Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json)
Hash identifier: LAvarohm85DZF5mbuAFQX5FvrVV1X0DWyXo/a0g/ggA=
Subject key identifier: 4D:9D:6F:2C:7C:0A:6A:3D:C7:06:6B:1D:58:83:BB:CB:6C:4C:A4:00
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 019A4F62C6F4E3ACABD9447B82AC0A41884F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
Manifest number: 0DEF
Signing time: Tue 04 Nov 2025 15:01:04 +0000
Manifest this update: Tue 04 Nov 2025 15:01:04 +0000
Manifest next update: Wed 05 Nov 2025 15:01:04 +0000
Files and hashes: 1: 1-Mg08ooGsj9VN-8i0khJXBw3jVQ.roa (hash: cP0po0zW+LQnzjrZSQHX9u1ecovx/li0WZt0UNimdaw=)
2: E1tiJF9pbO0eSBPSwr1et8cPjUs.roa (hash: KqE7+MnUHX3Ki13WWK14Wm5uLKCL0/xXzqRQ5h2lQNo=)
3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: 2FUiVmHrb/5v2Zx19hvAFfb/3/uqrTmPPuyUe5N0sMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:c6:f4:e3:ac:ab:d9:44:7b:82:ac:0a:41:88:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: Nov 4 15:01:04 2025 GMT
Not After : Nov 5 15:01:04 2025 GMT
Subject: CN=4d9d6f2c7c0a6a3dc7066b1d5883bbcb6c4ca400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:96:22:03:3c:97:e8:d3:39:38:27:a6:80:79:
57:ae:95:6e:f5:29:a0:b1:e7:5c:e8:39:06:5c:ca:
d2:6e:fd:66:f3:15:5a:de:90:7f:8b:d5:68:dc:ce:
37:f7:4a:1b:54:d3:6d:17:23:78:44:99:80:9d:c9:
fe:b5:69:b4:53:22:45:2a:b0:5d:0f:8b:26:c3:75:
9f:70:37:28:a9:96:c6:89:1b:9d:93:af:ca:a4:fb:
a3:78:81:24:33:13:dc:e0:e9:53:d2:d9:a6:65:5b:
67:5a:35:bd:ce:86:05:e2:c5:d2:64:0a:2f:26:5c:
92:b6:f6:1b:96:c6:e8:a8:eb:f9:8d:12:4c:f1:8d:
8a:93:24:6a:f0:74:2f:89:62:56:a0:e4:e0:96:e5:
f7:a7:80:0e:03:a7:d8:6b:02:30:a4:c5:a5:7f:6c:
74:1d:cc:19:36:47:ab:69:46:e2:b6:b2:e0:d3:42:
10:4d:b2:24:db:6f:52:78:90:8a:63:c7:26:a3:8a:
aa:60:a7:43:11:be:d2:2a:12:d8:ed:a0:5c:5c:ec:
0d:49:19:79:7d:44:34:c8:f9:88:3d:1d:ad:42:20:
b7:16:8d:09:f5:4e:35:a4:1b:2d:71:9e:1f:0c:38:
ed:62:98:c4:b8:38:5f:07:36:ee:9b:fe:bd:00:ac:
ea:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9D:6F:2C:7C:0A:6A:3D:C7:06:6B:1D:58:83:BB:CB:6C:4C:A4:00
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a1:1d:3f:12:f0:bb:39:65:8d:2b:a5:fc:a2:8a:64:07:86:
37:8f:bc:68:fa:82:b6:bc:c9:6d:eb:47:6c:a9:b8:5a:f4:67:
03:02:f4:49:77:41:e4:d2:bd:ed:0f:52:74:b6:d4:a1:07:76:
fc:03:c2:42:0e:b9:c0:e8:1e:5a:9f:ce:50:30:c2:a9:c1:c3:
6d:98:48:28:95:2b:74:ba:96:6d:1f:f6:3c:80:62:6d:99:99:
5c:05:55:0b:c0:02:0e:91:67:d4:32:ba:ad:a6:16:cf:8a:42:
04:94:ed:13:09:d7:78:27:bd:26:f2:34:5f:36:53:80:44:91:
0a:93:9a:79:02:18:88:6a:98:0c:a2:67:85:25:32:7f:14:10:
90:b8:52:9a:6c:78:4f:9c:64:b2:6f:85:75:3e:c9:10:f3:11:
60:6d:21:ae:b1:4a:03:cc:b6:c9:b0:f5:a2:1c:3a:dd:0b:73:
f5:0d:87:7b:0f:83:dc:94:77:35:c8:0b:bd:a7:4c:5f:d7:2f:
c0:58:b7:81:d9:cd:4c:e7:d6:c7:6a:e4:a5:cc:6b:58:d6:a6:
d9:77:ec:ae:fe:44:8b:e8:ee:01:04:f0:99:75:7b:d8:4f:d7:
74:7d:4e:bd:cd:2a:08:4d:ca:2b:d5:2b:d5:da:db:c1:57:0a:
8b:4b:73:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYsb046yr2UR7gqwKQYhPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYzVmNzRkZjQ1MjBkMzQxZGEzNDhhNzAwYTAzYjk3Y2Fm
MDc3MzUwHhcNMjUxMTA0MTUwMTA0WhcNMjUxMTA1MTUwMTA0WjAzMTEwLwYDVQQD
Eyg0ZDlkNmYyYzdjMGE2YTNkYzcwNjZiMWQ1ODgzYmJjYjZjNGNhNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JYiAzyX6NM5OCemgHlXrpVu9Smg
sedc6DkGXMrSbv1m8xVa3pB/i9Vo3M4390obVNNtFyN4RJmAncn+tWm0UyJFKrBd
D4smw3WfcDcoqZbGiRudk6/KpPujeIEkMxPc4OlT0tmmZVtnWjW9zoYF4sXSZAov
JlyStvYblsboqOv5jRJM8Y2KkyRq8HQviWJWoOTgluX3p4AOA6fYawIwpMWlf2x0
HcwZNkeraUbitrLg00IQTbIk229SeJCKY8cmo4qqYKdDEb7SKhLY7aBcXOwNSRl5
fUQ0yPmIPR2tQiC3Fo0J9U41pBstcZ4fDDjtYpjEuDhfBzbum/69AKzqsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2dbyx8Cmo9xwZrHViDu8tsTKQAMB8GA1UdIwQY
MBaAFLLF9030Ug00HaNIpwCgO5fK8Hc1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzIt
Nzc3ZWU5NTU2MjEwLzEvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzItNzc3ZWU5NTU2MjEw
LzEvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqEdPxLw
uzlljSul/KKKZAeGN4+8aPqCtrzJbetHbKm4WvRnAwL0SXdB5NK97Q9SdLbUoQd2
/APCQg65wOgeWp/OUDDCqcHDbZhIKJUrdLqWbR/2PIBibZmZXAVVC8ACDpFn1DK6
raYWz4pCBJTtEwnXeCe9JvI0XzZTgESRCpOaeQIYiGqYDKJnhSUyfxQQkLhSmmx4
T5xksm+FdT7JEPMRYG0hrrFKA8y2ybD1ohw63Qtz9Q2Hew+D3JR3NcgLvadMX9cv
wFi3gdnNTOfWx2rkpcxrWNam2Xfsrv5Ei+juAQTwmXV72E/XdH1Ovc0qCE3KK9Ur
1drbwVcKi0tz8g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:40 2025 by rpki-client