Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: Yj+5vDTqpWdcCNu6is7A2ua7pYoCiMJNpAJjkTQl5q4=
Subject key identifier: F1:3C:77:35:C9:24:7B:9D:AA:AD:ED:70:D6:EC:0D:A5:C8:9D:6A:0D
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 019A4D3D11F648915F40DA199598D70B748D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 05:00:39 +0000
Manifest this update: Tue 04 Nov 2025 05:00:39 +0000
Manifest next update: Wed 05 Nov 2025 05:00:39 +0000
Files and hashes: 1: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: OPGO1p4tWVjgQ0bX6zbRNdde3gyZ8J9LcxfZPT9TGqw=)
2: XbLNbpcMzthn6l0veRfIZ9QxeEk.roa (hash: Zbud2lYm0I4TklwYM90yu2xM4m8NLbFwJE0Y7F2RnFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:11:f6:48:91:5f:40:da:19:95:98:d7:0b:74:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Nov 4 05:00:39 2025 GMT
Not After : Nov 5 05:00:39 2025 GMT
Subject: CN=f13c7735c9247b9daaaded70d6ec0da5c89d6a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:6c:2f:b0:8e:97:ea:28:f1:cd:73:a6:9e:
33:85:cd:4e:4b:ff:a7:d4:00:e5:f9:1a:0c:19:79:
c9:e5:97:0a:4f:ff:4b:89:9e:ad:d1:24:e2:50:ab:
93:b3:cf:ad:26:ba:8f:84:1c:e1:a2:c0:8c:12:2d:
83:5c:10:b5:86:98:76:e4:91:35:3e:10:11:77:4f:
7c:42:8e:b1:7f:8e:e8:76:99:18:8f:2a:bb:55:68:
f5:d7:0d:e2:df:60:08:a2:9e:07:2f:f0:cd:45:1c:
fb:1d:ad:ab:a7:cd:b3:53:e8:ab:f7:3b:e8:08:ae:
b0:67:18:54:45:49:e9:ae:24:9f:a3:3c:fe:ed:0f:
cb:a7:b0:b7:1f:08:14:7a:35:d4:c4:13:0f:45:56:
dd:59:47:6f:a4:4c:97:a3:b3:32:ce:20:0e:e9:59:
70:f7:86:cb:f1:98:3a:dc:d2:e2:b0:ae:44:e1:82:
92:4e:1c:01:96:ad:f5:7b:7e:88:07:72:35:39:a0:
94:de:2d:62:1a:dc:d9:fa:2f:8f:fe:b1:57:32:f0:
ca:d6:39:9c:59:c0:77:f4:60:e5:c6:b2:ea:ce:bd:
f0:39:2f:21:8a:8a:23:c4:70:19:0d:42:76:73:f2:
3a:bf:a2:86:18:63:8e:0c:6d:3d:29:8c:f0:42:70:
cd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3C:77:35:C9:24:7B:9D:AA:AD:ED:70:D6:EC:0D:A5:C8:9D:6A:0D
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:41:59:85:c2:2a:74:25:2a:d4:e3:e7:a2:cb:03:30:e5:d7:
21:71:24:40:58:1b:ef:d1:79:df:50:42:33:a3:c4:b6:8b:00:
bf:a4:8d:63:26:29:8b:60:39:0a:db:4d:80:09:d0:65:ff:80:
29:a1:98:c1:a0:92:54:b9:5b:7d:ea:34:49:c8:cc:88:64:54:
01:ea:0d:18:af:9f:19:85:95:02:c8:a0:4d:da:d5:bd:6b:cc:
99:c6:ac:f1:c3:e8:9e:3b:a9:0d:16:46:c7:e1:f7:47:da:02:
7a:91:ed:b4:b0:b1:7a:82:8c:5a:62:86:c8:7e:3d:8e:7e:43:
c5:4d:d4:8c:ef:d5:f9:79:25:c5:75:05:d1:d7:3e:3f:ee:c0:
60:11:29:83:4a:b5:b5:f9:fb:62:2b:fa:22:67:ea:30:76:5d:
f0:c1:2f:71:29:a3:81:16:3e:a7:f3:fe:20:48:4b:a7:db:c3:
72:06:7e:a5:5a:8a:44:89:6e:5d:62:4c:52:e8:8a:19:c2:1d:
6d:c2:9d:af:b6:db:b5:d8:61:17:c0:c7:15:58:12:de:ea:fd:
89:76:c3:64:17:8d:99:82:5e:c0:03:72:be:27:b5:bb:d7:33:
29:7e:ce:d3:8c:b6:f7:b2:01:df:dd:c0:4f:de:0f:9f:84:0e:
ee:81:c8:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPRH2SJFfQNoZlZjXC3SNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzY0NjdlZjA5MjFjNTExOTBlMmVhNjBmMmFiYjNiZDZl
OWMxOWYwHhcNMjUxMTA0MDUwMDM5WhcNMjUxMTA1MDUwMDM5WjAzMTEwLwYDVQQD
EyhmMTNjNzczNWM5MjQ3YjlkYWFhZGVkNzBkNmVjMGRhNWM4OWQ2YTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2xsL7COl+oo8c1zpp4zhc1OS/+n
1ADl+RoMGXnJ5ZcKT/9LiZ6t0STiUKuTs8+tJrqPhBzhosCMEi2DXBC1hph25JE1
PhARd098Qo6xf47odpkYjyq7VWj11w3i32AIop4HL/DNRRz7Ha2rp82zU+ir9zvo
CK6wZxhURUnpriSfozz+7Q/Lp7C3HwgUejXUxBMPRVbdWUdvpEyXo7MyziAO6Vlw
94bL8Zg63NLisK5E4YKSThwBlq31e36IB3I1OaCU3i1iGtzZ+i+P/rFXMvDK1jmc
WcB39GDlxrLqzr3wOS8hioojxHAZDUJ2c/I6v6KGGGOODG09KYzwQnDNDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPE8dzXJJHudqq3tcNbsDaXInWoNMB8GA1UdIwQY
MBaAFFN2Rn7wkhxRGQ4upg8quzvW6cGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2Yt
MmM3YTJhNzQ2Mjc5LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2YtMmM3YTJhNzQ2Mjc5
LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikFZhcIq
dCUq1OPnossDMOXXIXEkQFgb79F531BCM6PEtosAv6SNYyYpi2A5CttNgAnQZf+A
KaGYwaCSVLlbfeo0ScjMiGRUAeoNGK+fGYWVAsigTdrVvWvMmcas8cPonjupDRZG
x+H3R9oCepHttLCxeoKMWmKGyH49jn5DxU3UjO/V+XklxXUF0dc+P+7AYBEpg0q1
tfn7Yiv6ImfqMHZd8MEvcSmjgRY+p/P+IEhLp9vDcgZ+pVqKRIluXWJMUuiKGcId
bcKdr7bbtdhhF8DHFVgS3ur9iXbDZBeNmYJewANyvie1u9czKX7O04y297IB393A
T94Pn4QO7oHImw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:19 2025 by rpki-client