Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
File: sUq6i2B0k5NHjoPDYObL110Vb4k.mft (raw, json)
Hash identifier: B1SAXPqQq2CB7MNdJ2AlgTpnj+1EThOYaZ43uW6jUi4=
Subject key identifier: 8B:12:14:4F:85:5C:A5:64:17:2F:B7:0F:4F:E5:7A:EE:56:D7:BD:C4
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial: 019A4F2B735ACB4278DD315B50886613957E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
Manifest number: 1721
Signing time: Tue 04 Nov 2025 14:00:38 +0000
Manifest this update: Tue 04 Nov 2025 14:00:38 +0000
Manifest next update: Wed 05 Nov 2025 14:00:38 +0000
Files and hashes: 1: AtRByS0zJPDiOgR2GmP-us653x0.roa (hash: FxQtASMxynUngBeMPqWpgsQ0Eb/Ckc7wV64mAxHzC3U=)
2: Lsu4SS6ThyYeppRYu6PmZ-042nc.roa (hash: uXqaykBNjJacbWPSq8V/QHVwNjfPRIGaAOgab5oa/hs=)
3: SBLZeIJXD3Iok5gT5e4Uj-A0C7k.roa (hash: rx/yJfhhixvb/560wKVAPp4PPBkdDEWYgcp5l237Szs=)
4: YELUwe4nammHucxrbZyOcSXhQAs.roa (hash: F7evvDSLJ4aaJnnTjKcdJcahJaI+uHzuDY+hV5o5tME=)
5: sUq6i2B0k5NHjoPDYObL110Vb4k.crl (hash: AZCy2zAKlYFM0iUJmJbKPUs+xMXnIQos0jZjFfHUdJY=)
6: u0aUu0b_iEvlUDq3juqga9PBn0M.roa (hash: I2lvIAd5dytk2OpXdsqlzCje+prqBKxhEoVZ7EyyIW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:73:5a:cb:42:78:dd:31:5b:50:88:66:13:95:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
Validity
Not Before: Nov 4 14:00:38 2025 GMT
Not After : Nov 5 14:00:38 2025 GMT
Subject: CN=8b12144f855ca564172fb70f4fe57aee56d7bdc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:a7:a0:ff:86:74:61:50:d8:e5:61:5d:11:
54:4c:81:02:75:d4:e9:3c:db:6b:91:72:0e:8e:7f:
7f:a5:2f:fe:99:d1:4b:7b:68:04:c1:53:af:2c:33:
77:5a:3f:2d:04:45:72:6b:b1:c1:f3:d2:fe:e1:c7:
53:f4:16:7e:0e:de:12:7b:02:53:86:30:e3:e2:d3:
74:49:f7:aa:99:eb:5f:be:bf:b7:63:51:90:72:3a:
12:b1:3d:f1:21:99:72:04:c4:6f:b6:3e:4a:5a:02:
f9:94:9d:dc:b7:ef:ca:0b:b6:0f:61:0b:c9:e0:fe:
74:23:f0:0d:a7:ef:ab:8b:28:43:95:b2:8b:28:59:
5e:b6:f1:99:fd:56:ec:0b:87:5a:c0:e9:ed:57:25:
a5:0c:04:40:f9:df:16:5f:4e:b4:db:a2:7b:ec:eb:
e2:0a:5c:6b:e3:19:90:fa:e6:09:35:9f:e0:bd:e8:
25:f9:8b:75:b5:34:a3:d0:4e:ad:42:1d:3f:38:3f:
c4:b7:fa:40:9c:6a:2b:24:14:e8:89:27:fd:f7:fb:
21:7d:3f:ba:50:6d:3f:14:40:d2:b6:94:77:fd:b0:
25:d6:f7:e3:2d:13:77:44:ba:a7:d4:11:be:9d:e9:
97:b8:c9:81:9d:b9:fc:12:0f:2e:d5:2d:e3:17:77:
cc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:12:14:4F:85:5C:A5:64:17:2F:B7:0F:4F:E5:7A:EE:56:D7:BD:C4
