Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
File: _sTvIAvJ0n6e1_O8a1wFKS2EMro.mft (raw, json)
Hash identifier: TxBctLezXRcQ3HVlZAEpt+nop949q1rxjTC3kG5Ba9E=
Subject key identifier: 4A:87:32:5B:4F:06:DC:94:84:B0:34:DA:81:0D:B9:5B:8F:40:D0:29
Authority key identifier: FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
Certificate issuer: /CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Certificate serial: 019A5187AE7FA0924AD16ACBE3ED7B090F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
Manifest number: 042C
Signing time: Wed 05 Nov 2025 01:00:37 +0000
Manifest this update: Wed 05 Nov 2025 01:00:37 +0000
Manifest next update: Thu 06 Nov 2025 01:00:37 +0000
Files and hashes: 1: A-WEqq-qnquQ-k-HUeyR2Ta7Ai0.roa (hash: ulBE+6XQU+CVKwFHEP6pOstPObSTz9LyM8DJtWKzepw=)
2: _sTvIAvJ0n6e1_O8a1wFKS2EMro.crl (hash: /TEAHJq9igjG4LfyYq1ajla+BmicZECVV2jduMlQrOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:ae:7f:a0:92:4a:d1:6a:cb:e3:ed:7b:09:0f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Validity
Not Before: Nov 5 01:00:37 2025 GMT
Not After : Nov 6 01:00:37 2025 GMT
Subject: CN=4a87325b4f06dc9484b034da810db95b8f40d029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2f:da:07:c7:2e:ac:ab:c6:f5:65:50:a9:f2:
88:2d:0e:de:0e:90:32:64:8a:ad:a4:b7:8e:9a:b3:
46:ed:aa:23:cc:db:de:f5:9c:4b:7c:f0:34:27:15:
8a:ab:36:ee:cf:5a:f7:75:db:a5:9b:0b:0d:d6:8e:
ca:b7:9e:20:b7:63:1c:60:27:6f:68:ea:21:5b:b6:
7e:52:b6:28:29:06:5d:e6:6a:f2:9e:90:a2:26:7e:
d0:f2:82:a9:c3:bc:8e:ca:c1:32:7c:b5:19:4f:15:
67:9f:0c:4a:f2:1e:86:6d:35:b3:20:24:ea:eb:ed:
e9:af:c6:3e:bc:3c:66:10:5a:48:47:c7:11:8a:74:
d9:05:e9:9d:8e:1d:22:d8:3b:23:0a:79:59:f7:05:
0f:ba:9c:fe:28:de:a4:05:16:e8:87:9e:4c:f8:7a:
62:20:12:bc:1a:41:9e:2c:a1:60:66:47:7d:9b:1b:
fe:41:54:92:7d:ba:ca:ec:ae:c6:82:07:10:c3:25:
69:a5:ca:d9:fa:55:3f:d1:5e:1b:68:43:c4:f0:3f:
40:b9:c9:26:53:6b:02:5e:51:00:32:61:a6:60:51:
d9:85:c0:20:2e:a8:ec:f1:44:f1:06:c6:a6:9e:a0:
88:70:44:4d:d8:fc:8d:7e:9a:9f:b4:69:49:8f:d5:
cc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:87:32:5B:4F:06:DC:94:84:B0:34:DA:81:0D:B9:5B:8F:40:D0:29
X509v3 Authority Key Identifier:
keyid:FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:36:ae:89:43:3f:bc:3b:e2:75:1f:c0:f5:dc:4f:85:1d:d4:
5a:92:e8:20:23:e4:eb:88:d5:78:bc:b3:23:7c:8f:ce:e6:c1:
21:33:17:71:c1:67:91:d8:8e:f2:0c:ca:8d:f5:b1:e0:04:61:
b0:09:4b:73:f1:74:fb:b7:35:49:87:f0:78:2e:51:fa:77:c9:
7b:bd:c9:09:e3:3c:45:3f:85:58:6b:41:72:9d:62:91:6c:c0:
52:f2:36:7f:2a:85:8c:a0:67:5c:40:bf:67:cc:2e:69:3f:e0:
37:6a:43:77:71:93:9a:0c:8b:d1:92:de:5f:f1:fb:33:58:52:
7e:0b:b7:73:c5:8f:97:a5:ac:02:94:e5:9d:65:3b:1c:af:0c:
97:bb:97:93:89:d3:76:ef:73:a5:a8:5c:38:15:35:ef:ba:f3:
b1:15:2e:c3:fa:1e:44:b8:72:54:d9:c6:19:a8:3f:af:53:73:
10:4a:35:3c:bb:f1:03:75:bd:23:9d:41:72:17:fa:17:8d:1a:
08:fd:4a:ea:b5:f0:ee:30:9c:18:c6:d0:de:3b:b8:09:e6:0d:
69:35:d6:54:f0:ce:97:39:78:5c:38:f2:55:cd:c2:f3:0c:ef:
21:32:cd:94:9f:75:a2:b0:80:d9:2d:ba:a4:20:3e:d4:ce:45:
b7:f8:1c:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh65/oJJK0WrL4+17CQ8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzRlZjIwMGJjOWQyN2U5ZWQ3ZjNiYzZiNWMwNTI5MmQ4
NDMyYmEwHhcNMjUxMTA1MDEwMDM3WhcNMjUxMTA2MDEwMDM3WjAzMTEwLwYDVQQD
Eyg0YTg3MzI1YjRmMDZkYzk0ODRiMDM0ZGE4MTBkYjk1YjhmNDBkMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9C/aB8curKvG9WVQqfKILQ7eDpAy
ZIqtpLeOmrNG7aojzNve9ZxLfPA0JxWKqzbuz1r3ddulmwsN1o7Kt54gt2McYCdv
aOohW7Z+UrYoKQZd5mrynpCiJn7Q8oKpw7yOysEyfLUZTxVnnwxK8h6GbTWzICTq
6+3pr8Y+vDxmEFpIR8cRinTZBemdjh0i2DsjCnlZ9wUPupz+KN6kBRboh55M+Hpi
IBK8GkGeLKFgZkd9mxv+QVSSfbrK7K7GggcQwyVppcrZ+lU/0V4baEPE8D9Auckm
U2sCXlEAMmGmYFHZhcAgLqjs8UTxBsamnqCIcERN2PyNfpqftGlJj9XMwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqHMltPBtyUhLA02oENuVuPQNApMB8GA1UdIwQY
MBaAFP7E7yALydJ+ntfzvGtcBSkthDK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMt
NWVjY2VjOGQ5M2I0LzEvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMtNWVjY2VjOGQ5M2I0
LzEvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjauiUM/
vDvidR/A9dxPhR3UWpLoICPk64jVeLyzI3yPzubBITMXccFnkdiO8gzKjfWx4ARh
sAlLc/F0+7c1SYfweC5R+nfJe73JCeM8RT+FWGtBcp1ikWzAUvI2fyqFjKBnXEC/
Z8wuaT/gN2pDd3GTmgyL0ZLeX/H7M1hSfgu3c8WPl6WsApTlnWU7HK8Ml7uXk4nT
du9zpahcOBU177rzsRUuw/oeRLhyVNnGGag/r1NzEEo1PLvxA3W9I51Bchf6F40a
CP1K6rXw7jCcGMbQ3ju4CeYNaTXWVPDOlzl4XDjyVc3C8wzvITLNlJ91orCA2S26
pCA+1M5Ft/gcpQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:26:00 2025 by rpki-client