Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
File: SfA190v2NQvDef8uJTiC0kaO9Yg.mft (raw, json)
Hash identifier: FxVSYWD/zkEpU3Ym5scLyeF9grYNIQB5W32NYYMg6Dw=
Subject key identifier: 4F:69:7C:17:AD:2B:F3:0A:BB:94:5C:09:F1:CA:C0:84:6B:71:C9:C9
Authority key identifier: 49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
Certificate issuer: /CN=49f035f74bf6350bc379ff2e253882d2468ef588
Certificate serial: 019A4E19177C513227170C5E644D07C7D8FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
Manifest number: 0422
Signing time: Tue 04 Nov 2025 09:00:58 +0000
Manifest this update: Tue 04 Nov 2025 09:00:58 +0000
Manifest next update: Wed 05 Nov 2025 09:00:58 +0000
Files and hashes: 1: SfA190v2NQvDef8uJTiC0kaO9Yg.crl (hash: 3yH+5m7ON73pTsim2vmDGJnsnb+6ZgkVmm2nhOYHqp4=)
2: wbmZO-HC2oZGGdDiSLm7Xy-yCzU.roa (hash: G5A8w6EKnJ7KNviXJvfO4lYZfTcipjXbs1g3Za2z4wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:17:7c:51:32:27:17:0c:5e:64:4d:07:c7:d8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f035f74bf6350bc379ff2e253882d2468ef588
Validity
Not Before: Nov 4 09:00:58 2025 GMT
Not After : Nov 5 09:00:58 2025 GMT
Subject: CN=4f697c17ad2bf30abb945c09f1cac0846b71c9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:de:08:80:7d:82:fe:2a:5a:f9:ff:7f:86:
48:4d:28:9f:ca:7f:4d:90:0d:1b:3a:a5:34:63:95:
52:94:b2:3d:d2:c9:83:92:af:29:3f:ef:fd:ff:2a:
24:36:80:a5:b0:bf:58:59:4f:c8:2f:12:98:92:79:
25:8f:76:5c:58:fb:80:2f:43:7d:4f:95:ba:a4:d0:
a0:8c:6e:7a:5a:95:d3:d4:eb:cc:ee:4a:69:6a:35:
96:20:ab:bc:18:32:ac:79:7d:d1:48:99:8a:77:bd:
a6:6b:c1:e0:dc:93:2d:f3:63:de:50:6d:03:29:37:
d7:cd:fc:05:d6:a2:07:f0:c7:2f:0f:08:3a:07:d2:
50:92:3d:b2:37:25:90:37:37:a4:1b:b9:60:eb:6b:
1f:74:35:87:fd:3c:8f:26:e9:ab:75:60:a4:be:88:
cb:73:cc:8b:28:ba:fd:92:64:42:86:62:c7:6e:81:
60:da:6f:00:e7:82:b9:62:64:ff:94:51:42:7b:2b:
e7:9f:2b:82:bf:04:d2:79:42:1d:dc:f7:10:8c:7e:
63:9d:fd:9b:12:99:e1:ff:f4:68:54:c9:ca:bc:22:
71:54:40:2e:67:1c:f6:8f:04:1a:48:f5:56:96:24:
8d:5e:44:1e:e3:d3:12:36:1d:fa:4d:76:28:54:d2:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:69:7C:17:AD:2B:F3:0A:BB:94:5C:09:F1:CA:C0:84:6B:71:C9:C9
X509v3 Authority Key Identifier:
keyid:49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:57:51:6b:fc:cd:79:d4:ff:7f:da:0e:90:d3:a8:43:db:2a:
