
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
File: cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft (raw, json)
Hash identifier: yB2v/wiH+huSPNQVSX8rNOP7jvYWVirH9aaf+D9ReQc=
Subject key identifier: 2A:A1:2C:E7:BB:DD:6B:6C:C6:8B:DD:B2:9E:35:74:02:1B:CE:A4:FC
Authority key identifier: 71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B
Certificate issuer: /CN=713af8b790ac0923b24307ee008f261d10d9560b
Certificate serial: 0199FC5914B6841F650D5A71CE7DFBA8B8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
Manifest number: 0DDE
Signing time: Sun 19 Oct 2025 12:02:00 +0000
Manifest this update: Sun 19 Oct 2025 12:02:00 +0000
Manifest next update: Mon 20 Oct 2025 12:02:00 +0000
Files and hashes: 1: _VNZcr3EYGlXqjzpoEk_KD5xeQo.roa (hash: q7OjuouQNM7VgrvgHXW4IBw772Y+anjbTLeMEEPFDVg=)
2: cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl (hash: rejIot2NfgESEYJbLV5GJrkkAEqALI7EgwRI97N0NFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:14:b6:84:1f:65:0d:5a:71:ce:7d:fb:a8:b8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713af8b790ac0923b24307ee008f261d10d9560b
Validity
Not Before: Oct 19 12:02:00 2025 GMT
Not After : Oct 20 12:02:00 2025 GMT
Subject: CN=2aa12ce7bbdd6b6cc68bddb29e3574021bcea4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:db:66:a9:60:5a:fb:d8:f9:80:aa:15:43:
ea:c1:14:bb:38:b5:fd:bc:c2:0d:7f:88:fe:26:ea:
30:8c:5b:05:70:ed:ec:76:b6:81:80:ff:4b:a0:2f:
c2:16:bd:59:a9:11:fa:48:e6:c3:c4:57:7b:f1:8d:
eb:b9:e2:fd:3d:fb:5e:78:e3:82:0e:0b:f7:76:ee:
98:38:d8:ea:e7:3c:ae:6b:3c:99:4a:81:6f:07:eb:
47:61:f5:1b:75:e0:da:e0:91:4d:0c:50:0a:21:0f:
9e:04:78:1b:5c:36:29:c0:5f:7e:55:2e:22:8c:29:
37:2c:e5:82:44:40:8b:6c:84:ab:99:33:74:24:71:
af:8e:d5:7a:b3:0d:ef:a5:31:c9:f7:02:c7:bd:d3:
5a:08:90:67:a4:8e:97:ef:2f:73:09:b1:ae:8b:a6:
57:26:59:02:58:94:3b:93:2a:65:ef:65:49:f9:7e:
b3:7c:91:6e:d2:3e:ae:a6:cf:6a:36:7b:59:45:1b:
09:42:90:00:52:b5:23:53:8a:e3:7c:8e:a8:4c:34:
7d:95:ff:a5:5f:47:4a:60:94:be:7c:5b:00:12:33:
46:1f:b7:c2:34:a8:e0:c1:b5:e1:9e:d1:99:a1:b1:
18:c1:9c:f9:2a:11:0e:98:ab:7a:e3:ea:dd:15:83:
dc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A1:2C:E7:BB:DD:6B:6C:C6:8B:DD:B2:9E:35:74:02:1B:CE:A4:FC
X509v3 Authority Key Identifier:
keyid:71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ab:5f:7d:be:ec:16:ed:2d:7a:cd:b3:32:df:b4:4f:b0:3b:
