Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
File: cHdwf2aXiCaodeuNLrMzvthWlmc.mft (raw, json)
Hash identifier: pgjsQdxBACQnuJLv4XRGJuG5FKll+OEQhcB7mTFFziY=
Subject key identifier: 68:6C:F2:E9:BB:35:7B:BF:41:8B:F8:F3:FB:B3:BA:4E:14:6F:84:EB
Authority key identifier: 70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
Certificate issuer: /CN=7077707f66978826a875eb8d2eb333bed8569667
Certificate serial: 019A4EF5AEE6D5B8F7E03DA94BF0369352E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
Manifest number: 08F3
Signing time: Tue 04 Nov 2025 13:01:55 +0000
Manifest this update: Tue 04 Nov 2025 13:01:55 +0000
Manifest next update: Wed 05 Nov 2025 13:01:55 +0000
Files and hashes: 1: ZBqGiL5Lwt5_4rzPo7SO0cTda9c.roa (hash: KELG75sz8Tw2WawKyeiPVA4v+ezxNcK7f4e9XzFuUUw=)
2: cHdwf2aXiCaodeuNLrMzvthWlmc.crl (hash: F6VH6T/wbM091GSfpIxqpv0H7PpH4TgPbBK/sZE+2fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ae:e6:d5:b8:f7:e0:3d:a9:4b:f0:36:93:52:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7077707f66978826a875eb8d2eb333bed8569667
Validity
Not Before: Nov 4 13:01:55 2025 GMT
Not After : Nov 5 13:01:55 2025 GMT
Subject: CN=686cf2e9bb357bbf418bf8f3fbb3ba4e146f84eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:37:db:af:72:d7:72:c8:90:97:26:a3:1f:
22:1c:c6:84:26:7f:ea:df:d1:fe:e6:3a:ae:1a:77:
e1:96:36:aa:ee:53:24:2d:c8:88:37:26:82:f9:bc:
40:32:e5:04:8a:57:d2:85:c5:19:e7:09:de:97:8c:
33:61:dc:52:65:86:3c:47:b9:70:1f:65:27:87:d0:
b6:0c:7f:50:09:e3:98:94:bb:8c:9e:d4:36:cc:5c:
e4:06:03:0e:4c:0e:93:c4:58:73:9a:d6:ba:fd:41:
63:02:f3:b5:43:64:10:cb:4a:5b:90:85:9a:3b:c0:
7b:50:82:43:86:00:29:8c:ca:41:0b:e8:9d:1b:76:
df:47:e8:0b:33:39:e1:b5:b2:e2:5c:a2:7f:e0:33:
5b:c9:57:8a:db:d4:42:d7:ca:6f:15:b9:c1:c7:f7:
4d:78:cb:e0:5d:23:0a:db:d9:bd:58:bd:e8:58:3c:
29:1c:b5:8c:dd:cc:eb:a5:f1:af:24:07:d9:c0:47:
ef:9f:4f:27:35:65:fa:1d:5f:e3:a4:c9:04:dc:d2:
c9:3a:38:6a:aa:92:98:75:0d:64:5f:bd:30:c0:f4:
b7:bf:3b:24:30:b7:ee:38:a9:76:29:f1:57:f7:82:
47:60:01:85:93:bd:7a:b3:80:c0:cd:5f:27:c4:0b:
c9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6C:F2:E9:BB:35:7B:BF:41:8B:F8:F3:FB:B3:BA:4E:14:6F:84:EB
X509v3 Authority Key Identifier:
keyid:70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:55:fe:54:c2:5a:71:ea:86:9b:ed:91:1f:6a:0a:3a:58:7d:
29:cd:ac:0f:70:be:0c:18:77:5b:2d:ed:41:5a:a3:32:fd:3f:
1d:d5:bc:d6:5c:1a:3f:69:3a:bc:d8:db:c0:63:26:d5:79:e3:
6c:61:4f:10:92:43:9f:1a:14:57:ff:d5:7b:ac:2a:46:b6:0a:
76:41:7c:87:48:fc:8a:ae:65:6f:63:78:6f:8a:b3:4c:f1:2d:
64:46:a9:a3:d2:96:80:24:57:08:bd:6f:03:9c:13:b1:97:03:
b3:16:79:5d:91:9b:26:e7:c9:92:a8:44:d7:d5:d4:86:0f:82:
ec:e0:5c:b9:3e:d5:63:90:a9:2e:03:62:2f:09:bc:65:3d:8a:
cb:68:ce:5b:58:33:0f:7d:88:ed:8b:d0:0c:85:ce:ef:90:f5:
18:30:e8:12:fc:9c:7d:76:49:84:2a:9f:a4:90:2e:16:46:1b:
9a:fb:cd:56:73:c4:d8:8a:d8:f6:f1:f2:da:f4:25:29:49:e8:
79:dd:20:32:b3:59:72:df:9d:b1:de:42:e7:00:0f:f5:d2:fb:
e6:66:c3:d3:00:3d:19:52:90:e9:df:cd:32:1d:1e:4b:e5:0c:
ac:50:31:ca:00:22:be:b1:c5:3f:95:a4:f7:83:c0:97:37:a1:
bd:ef:bf:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9a7m1bj34D2pS/A2k1LpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNzc3MDdmNjY5Nzg4MjZhODc1ZWI4ZDJlYjMzM2JlZDg1
Njk2NjcwHhcNMjUxMTA0MTMwMTU1WhcNMjUxMTA1MTMwMTU1WjAzMTEwLwYDVQQD
Eyg2ODZjZjJlOWJiMzU3YmJmNDE4YmY4ZjNmYmIzYmE0ZTE0NmY4NGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16s3269y13LIkJcmox8iHMaEJn/q
39H+5jquGnfhljaq7lMkLciINyaC+bxAMuUEilfShcUZ5wnel4wzYdxSZYY8R7lw
H2Unh9C2DH9QCeOYlLuMntQ2zFzkBgMOTA6TxFhzmta6/UFjAvO1Q2QQy0pbkIWa
O8B7UIJDhgApjMpBC+idG3bfR+gLMznhtbLiXKJ/4DNbyVeK29RC18pvFbnBx/dN
eMvgXSMK29m9WL3oWDwpHLWM3czrpfGvJAfZwEfvn08nNWX6HV/jpMkE3NLJOjhq
qpKYdQ1kX70wwPS3vzskMLfuOKl2KfFX94JHYAGFk716s4DAzV8nxAvJDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhs8um7NXu/QYv48/uzuk4Ub4TrMB8GA1UdIwQY
MBaAFHB3cH9ml4gmqHXrjS6zM77YVpZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0hkd2YyYVhpQ2FvZGV1TkxyTXp2dGhXbG1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iOWExYTAtNmFkYS00ZGRlLTk2NWIt
NDZmZjdjZTJjMTQwLzEvY0hkd2YyYVhpQ2FvZGV1TkxyTXp2dGhXbG1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iOWExYTAtNmFkYS00ZGRlLTk2NWItNDZmZjdjZTJjMTQw
LzEvY0hkd2YyYVhpQ2FvZGV1TkxyTXp2dGhXbG1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFX+VMJa
ceqGm+2RH2oKOlh9Kc2sD3C+DBh3Wy3tQVqjMv0/HdW81lwaP2k6vNjbwGMm1Xnj
bGFPEJJDnxoUV//Ve6wqRrYKdkF8h0j8iq5lb2N4b4qzTPEtZEapo9KWgCRXCL1v
A5wTsZcDsxZ5XZGbJufJkqhE19XUhg+C7OBcuT7VY5CpLgNiLwm8ZT2Ky2jOW1gz
D32I7YvQDIXO75D1GDDoEvycfXZJhCqfpJAuFkYbmvvNVnPE2IrY9vHy2vQlKUno
ed0gMrNZct+dsd5C5wAP9dL75mbD0wA9GVKQ6d/NMh0eS+UMrFAxygAivrHFP5Wk
94PAlzehve+/5g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:15:59 2025 by rpki-client