFhaIjU2GWO3YWvsxDLyaAk9lgs0Gbdm4ktT2HDwrBZNNhWl0DZ
xbt3Chm4rISo9qc7k/V7z8oouEYqVZYzYpeLOveKOAiV2aoIKDXrmXxsQe+gJjsI
jsqg9fd13i8a7mzegmVQv0YT/PlJfEnLc/gDk17mF2lYqMo2t08rPQc+qInPmgWG
dVdazCP2N722Og==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:21 2025 by rpki-client