Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
File: sSZ6Uay2bymRvqUkP-OIBolxofE.mft (raw, json)
Hash identifier: GRV8qpfmF85Q2tja1QXWfIdxZt3dtOTH73EIShSv3is=
Subject key identifier: 6C:0B:F6:DB:64:0A:4C:9B:56:7A:4E:3E:EF:B6:9E:2A:A4:5F:81:57
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial: 019A4CCEB42CBA12D5AFF39CC65157BAA187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 03:00:06 +0000
Manifest this update: Tue 04 Nov 2025 03:00:06 +0000
Manifest next update: Wed 05 Nov 2025 03:00:06 +0000
Files and hashes: 1: CU0pD-qyopGrF2gG1g9vsUEj3PE.roa (hash: 0vq62FNq9PmPpi5DYpzPDW7Ij6TgGimr0Wq2pd7Z3Os=)
2: ZWlEyMmdqJGSNqxwfiZSm70MebY.roa (hash: J3jPxKXZF3DeIN3lfslH24QMc9DgqTN2xea7MsxjKgg=)
3: ZwlANAaAmvWFJg4oN0Kigut0u8A.roa (hash: xCGLRl7E5Z55wWdT0lqlDrtOMIU0KHDV+L6PHOcX4k0=)
4: eQwhkUJDD3fHnBNUmTCO1wm_-Mo.roa (hash: BapbGy+3qttaGIgQRgRll0fuWWSygKB9RzxksoJwcro=)
5: la7bz71ihLeyogVuoQIY1GT3314.roa (hash: 5hafRGGQbIP56cRQdMYLUdF59or9sDzUcmPM82jh51E=)
6: sSZ6Uay2bymRvqUkP-OIBolxofE.crl (hash: Yi1KxwX+pT2TMzfVANyxX/vvKWi3tBBMtCw0N/r6NI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 03:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:ce:b4:2c:ba:12:d5:af:f3:9c:c6:51:57:ba:a1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
Validity
Not Before: Nov 4 03:00:06 2025 GMT
Not After : Nov 5 03:00:06 2025 GMT
Subject: CN=6c0bf6db640a4c9b567a4e3eefb69e2aa45f8157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:73:ca:4f:84:a2:80:dc:fa:52:b1:24:c7:
97:c4:89:1f:ac:ea:d2:90:e9:06:35:be:06:b2:47:
c0:51:de:5c:9b:3b:c0:36:43:af:a1:8e:fa:1b:3e:
d9:09:c7:da:17:b8:b5:f5:fb:ce:d4:58:6e:43:bb:
85:61:a9:51:c0:42:73:07:e4:04:aa:2c:46:5f:8a:
0c:fe:3d:c8:e2:21:53:4e:51:91:64:b6:67:eb:d1:
fd:48:52:b3:64:a0:e3:3a:b0:01:01:00:89:2e:65:
6d:06:3a:1a:5e:6e:a2:e5:f0:47:3f:ea:c6:5a:0b:
e6:43:bf:a5:a1:e5:d5:0f:7c:15:f0:40:98:70:d2:
50:09:b3:68:66:14:e7:96:b2:f5:61:c0:fe:e2:2f:
da:2f:49:21:0e:9d:0c:26:6b:78:42:fb:0a:48:cd:
bd:59:38:c2:b9:ef:85:e8:ee:8c:73:63:ea:5c:f6:
0e:e1:a2:bc:3f:50:d2:06:4e:1d:7f:f0:b7:a8:bf:
2e:4c:0d:b4:3f:a0:68:c8:20:50:9c:bb:7d:25:f7:
1c:c6:95:ca:aa:58:0c:4f:7e:fc:a5:1d:6b:b5:fb:
85:5c:6b:ea:49:9a:25:f3:a9:51:1c:5b:29:c3:16:
fe:5e:4c:b3:5a:33:51:b8:81:93:8e:8b:b6:db:9e:
0c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0B:F6:DB:64:0A:4C:9B:56:7A:4E:3E:EF:B6:9E:2A:A4:5F:81:57
X509v3 Authority Key Identifier:
keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:97:f1:cb:4b:32:6b:7e:32:f6:80:4b:e7:f1:a2:ec:ab:41:
