Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
File: s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json)
Hash identifier: vCJTbS7sJDPj3qPnIpwrYemNU6PGXgOVLEEOTwsEwXs=
Subject key identifier: A9:43:44:32:D7:B5:9E:91:F0:70:77:59:02:8A:DE:5D:DB:97:8A:C8
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial: 019A4F98C48FA704F34B4A60C7AF1F89137A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 16:00:03 +0000
Manifest this update: Tue 04 Nov 2025 16:00:03 +0000
Manifest next update: Wed 05 Nov 2025 16:00:03 +0000
Files and hashes: 1: 5WxXf6dS__Evv8ybNdjAs3Nto-g.roa (hash: y6JQKN1GUMZnwd9TH2DZ03UU+crYCRvw3vTZfmRAIuw=)
2: 8keuoYHRmEN7a8dM4R3KAZIUMn8.roa (hash: cqhsmkY13XgBA/8McBrRobM59idSx8HxeP3LI73UX3s=)
3: _g7tJv9RQ8GKBzh3JoIFLDhg6Os.roa (hash: lCKjV64dwqXs6VagiwwJOVKqACy5VCGM5CrdkZRYvvY=)
4: fMI-jCDaaLsxpmL0Z0hMaMI0pwA.roa (hash: Ft2AV1Fb/Osk91o2uc7E3/mf/b9LB0/k5lu+soQUSmI=)
5: o0jeoBjm6A2tZp_sdpXJQxSFq9g.roa (hash: 0tJFYrvs37c2RcoKNsABjGXFSJGBQds9qdtyJiQGJI4=)
6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: 9YhGqFxDCDxINi41TFWGZ4j59XHX2u+1VEBu/QjVUoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:c4:8f:a7:04:f3:4b:4a:60:c7:af:1f:89:13:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Validity
Not Before: Nov 4 16:00:03 2025 GMT
Not After : Nov 5 16:00:03 2025 GMT
Subject: CN=a9434432d7b59e91f0707759028ade5ddb978ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:81:03:1e:e3:22:52:25:b7:48:9f:92:5b:38:
89:f7:84:14:74:f3:00:4b:35:a9:d0:ab:ff:28:b2:
b2:bd:73:a6:93:fa:a8:63:b3:2f:18:96:9d:2d:e5:
c4:7b:fc:fc:40:bd:19:51:61:b1:fd:15:b9:b8:7d:
e1:f7:60:67:1c:7f:62:e5:fa:b9:a0:57:71:b4:90:
da:14:89:65:dc:81:55:26:21:89:b0:c6:aa:b2:2c:
fb:9a:e0:7d:37:66:81:bc:f8:b4:52:e2:f6:42:26:
69:27:05:4e:c6:85:13:e7:b2:62:28:39:2d:26:20:
b7:95:16:93:bd:aa:4f:f9:9d:e3:58:4c:52:86:ec:
7e:06:cc:db:5d:53:7f:08:3d:9f:93:9b:21:a3:c3:
ec:9e:fb:56:65:97:70:f4:7b:05:e0:cc:ea:45:f1:
c4:f9:31:8b:1e:06:f3:97:9e:b3:a7:93:fc:15:d8:
00:22:6e:30:a7:89:77:74:7e:ac:10:f2:ba:8d:41:
65:71:9a:df:b6:3d:1e:c2:94:5d:e1:3d:96:d2:50:
09:9f:c2:c7:25:d1:27:19:e7:e9:c9:63:96:19:e0:
dd:d7:81:f4:4d:ce:d6:42:46:ce:62:8c:fb:c5:65:
10:53:3e:27:02:a8:0c:78:53:c1:f7:5a:c5:62:76:
f9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:43:44:32:D7:B5:9E:91:F0:70:77:59:02:8A:DE:5D:DB:97:8A:C8
