Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier: NuR7vjrnW0ibioln8ID2DwHMl10fgc+k89WHL7nqkh0=
Subject key identifier: F3:76:E2:44:89:6B:01:CB:F4:CA:26:9B:AE:D6:E2:D6:BD:0A:FC:A1
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer: /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial: 019A533EF70C076C5CBEFFC6CFCBCAAE2880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 09:00:26 +0000
Manifest this update: Wed 05 Nov 2025 09:00:26 +0000
Manifest next update: Thu 06 Nov 2025 09:00:26 +0000
Files and hashes: 1: 0LP5ahEEWvnMaK30aMTVzU6uXkA.roa (hash: lB/VdYravFr8twO2oC/vGE6G8jo6civSr7gweO3k+0U=)
2: Poiw2E-mLT2v3vPHQ4mWn5Erbv8.roa (hash: 3V6NagY5nBDP5ry2LKf1AJl9T65osEYx7aEHS/N5Z0A=)
3: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: rohFEk4GFggLl6GuYGInQi9M4U/hDEK5MprOAYhC2dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:f7:0c:07:6c:5c:be:ff:c6:cf:cb:ca:ae:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Validity
Not Before: Nov 5 09:00:26 2025 GMT
Not After : Nov 6 09:00:26 2025 GMT
Subject: CN=f376e244896b01cbf4ca269baed6e2d6bd0afca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:3e:ff:2b:cc:59:86:02:d7:29:6b:97:3e:
42:24:e0:f8:08:ab:51:53:2f:4b:a1:b4:32:26:5d:
7c:5e:33:e8:8a:23:6c:02:6f:73:4f:4f:8d:46:3e:
ef:9e:28:fa:83:82:db:ff:79:a0:d2:11:c7:4f:4e:
9e:44:ce:2b:bc:4e:cb:29:79:a3:d1:4d:19:41:5c:
00:7a:a2:d3:1f:45:a4:25:93:75:ae:2e:60:08:62:
1f:5d:93:ef:14:e7:ea:c2:64:51:00:1f:37:d5:56:
3d:ad:b7:bb:94:61:69:e9:4c:62:59:09:aa:7d:72:
c5:8a:d4:2a:dd:0a:e2:7c:e6:61:2a:57:91:e3:09:
56:7b:a2:65:1d:b6:28:54:29:b1:75:90:e9:31:ef:
a6:33:23:2c:aa:4e:ab:2a:44:7c:be:15:9f:a3:b0:
f3:7f:b3:ec:e7:c0:0f:7f:2e:1c:a0:f6:59:da:a3:
16:5a:c5:a5:1c:96:2c:c7:7a:86:79:8b:22:0a:9f:
ec:26:ef:56:36:a3:0f:72:9e:8f:5b:13:3b:7b:02:
62:66:74:0c:6f:19:62:b0:e2:1f:14:64:b0:40:54:
34:ad:73:b4:1b:d5:cd:0d:a2:74:63:d6:56:18:e1:
c6:b1:86:2c:e1:36:69:16:98:5d:94:af:64:80:ba:
26:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:76:E2:44:89:6B:01:CB:F4:CA:26:9B:AE:D6:E2:D6:BD:0A:FC:A1
X509v3 Authority Key Identifier:
keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:5a:11:f4:b3:4b:f0:4f:4a:d0:9d:38:95:37:51:3f:19:8b:
56:67:43:81:99:c3:38:48:cb:c9:6a:40:dd:29:ef:4d:58:de:
f0:e6:13:21:59:24:c9:9d:d5:74:7b:3a:7b:43:31:c1:1e:cf:
00:e5:a4:be:31:41:e4:4e:d4:0a:48:70:37:7b:c0:3d:cb:3d:
ef:52:df:02:13:74:2f:a2:d7:60:b4:d1:b2:6d:e5:17:f2:44:
6a:9b:f0:77:a2:64:2d:47:3b:73:80:5d:e0:a2:36:7b:50:7f:
6f:7c:08:01:14:ad:f0:d7:c0:1d:67:cd:30:30:04:a2:6f:c6:
bf:9a:da:ff:b7:ed:87:ed:3f:24:d8:79:bd:74:29:1f:34:f9:
f5:7e:9f:de:d2:54:59:a0:bd:f5:29:d8:6a:a2:fe:82:d5:00:
fe:3b:d3:a2:1e:b0:69:f5:64:55:78:cc:71:15:f3:03:69:5e:
8c:03:19:e5:e1:5e:a4:4d:a6:2e:58:68:99:3e:e0:b4:fe:76:
91:ed:74:8a:54:a0:8d:28:67:73:b5:9d:d3:c2:d8:7a:f2:00:
8c:d1:68:4e:6d:8f:2e:63:7b:aa:48:7e:c3:18:c0:c7:7b:dc:
f1:65:88:6f:da:6f:5b:f8:7f:54:e0:a9:6b:cc:b0:fa:8e:70:
39:a6:cb:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTPvcMB2xcvv/Gz8vKriiAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMmFmOTA2MGMxZjQyYzYyOGZjZmI4ZjA3ODFkN2E1YmMy
MWZjMDIwHhcNMjUxMTA1MDkwMDI2WhcNMjUxMTA2MDkwMDI2WjAzMTEwLwYDVQQD
EyhmMzc2ZTI0NDg5NmIwMWNiZjRjYTI2OWJhZWQ2ZTJkNmJkMGFmY2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyQ+/yvMWYYC1ylrlz5CJOD4CKtR
Uy9LobQyJl18XjPoiiNsAm9zT0+NRj7vnij6g4Lb/3mg0hHHT06eRM4rvE7LKXmj
0U0ZQVwAeqLTH0WkJZN1ri5gCGIfXZPvFOfqwmRRAB831VY9rbe7lGFp6UxiWQmq
fXLFitQq3QrifOZhKleR4wlWe6JlHbYoVCmxdZDpMe+mMyMsqk6rKkR8vhWfo7Dz
f7Ps58APfy4coPZZ2qMWWsWlHJYsx3qGeYsiCp/sJu9WNqMPcp6PWxM7ewJiZnQM
bxlisOIfFGSwQFQ0rXO0G9XNDaJ0Y9ZWGOHGsYYs4TZpFphdlK9kgLomowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPN24kSJawHL9Momm67W4ta9CvyhMB8GA1UdIwQY
MBaAFP0q+QYMH0LGKPz7jweB16W8IfwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDct
YmZjZjlhOTIyYThiLzEvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDctYmZjZjlhOTIyYThi
LzEvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuloR9LNL
8E9K0J04lTdRPxmLVmdDgZnDOEjLyWpA3SnvTVje8OYTIVkkyZ3VdHs6e0MxwR7P
AOWkvjFB5E7UCkhwN3vAPcs971LfAhN0L6LXYLTRsm3lF/JEapvwd6JkLUc7c4Bd
4KI2e1B/b3wIARSt8NfAHWfNMDAEom/Gv5ra/7fth+0/JNh5vXQpHzT59X6f3tJU
WaC99SnYaqL+gtUA/jvToh6wafVkVXjMcRXzA2lejAMZ5eFepE2mLlhomT7gtP52
ke10ilSgjShnc7Wd08LYevIAjNFoTm2PLmN7qkh+wxjAx3vc8WWIb9pvW/h/VOCp
a8yw+o5wOabLyQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:31:37 2025 by rpki-client