Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
File: sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft (raw, json)
Hash identifier: QSXN5GRC7PZH4qz5f9qsChiZNBhoR4isWxmNcIw6AjQ=
Subject key identifier: 28:EC:76:85:CA:E1:44:64:C4:4A:37:1B:A9:2D:2C:BF:A2:56:0A:84
Authority key identifier: B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
Certificate issuer: /CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Certificate serial: 019A4F2B599291A62470165C15F81B68D3AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
Manifest number: 0B89
Signing time: Tue 04 Nov 2025 14:00:32 +0000
Manifest this update: Tue 04 Nov 2025 14:00:32 +0000
Manifest next update: Wed 05 Nov 2025 14:00:32 +0000
Files and hashes: 1: pp7YHiA9bCcV4n9KXbmtGvXw0Hw.roa (hash: xXtqKC6cCm9cF/kgqDQZlMKjBn2ULr5S39vUn/a3JHc=)
2: sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl (hash: JuEiLvsCvP2m1K02BFbXwsVWzHkziW9SpRk8eUZdB/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:59:92:91:a6:24:70:16:5c:15:f8:1b:68:d3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Validity
Not Before: Nov 4 14:00:32 2025 GMT
Not After : Nov 5 14:00:32 2025 GMT
Subject: CN=28ec7685cae14464c44a371ba92d2cbfa2560a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:de:da:8e:de:ac:40:68:3f:3c:9a:10:90:
d5:75:67:56:6e:32:06:53:5f:41:63:26:87:5f:b8:
c9:bc:78:a4:da:a0:34:fd:6e:d0:7a:68:20:ce:6c:
82:01:36:31:ed:19:54:f2:4c:f2:fd:b9:db:76:28:
e0:dc:4b:eb:b6:37:e6:42:8b:b8:2c:b1:e2:30:86:
a1:88:a4:4c:4b:9e:9a:0b:f7:c3:64:8e:65:87:8b:
78:3b:f6:29:6b:2e:d1:88:6d:51:6b:95:2d:c9:6e:
8f:ae:b7:ef:5d:6e:e2:6a:b4:ba:58:c3:7b:88:94:
fd:a5:af:57:1c:6f:10:9d:d6:af:19:11:7d:91:a5:
6c:82:3a:90:6e:5e:98:f1:4a:45:9b:c8:81:96:79:
53:e0:ac:1c:5b:ed:22:2c:d0:04:2b:c8:70:cf:12:
52:67:01:4f:d3:69:ab:7e:b8:7f:e7:e2:64:09:a7:
10:d6:7b:3b:34:96:72:b4:c5:66:13:89:60:17:d9:
fc:f6:0d:27:c5:44:bb:e3:32:52:e4:89:bd:f7:22:
42:6e:36:04:d5:80:b5:ca:7e:6a:5d:c5:ac:b0:84:
ab:ca:83:72:f6:31:9a:33:97:5a:83:e1:38:74:ae:
82:c8:57:03:c1:5a:c1:32:1b:5b:eb:ba:ef:63:29:
b7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EC:76:85:CA:E1:44:64:C4:4A:37:1B:A9:2D:2C:BF:A2:56:0A:84
X509v3 Authority Key Identifier:
keyid:B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d9:f0:eb:66:a1:c1:ed:32:a8:6f:d1:92:d4:2e:75:47:f7:
eb:3f:4d:8a:15:a9:8c:31:f2:fb:ff:7e:71:fa:42:c2:29:a3:
b5:39:9e:87:7c:50:96:e3:d5:5c:7f:65:63:0d:af:98:77:3a:
03:0e:ff:6a:1a:8e:93:f8:d8:f9:2a:9c:d4:2c:40:78:0f:3e:
0f:b2:2b:c0:b7:fe:d9:f7:e5:d8:a4:0a:1e:48:79:db:35:80:
6c:da:b0:17:f2:fa:41:13:59:83:6e:87:71:56:0e:40:81:45:
d2:98:51:c0:92:50:a7:37:53:80:49:45:bf:d0:e4:8c:56:3e:
91:bc:8b:6f:4a:7d:dc:a3:eb:44:10:6d:ee:c7:84:7b:51:3e:
4c:58:18:a3:68:ca:41:27:92:fb:3d:e0:f0:d0:63:82:c2:ee:
c2:22:2e:68:d8:a6:06:ec:b0:f7:0a:97:76:3d:ea:47:2a:f1:
8f:4a:db:28:88:6f:f0:80:2a:55:81:7c:f3:e8:db:63:3b:75:
72:d6:b7:18:78:33:3f:26:57:f2:f5:34:ed:02:67:2f:c6:70:
d6:e6:65:db:4d:59:05:82:9e:40:6c:c1:83:b0:9b:00:50:5a:
5e:f6:f3:f4:ab:75:c1:89:f4:b7:66:44:50:7d:01:3a:89:63:
91:64:25:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK1mSkaYkcBZcFfgbaNOtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOTU0OWQ2ODMwNWUyOWRmYjAwMDY5YTUyZDNkNGUxZjJj
NTYwNGMwHhcNMjUxMTA0MTQwMDMyWhcNMjUxMTA1MTQwMDMyWjAzMTEwLwYDVQQD
EygyOGVjNzY4NWNhZTE0NDY0YzQ0YTM3MWJhOTJkMmNiZmEyNTYwYTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbne2o7erEBoPzyaEJDVdWdWbjIG
U19BYyaHX7jJvHik2qA0/W7QemggzmyCATYx7RlU8kzy/bnbdijg3EvrtjfmQou4
LLHiMIahiKRMS56aC/fDZI5lh4t4O/Ypay7RiG1Ra5UtyW6PrrfvXW7iarS6WMN7
iJT9pa9XHG8QndavGRF9kaVsgjqQbl6Y8UpFm8iBlnlT4KwcW+0iLNAEK8hwzxJS
ZwFP02mrfrh/5+JkCacQ1ns7NJZytMVmE4lgF9n89g0nxUS74zJS5Im99yJCbjYE
1YC1yn5qXcWssISryoNy9jGaM5dag+E4dK6CyFcDwVrBMhtb67rvYym3lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjsdoXK4URkxEo3G6ktLL+iVgqEMB8GA1UdIwQY
MBaAFLGVSdaDBeKd+wAGmlLT1OHyxWBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1pWSjFvTUY0cDM3QUFhYVV0UFU0ZkxGWUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hZjFmNzItY2U4ZS00MmIxLWJlNWEt
YTI4M2M5MDQ4ZjBmLzEvc1pWSjFvTUY0cDM3QUFhYVV0UFU0ZkxGWUV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hZjFmNzItY2U4ZS00MmIxLWJlNWEtYTI4M2M5MDQ4ZjBm
LzEvc1pWSjFvTUY0cDM3QUFhYVV0UFU0ZkxGWUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNnw62ah
we0yqG/RktQudUf36z9NihWpjDHy+/9+cfpCwimjtTmeh3xQluPVXH9lYw2vmHc6
Aw7/ahqOk/jY+Sqc1CxAeA8+D7IrwLf+2ffl2KQKHkh52zWAbNqwF/L6QRNZg26H
cVYOQIFF0phRwJJQpzdTgElFv9DkjFY+kbyLb0p93KPrRBBt7seEe1E+TFgYo2jK
QSeS+z3g8NBjgsLuwiIuaNimBuyw9wqXdj3qRyrxj0rbKIhv8IAqVYF88+jbYzt1
cta3GHgzPyZX8vU07QJnL8Zw1uZl201ZBYKeQGzBg7CbAFBaXvbz9Kt1wYn0t2ZE
UH0BOoljkWQl2A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:04 2025 by rpki-client