Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File: S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier: 7oWjqiTHCjDDYUpxDERK/vLIDZGdCdJfWQHgavnZKmM=
Subject key identifier: F8:14:C1:7A:C5:29:5B:80:4E:B5:80:A5:1F:B7:05:F9:CE:61:42:F1
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 019A522C2C5DE263C7640170548BF1FF13F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number: 172A
Signing time: Wed 05 Nov 2025 04:00:17 +0000
Manifest this update: Wed 05 Nov 2025 04:00:17 +0000
Manifest next update: Thu 06 Nov 2025 04:00:17 +0000
Files and hashes: 1: 0hP_n0pnEZN4K6poUlA-xqEv6yE.roa (hash: F/NswoqCQCtEeweJPN7XVnbp503CyUvfgOPod22wDEM=)
2: IfSKWBwWV6QcVsRSMjJ9wGMbUUk.roa (hash: HjUM6VN/VoF4kqrbPTW3NPTllgIWYUt/BGC2HsAIgNk=)
3: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: zbijh2edH7rmwtyEGBlghimI8lU/jKW9R/Pb6SlYUfA=)
4: eiTWJKHAu5xriuE2QvW7x5YIzOU.roa (hash: s87ilBuA43+J3H8PQ6AAVQPStmwyHIxSZQ+1oBAYKOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:2c:5d:e2:63:c7:64:01:70:54:8b:f1:ff:13:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Nov 5 04:00:17 2025 GMT
Not After : Nov 6 04:00:17 2025 GMT
Subject: CN=f814c17ac5295b804eb580a51fb705f9ce6142f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:e9:23:bc:54:62:81:af:7c:af:dc:1d:aa:
3b:4a:b6:f0:30:b8:b2:ec:e8:23:a6:77:8f:15:28:
70:b4:85:c1:b2:bd:52:d3:98:41:a5:76:c9:2d:f4:
e7:d5:90:f5:40:b2:8c:8d:ef:56:63:e5:87:32:90:
12:f3:a7:3a:b1:65:45:30:04:f2:69:8e:02:98:38:
9a:be:14:ad:46:89:a2:98:13:db:26:29:62:59:4a:
47:d5:84:23:e7:59:53:a4:4b:db:91:5c:d1:f7:4b:
17:29:0c:5e:a3:33:d2:22:4f:52:4e:a1:d1:c0:80:
e5:ad:1c:f6:be:dc:1e:70:c0:59:08:34:5a:2e:57:
83:b0:f2:70:7c:fd:48:bc:03:38:50:55:c1:c1:00:
60:8f:e1:24:67:ff:e5:27:50:22:52:43:f7:eb:fa:
9e:6e:0a:3e:41:3d:d9:39:81:a7:17:31:f9:8d:5f:
3b:d6:86:ee:3a:98:d3:28:c5:ff:da:0f:48:ff:be:
e1:17:9d:dd:ed:55:f0:5e:ff:b5:6e:79:3e:dd:7e:
55:70:a2:64:24:77:f5:c0:56:ee:9e:5d:02:69:88:
5b:8e:6e:bb:46:07:95:90:9b:de:78:81:a5:86:61:
96:1f:06:56:a3:d2:32:a6:dd:8e:76:bf:65:eb:25:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:14:C1:7A:C5:29:5B:80:4E:B5:80:A5:1F:B7:05:F9:CE:61:42:F1
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:88:d5:7f:f3:e1:d1:f2:4c:d6:c4:d7:6c:42:ec:2d:2f:7a:
38:0e:b0:2b:19:2d:98:75:4b:ca:35:b7:6d:ef:0d:91:74:8c:
27:5c:7b:bd:d5:83:2c:ea:ba:ac:b9:c5:56:66:39:54:67:7a:
51:40:70:42:70:28:d6:3b:b7:bc:de:9b:77:66:86:43:b4:b8:
e8:d5:12:34:35:0e:cf:b3:c5:de:b8:6e:ed:26:8f:38:b4:83:
59:6b:63:cb:09:29:7a:91:da:39:90:4b:c3:a9:5a:12:36:2b:
ab:bb:ea:91:a4:06:20:7c:f9:53:57:89:45:9c:34:9d:52:73:
ab:28:14:69:bd:b1:6e:6e:90:72:78:73:ab:6b:f6:6a:12:70:
47:ed:ec:22:2c:92:5b:70:c7:8e:20:7d:36:39:39:16:65:e6:
bf:85:15:8f:54:50:0e:f2:f6:b9:f2:1d:b2:dc:90:70:d0:8a:
4f:42:2e:48:33:eb:cc:47:6c:c1:2b:e2:b2:a2:b4:e8:ef:75:
1c:2d:55:a1:91:0a:ce:8f:c6:90:d9:dd:63:25:48:6b:08:e3:
fd:46:0c:ca:f3:69:65:e8:04:15:d3:09:c8:e8:d5:d3:5f:dd:
61:14:66:38:b0:62:2e:42:7d:10:3b:36:c3:d5:be:11:5a:c8:
13:0f:c2:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLCxd4mPHZAFwVIvx/xP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNDhjZjE0NmI0YzczZDI3NDA5NmQ3MDU3MDhkMjRiNzI5
MzI5ZjgwHhcNMjUxMTA1MDQwMDE3WhcNMjUxMTA2MDQwMDE3WjAzMTEwLwYDVQQD
EyhmODE0YzE3YWM1Mjk1YjgwNGViNTgwYTUxZmI3MDVmOWNlNjE0MmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvObpI7xUYoGvfK/cHao7SrbwMLiy
7OgjpnePFShwtIXBsr1S05hBpXbJLfTn1ZD1QLKMje9WY+WHMpAS86c6sWVFMATy
aY4CmDiavhStRomimBPbJiliWUpH1YQj51lTpEvbkVzR90sXKQxeozPSIk9STqHR
wIDlrRz2vtwecMBZCDRaLleDsPJwfP1IvAM4UFXBwQBgj+EkZ//lJ1AiUkP36/qe
bgo+QT3ZOYGnFzH5jV871obuOpjTKMX/2g9I/77hF53d7VXwXv+1bnk+3X5VcKJk
JHf1wFbunl0CaYhbjm67RgeVkJveeIGlhmGWHwZWo9Iypt2Odr9l6yU3kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgUwXrFKVuATrWApR+3BfnOYULxMB8GA1UdIwQY
MBaAFEtIzxRrTHPSdAltcFcI0ktykyn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMt
NjRhNmEwNWI5OTA1LzEvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMtNjRhNmEwNWI5OTA1
LzEvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIjVf/Ph
0fJM1sTXbELsLS96OA6wKxktmHVLyjW3be8NkXSMJ1x7vdWDLOq6rLnFVmY5VGd6
UUBwQnAo1ju3vN6bd2aGQ7S46NUSNDUOz7PF3rhu7SaPOLSDWWtjywkpepHaOZBL
w6laEjYrq7vqkaQGIHz5U1eJRZw0nVJzqygUab2xbm6Qcnhzq2v2ahJwR+3sIiyS
W3DHjiB9Njk5FmXmv4UVj1RQDvL2ufIdstyQcNCKT0IuSDPrzEdswSvisqK06O91
HC1VoZEKzo/GkNndYyVIawjj/UYMyvNpZegEFdMJyOjV01/dYRRmOLBiLkJ9EDs2
w9W+EVrIEw/CCg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:40:25 2025 by rpki-client