ae:a3:f0:71:2d:fa:b1:de:e7:d9:c4:15:1d:f5:82:9c:f8:81:
36:2a:40:18:59:fd:fc:20:b1:40:19:70:b6:69:6b:cf:d1:d5:
08:52:1d:e8:6b:40:fc:f8:e7:28:79:20:42:5c:37:f6:be:e0:
9d:48:2c:24:58:1e:a4:7d:0b:66:09:9f:d8:72:79:c2:f4:8c:
6e:15:18:4f:c9:ef:9a:ad:2f:70:e3:46:36:cf:05:97:3a:1e:
bd:e8:7b:98:e5:00:1f:60:73:3c:3a:78:94:ad:a8:4b:61:fe:
a8:53:31:53:6e:4c:79:8d:b3:a7:9e:c9:53:1a:4b:b8:44:12:
f6:d1:3d:f7:7b:ca:8a:b2:2e:9b:92:5e:ea:a7:ef:8c:e1:b5:
74:2f:52:73:f9:0b:c9:4e:1b:ab:44:2a:32:fe:22:d2:f2:97:
33:ed:05:8c:da:97:95:b8:2a:ae:ed:77:69:69:52:21:5e:29:
13:90:32:86:3e:3e:a6:49:a8:a1:b8:ab:60:49:30:08:15:3d:
f7:1f:51:6c:f8:3f:79:92:d7:98:a9:b1:fc:5b:0c:56:e8:10:
4d:46:e3:15:d4:01:0a:91:93:c8:3a:bf:90:71:0e:9c:51:09:
4e:91:96:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMzrQsuhLVr/OcxlFXuqGHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMjY3YTUxYWNiNjZmMjk5MWJlYTUyNDNmZTM4ODA2ODk3
MWExZjEwHhcNMjUxMTA0MDMwMDA2WhcNMjUxMTA1MDMwMDA2WjAzMTEwLwYDVQQD
Eyg2YzBiZjZkYjY0MGE0YzliNTY3YTRlM2VlZmI2OWUyYWE0NWY4MTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwJzyk+EooDc+lKxJMeXxIkfrOrS
kOkGNb4GskfAUd5cmzvANkOvoY76Gz7ZCcfaF7i19fvO1FhuQ7uFYalRwEJzB+QE
qixGX4oM/j3I4iFTTlGRZLZn69H9SFKzZKDjOrABAQCJLmVtBjoaXm6i5fBHP+rG
WgvmQ7+loeXVD3wV8ECYcNJQCbNoZhTnlrL1YcD+4i/aL0khDp0MJmt4QvsKSM29
WTjCue+F6O6Mc2PqXPYO4aK8P1DSBk4df/C3qL8uTA20P6BoyCBQnLt9JfccxpXK
qlgMT378pR1rtfuFXGvqSZol86lRHFspwxb+XkyzWjNRuIGTjou2254MKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwL9ttkCkybVnpOPu+2niqkX4FXMB8GA1UdIwQY
MBaAFLEmelGstm8pkb6lJD/jiAaJcaHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1NaNlVheTJieW1SdnFVa1AtT0lCb2x4b2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNzRjYTItM2RlNi00YjY5LWEwMDAt
OTRkMWI4OWY4Y2IyLzEvc1NaNlVheTJieW1SdnFVa1AtT0lCb2x4b2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9kNzRjYTItM2RlNi00YjY5LWEwMDAtOTRkMWI4OWY4Y2Iy
LzEvc1NaNlVheTJieW1SdnFVa1AtT0lCb2x4b2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATpfxy0sy
a34y9oBL5/Gi7KtBrqPwcS36sd7n2cQVHfWCnPiBNipAGFn9/CCxQBlwtmlrz9HV
CFId6GtA/PjnKHkgQlw39r7gnUgsJFgepH0LZgmf2HJ5wvSMbhUYT8nvmq0vcONG
Ns8Flzoeveh7mOUAH2BzPDp4lK2oS2H+qFMxU25MeY2zp57JUxpLuEQS9tE993vK
irIum5Je6qfvjOG1dC9Sc/kLyU4bq0QqMv4i0vKXM+0FjNqXlbgqru13aWlSIV4p
E5Ayhj4+pkmoobirYEkwCBU99x9RbPg/eZLXmKmx/FsMVugQTUbjFdQBCpGTyDq/
kHEOnFEJTpGWTg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:00 2025 by rpki-client