20:1d:b9:41:00:20:30:c9:bd:ec:06:4c:78:3c:5f:08:01:dc:
e2:11:f3:4e:c6:b1:36:a0:90:e3:ec:f7:4d:d2:a0:cd:00:61:
5c:5f:81:25:61:76:d6:b1:a0:b3:e0:5c:2a:ab:10:df:82:9f:
9b:ca:34:b2:a3:02:2b:ad:30:25:b0:15:1a:a3:50:ab:bb:0f:
98:74:67:8d:16:a7:8e:3e:94:28:22:31:f6:50:dd:86:8d:b8:
3c:09:3b:2f:5d:a8:55:ff:74:f1:a2:dc:b8:e8:e8:a9:60:b0:
c0:27:9b:7d:ba:13:2d:c2:33:6e:aa:c6:60:40:4d:b3:88:5c:
01:8d:f3:3e:e2:70:39:28:a9:6a:a5:98:55:99:c4:51:ed:68:
43:c3:f0:a8:87:5b:87:67:60:4a:d3:12:03:8e:5b:d0:48:7a:
5a:b0:b1:31:47:bb:eb:e9:ec:31:8e:65:4c:bb:72:75:dc:a3:
44:4e:bb:04:fb:65:7f:27:7b:3c:55:fc:77:3b:65:83:8d:80:
a6:3d:70:cf:00:e1:b0:07:99:9c:29:17:11:4d:db:86:19:86:
4f:0f:8c:d9:d7:2f:a6:a3:f7:99:12:4b:f7:b8:67:69:1c:44:
f0:f3:3c:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGRd8UTInFwxeZE0Hx9j/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjAzNWY3NGJmNjM1MGJjMzc5ZmYyZTI1Mzg4MmQyNDY4
ZWY1ODgwHhcNMjUxMTA0MDkwMDU4WhcNMjUxMTA1MDkwMDU4WjAzMTEwLwYDVQQD
Eyg0ZjY5N2MxN2FkMmJmMzBhYmI5NDVjMDlmMWNhYzA4NDZiNzFjOWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTreCIB9gv4qWvn/f4ZITSifyn9N
kA0bOqU0Y5VSlLI90smDkq8pP+/9/yokNoClsL9YWU/ILxKYknklj3ZcWPuAL0N9
T5W6pNCgjG56WpXT1OvM7kppajWWIKu8GDKseX3RSJmKd72ma8Hg3JMt82PeUG0D
KTfXzfwF1qIH8McvDwg6B9JQkj2yNyWQNzekG7lg62sfdDWH/TyPJumrdWCkvojL
c8yLKLr9kmRChmLHboFg2m8A54K5YmT/lFFCeyvnnyuCvwTSeUId3PcQjH5jnf2b
Epnh//RoVMnKvCJxVEAuZxz2jwQaSPVWliSNXkQe49MSNh36TXYoVNKgwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9pfBetK/MKu5RcCfHKwIRrccnJMB8GA1UdIwQY
MBaAFEnwNfdL9jULw3n/LiU4gtJGjvWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMmZkOGUtMmQzOC00YWIxLTg0YjUt
OWVmMTI5ZWFkZTc4LzEvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wMmZkOGUtMmQzOC00YWIxLTg0YjUtOWVmMTI5ZWFkZTc4
LzEvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFdRa/zN
edT/f9oOkNOoQ9sqIB25QQAgMMm97AZMeDxfCAHc4hHzTsaxNqCQ4+z3TdKgzQBh
XF+BJWF21rGgs+BcKqsQ34Kfm8o0sqMCK60wJbAVGqNQq7sPmHRnjRanjj6UKCIx
9lDdho24PAk7L12oVf908aLcuOjoqWCwwCebfboTLcIzbqrGYEBNs4hcAY3zPuJw
OSipaqWYVZnEUe1oQ8PwqIdbh2dgStMSA45b0Eh6WrCxMUe76+nsMY5lTLtyddyj
RE67BPtlfyd7PFX8dztlg42Apj1wzwDhsAeZnCkXEU3bhhmGTw+M2dcvpqP3mRJL
97hnaRxE8PM8Gw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:56 2025 by rpki-client