Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier: GbsjiKz3yYZdxSiPTKLGHRDd1aPGE4EOQQmqeesg0AM=
Subject key identifier: ED:76:31:A4:EE:E6:14:82:23:A3:37:F1:4F:27:59:B2:EE:1A:FB:5A
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 019A4DAADCCB491046742A77319BAAAEB1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number: 084D
Signing time: Tue 04 Nov 2025 07:00:34 +0000
Manifest this update: Tue 04 Nov 2025 07:00:34 +0000
Manifest next update: Wed 05 Nov 2025 07:00:34 +0000
Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: le9HFmBaB9KfinDDJ3kwYgpfkpz4bY7/qxwXb4AyuBo=)
2: uNPxSzoBaXvBOJFQn-2SS8eLdrE.roa (hash: aQ7mvpV3ivI5FkoVAB6sSeBflcpGk3YWeApRgwYyH1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:dc:cb:49:10:46:74:2a:77:31:9b:aa:ae:b1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: Nov 4 07:00:34 2025 GMT
Not After : Nov 5 07:00:34 2025 GMT
Subject: CN=ed7631a4eee6148223a337f14f2759b2ee1afb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:04:88:bf:6e:5a:7b:ca:d3:6b:26:f0:4a:
dd:32:1b:2e:b9:14:03:e7:cc:2e:09:ab:c1:55:30:
7c:22:f4:f2:79:48:57:dc:81:ac:41:c5:f9:a1:6e:
dc:24:69:c2:03:ef:07:1d:d8:cd:06:29:f6:54:8a:
c5:db:c1:14:55:88:f9:d2:9d:07:9c:f7:81:dd:1a:
00:3f:0d:3d:ca:2a:c8:a1:85:d4:65:33:f3:f9:f5:
c5:c8:a9:7d:11:a9:4f:e5:86:76:01:23:77:9f:be:
de:d3:0d:c1:cc:8f:3d:53:82:04:e2:80:39:18:fb:
12:5a:cb:8c:97:ea:21:16:d0:76:65:0d:7f:dd:c8:
af:d2:34:65:07:7f:f3:cf:ed:33:50:2f:c1:2a:3c:
75:d9:04:22:7e:06:a2:7b:6f:81:7f:5e:54:f1:5d:
05:f9:d7:ec:b3:4e:dc:f3:b1:1c:82:91:2e:56:df:
02:06:83:81:3c:ad:fb:db:c4:7c:bd:e9:19:88:75:
2a:de:8a:e5:51:e6:63:11:b7:fa:53:44:b5:97:68:
0c:11:f4:2e:d3:07:50:51:03:04:4c:f3:ee:9d:aa:
df:e1:b1:13:80:7a:e2:96:66:8c:6d:01:c6:a0:72:
5f:43:a0:11:65:74:2e:22:ad:9b:0b:b6:0b:fb:56:
8d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:76:31:A4:EE:E6:14:82:23:A3:37:F1:4F:27:59:B2:EE:1A:FB:5A
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:70:1c:48:1c:10:35:48:6a:39:60:08:a0:71:d1:33:e8:66:
01:e4:3b:23:22:be:05:bb:01:f9:8f:ae:93:19:1e:6e:83:52:
df:50:c3:69:17:e8:7a:3c:ac:2e:d7:bf:14:8e:11:d8:70:cc:
63:7e:01:46:93:3c:f4:dc:44:b9:7c:55:eb:f5:eb:d2:eb:8b:
4b:bd:d7:ea:c5:e7:b3:ef:5f:e9:af:d5:1d:20:14:a7:29:8f:
7a:d2:49:47:4e:b4:d3:e1:7e:48:88:54:e0:61:32:27:6f:37:
14:7e:cd:35:33:cc:55:83:5b:4c:cd:fd:af:27:e4:a9:2c:95:
4f:fc:a6:79:58:4d:5a:ad:6a:d6:42:c1:98:5a:cc:ad:fc:21:
8f:7a:aa:ba:f4:9c:bd:c7:51:25:73:77:2f:ad:51:a5:88:dc:
8d:85:0f:b2:6b:2b:ae:3b:0a:58:15:6c:b4:4c:38:24:26:f5:
ce:15:d4:5b:f4:61:a4:82:39:45:94:96:9b:96:f7:eb:14:5a:
15:a5:87:42:6f:59:c2:df:16:b8:4e:c4:eb:c3:e8:a3:e5:e9:
da:32:31:b9:8f:1d:a5:e3:4d:72:06:24:e6:ff:c5:bd:8d:8f:
da:c7:73:15:f3:b2:fc:43:e9:d9:7b:80:c1:c4:9a:f2:a8:9f:
ff:7a:77:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqtzLSRBGdCp3MZuqrrHJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZDQ1ZTU4MjA2YTFiOWQ1OWVkZGZhOGY5ODhiMzI3MTdi
ZjljNmIwHhcNMjUxMTA0MDcwMDM0WhcNMjUxMTA1MDcwMDM0WjAzMTEwLwYDVQQD
EyhlZDc2MzFhNGVlZTYxNDgyMjNhMzM3ZjE0ZjI3NTliMmVlMWFmYjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZgEiL9uWnvK02sm8ErdMhsuuRQD
58wuCavBVTB8IvTyeUhX3IGsQcX5oW7cJGnCA+8HHdjNBin2VIrF28EUVYj50p0H
nPeB3RoAPw09yirIoYXUZTPz+fXFyKl9EalP5YZ2ASN3n77e0w3BzI89U4IE4oA5
GPsSWsuMl+ohFtB2ZQ1/3civ0jRlB3/zz+0zUC/BKjx12QQifgaie2+Bf15U8V0F
+dfss07c87EcgpEuVt8CBoOBPK3728R8vekZiHUq3orlUeZjEbf6U0S1l2gMEfQu
0wdQUQMETPPunarf4bETgHrilmaMbQHGoHJfQ6ARZXQuIq2bC7YL+1aNIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO12MaTu5hSCI6M38U8nWbLuGvtaMB8GA1UdIwQY
MBaAFEvUXlggahudWe3fqPmIsycXv5xrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlSZVdDQnFHNTFaN2Qtby1ZaXpKeGVfbkdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yZjQ4YmQtYThlMy00ODdiLWEyNzQt
MDc4NTEwY2VhYzBkLzEvUzlSZVdDQnFHNTFaN2Qtby1ZaXpKeGVfbkdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yZjQ4YmQtYThlMy00ODdiLWEyNzQtMDc4NTEwY2VhYzBk
LzEvUzlSZVdDQnFHNTFaN2Qtby1ZaXpKeGVfbkdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnAcSBwQ
NUhqOWAIoHHRM+hmAeQ7IyK+BbsB+Y+ukxkeboNS31DDaRfoejysLte/FI4R2HDM
Y34BRpM89NxEuXxV6/Xr0uuLS73X6sXns+9f6a/VHSAUpymPetJJR0600+F+SIhU
4GEyJ283FH7NNTPMVYNbTM39ryfkqSyVT/ymeVhNWq1q1kLBmFrMrfwhj3qquvSc
vcdRJXN3L61RpYjcjYUPsmsrrjsKWBVstEw4JCb1zhXUW/RhpII5RZSWm5b36xRa
FaWHQm9Zwt8WuE7E68Poo+Xp2jIxuY8dpeNNcgYk5v/FvY2P2sdzFfOy/EPp2XuA
wcSa8qif/3p3Uw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:06 2025 by rpki-client