e0:a1:cd:7d:1f:34:23:af:1f:ee:0c:bb:7f:88:80:68:c0:41:
07:38:1d:c6:02:8f:d3:86:8d:92:e0:5a:0b:c2:ad:f3:f7:6f:
4a:e3:cd:97:c5:78:95:52:4c:1a:e7:d3:85:a8:bf:f2:ff:14:
52:f0:5b:5a:0a:c7:eb:86:31:bf:2a:15:9b:c7:d4:15:2c:8e:
07:a0:10:c3:72:de:29:ba:17:ba:5d:e8:c6:49:4f:18:04:b5:
49:5c:0a:20:c8:a2:0a:d2:eb:73:f1:97:c6:6e:16:d8:02:0a:
52:79:aa:aa:42:fc:81:ab:fb:29:c0:62:9c:6d:9d:89:7a:12:
f6:ca:94:7b:42:65:d9:f3:7d:1b:f4:3d:2e:ca:07:73:60:24:
fc:db:73:5d:76:2a:64:80:41:0f:cd:06:88:e9:f1:12:12:ea:
fa:f8:c9:6a:e7:d6:3c:51:ae:17:7f:0d:14:4d:3a:1b:15:51:
f7:34:be:6e:94:33:c3:5d:00:8e:b8:95:5b:63:19:aa:f6:80:
a3:53:17:0d:81:ff:d2:0f:d7:d3:0b:43:ce:74:6f:95:61:cc:
85:aa:60:ac:4d:7d:ef:22:d3:6c:da:f3:ff:a6:ee:15:bf:6b:
1e:e3:f8:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WRS2hB9lDVpxzn37qLj4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxM2FmOGI3OTBhYzA5MjNiMjQzMDdlZTAwOGYyNjFkMTBk
OTU2MGIwHhcNMjUxMDE5MTIwMjAwWhcNMjUxMDIwMTIwMjAwWjAzMTEwLwYDVQQD
EygyYWExMmNlN2JiZGQ2YjZjYzY4YmRkYjI5ZTM1NzQwMjFiY2VhNGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+LbZqlgWvvY+YCqFUPqwRS7OLX9
vMINf4j+JuowjFsFcO3sdraBgP9LoC/CFr1ZqRH6SObDxFd78Y3rueL9PfteeOOC
Dgv3du6YONjq5zyuazyZSoFvB+tHYfUbdeDa4JFNDFAKIQ+eBHgbXDYpwF9+VS4i
jCk3LOWCRECLbISrmTN0JHGvjtV6sw3vpTHJ9wLHvdNaCJBnpI6X7y9zCbGui6ZX
JlkCWJQ7kypl72VJ+X6zfJFu0j6ups9qNntZRRsJQpAAUrUjU4rjfI6oTDR9lf+l
X0dKYJS+fFsAEjNGH7fCNKjgwbXhntGZobEYwZz5KhEOmKt64+rdFYPcfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqhLOe73Wtsxovdsp41dAIbzqT8MB8GA1UdIwQY
MBaAFHE6+LeQrAkjskMH7gCPJh0Q2VYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1RyNHQ1Q3NDU095UXdmdUFJOG1IUkRaVmdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82ZmQ1ZTMtY2I2YS00ZDY1LTk1N2Mt
NDc0MTQ3NjZiNmJhLzEvY1RyNHQ1Q3NDU095UXdmdUFJOG1IUkRaVmdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS82ZmQ1ZTMtY2I2YS00ZDY1LTk1N2MtNDc0MTQ3NjZiNmJh
LzEvY1RyNHQ1Q3NDU095UXdmdUFJOG1IUkRaVmdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKtffb7s
Fu0tes2zMt+0T7A74KHNfR80I68f7gy7f4iAaMBBBzgdxgKP04aNkuBaC8Kt8/dv
SuPNl8V4lVJMGufThai/8v8UUvBbWgrH64YxvyoVm8fUFSyOB6AQw3LeKboXul3o
xklPGAS1SVwKIMiiCtLrc/GXxm4W2AIKUnmqqkL8gav7KcBinG2diXoS9sqUe0Jl
2fN9G/Q9LsoHc2Ak/NtzXXYqZIBBD80GiOnxEhLq+vjJaufWPFGuF38NFE06GxVR
9zS+bpQzw10AjriVW2MZqvaAo1MXDYH/0g/X0wtDznRvlWHMhapgrE197yLTbNrz
/6buFb9rHuP4gw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:36 2025 by rpki-client