X509v3 Authority Key Identifier:
keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:49:5b:d3:37:f7:dc:6c:d8:1d:e5:fe:09:9a:4d:69:82:43:
77:5b:3c:83:ec:e3:9b:25:b7:b5:c4:10:bd:7f:17:fb:a6:ca:
12:0a:f7:b3:f4:e5:1e:68:5e:90:9d:d7:4e:49:73:28:58:d0:
2b:12:86:ce:24:77:1c:c2:f3:5e:19:b5:39:db:31:64:1d:59:
c1:aa:d8:c4:aa:66:19:5c:d6:be:bd:99:ba:e9:76:53:43:ca:
9a:5c:23:fe:84:ad:48:d7:c2:ac:b4:cc:2d:a8:b2:75:ad:86:
50:d8:87:cd:43:6f:0b:57:6e:6d:ce:68:e5:5b:30:00:41:df:
9c:78:ba:e0:d4:f6:3f:f5:dd:2f:f6:6b:ae:f6:e7:74:30:93:
f6:c8:f5:df:63:23:4f:f7:34:17:e1:e4:d1:7a:e9:ce:a1:55:
f4:ab:dd:e7:73:b1:1b:1d:80:0f:df:e8:b4:91:f3:73:6a:89:
ed:05:45:af:bb:de:92:73:43:4d:be:d6:3d:96:d8:01:1a:54:
b1:ba:d5:2d:68:14:c0:63:6e:e4:78:89:21:1d:66:87:3c:a4:
fc:44:32:73:71:4b:d0:f3:ce:2b:35:9f:06:16:b5:6b:fd:ec:
da:68:a9:00:0c:8d:7a:88:41:2d:25:a3:b5:7c:6a:7b:20:17:
32:ab:23:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK3Nay0J43TFbUIhmE5V+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNGFiYThiNjA3NDkzOTM0NzhlODNjMzYwZTZjYmQ3NWQx
NTZmODkwHhcNMjUxMTA0MTQwMDM4WhcNMjUxMTA1MTQwMDM4WjAzMTEwLwYDVQQD
Eyg4YjEyMTQ0Zjg1NWNhNTY0MTcyZmI3MGY0ZmU1N2FlZTU2ZDdiZGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2qnoP+GdGFQ2OVhXRFUTIECddTp
PNtrkXIOjn9/pS/+mdFLe2gEwVOvLDN3Wj8tBEVya7HB89L+4cdT9BZ+Dt4SewJT
hjDj4tN0Sfeqmetfvr+3Y1GQcjoSsT3xIZlyBMRvtj5KWgL5lJ3ct+/KC7YPYQvJ
4P50I/ANp++riyhDlbKLKFletvGZ/VbsC4dawOntVyWlDARA+d8WX06026J77Ovi
Clxr4xmQ+uYJNZ/gvegl+Yt1tTSj0E6tQh0/OD/Et/pAnGorJBToiSf99/shfT+6
UG0/FEDStpR3/bAl1vfjLRN3RLqn1BG+nemXuMmBnbn8Eg8u1S3jF3fMSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsSFE+FXKVkFy+3D0/leu5W173EMB8GA1UdIwQY
MBaAFLFKuotgdJOTR46Dw2Dmy9ddFW+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYt
Y2Y2YzMwNTIxMmViLzEvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYtY2Y2YzMwNTIxMmVi
LzEvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjElb0zf3
3GzYHeX+CZpNaYJDd1s8g+zjmyW3tcQQvX8X+6bKEgr3s/TlHmhekJ3XTklzKFjQ
KxKGziR3HMLzXhm1OdsxZB1ZwarYxKpmGVzWvr2Zuul2U0PKmlwj/oStSNfCrLTM
Laiyda2GUNiHzUNvC1dubc5o5VswAEHfnHi64NT2P/XdL/ZrrvbndDCT9sj132Mj
T/c0F+Hk0XrpzqFV9Kvd53OxGx2AD9/otJHzc2qJ7QVFr7veknNDTb7WPZbYARpU
sbrVLWgUwGNu5HiJIR1mhzyk/EQyc3FL0PPOKzWfBha1a/3s2mipAAyNeohBLSWj
tXxqeyAXMqsjMg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:47 2025 by rpki-client