X509v3 Authority Key Identifier:
keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:14:b4:26:63:7b:95:a0:df:9c:71:6e:c4:18:e0:ae:23:c9:
72:a4:71:e9:79:8b:cf:e3:90:18:60:52:20:d4:a4:cf:47:1b:
a9:70:03:9e:34:da:53:87:fd:fd:f7:39:c8:54:ec:ab:6a:a9:
37:1a:2d:6e:80:eb:c1:4f:e3:e7:19:bc:5a:36:a0:6d:b4:8f:
f0:47:db:2a:85:0c:d7:b9:8f:2d:42:59:15:64:ea:cb:14:05:
83:fe:dc:0a:ee:2a:63:f3:11:5f:27:42:02:20:35:8f:7f:98:
73:1a:9e:75:bf:4e:ce:0c:5b:a1:80:d6:a4:11:17:fd:81:76:
c5:e9:69:19:ca:39:5b:40:1c:b5:50:3e:ed:ee:78:2c:ac:e9:
00:fc:af:83:9c:d7:62:6b:69:66:f6:ef:61:ad:11:82:8a:d8:
d6:85:58:05:6f:a9:bf:9f:f5:35:1e:28:14:f9:c4:27:5b:ee:
62:91:5d:45:18:7d:ba:5c:ef:a4:3b:8d:22:c4:e4:7f:bc:77:
5d:1a:be:1d:a7:26:50:3e:04:a3:85:b0:bc:29:5d:bc:dc:a8:
94:12:9a:61:3c:72:b3:a1:01:56:14:f4:17:f2:bb:d2:8d:c7:
8c:6d:d2:fb:ed:1f:f5:07:42:dd:ca:e3:76:fd:70:6e:06:a8:
7c:93:10:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmMSPpwTzS0pgx68fiRN6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOGJiNjJhNDdiMWEyYWVkYjcwZjMyZjU4Yzk3OWJhMGM3
NzdmMDYwHhcNMjUxMTA0MTYwMDAzWhcNMjUxMTA1MTYwMDAzWjAzMTEwLwYDVQQD
EyhhOTQzNDQzMmQ3YjU5ZTkxZjA3MDc3NTkwMjhhZGU1ZGRiOTc4YWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oEDHuMiUiW3SJ+SWziJ94QUdPMA
SzWp0Kv/KLKyvXOmk/qoY7MvGJadLeXEe/z8QL0ZUWGx/RW5uH3h92BnHH9i5fq5
oFdxtJDaFIll3IFVJiGJsMaqsiz7muB9N2aBvPi0UuL2QiZpJwVOxoUT57JiKDkt
JiC3lRaTvapP+Z3jWExShux+BszbXVN/CD2fk5sho8PsnvtWZZdw9HsF4MzqRfHE
+TGLHgbzl56zp5P8FdgAIm4wp4l3dH6sEPK6jUFlcZrftj0ewpRd4T2W0lAJn8LH
JdEnGefpyWOWGeDd14H0Tc7WQkbOYoz7xWUQUz4nAqgMeFPB91rFYnb5CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlDRDLXtZ6R8HB3WQKK3l3bl4rIMB8GA1UdIwQY
MBaAFLOLtipHsaKu23DzL1jJeboMd38GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgt
MDYwNWMwODlmYzM4LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgtMDYwNWMwODlmYzM4
LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxS0JmN7
laDfnHFuxBjgriPJcqRx6XmLz+OQGGBSINSkz0cbqXADnjTaU4f9/fc5yFTsq2qp
NxotboDrwU/j5xm8WjagbbSP8EfbKoUM17mPLUJZFWTqyxQFg/7cCu4qY/MRXydC
AiA1j3+Ycxqedb9OzgxboYDWpBEX/YF2xelpGco5W0ActVA+7e54LKzpAPyvg5zX
YmtpZvbvYa0RgorY1oVYBW+pv5/1NR4oFPnEJ1vuYpFdRRh9ulzvpDuNIsTkf7x3
XRq+HacmUD4Eo4WwvCldvNyolBKaYTxys6EBVhT0F/K70o3HjG3S++0f9QdC3crj
dv1wbgaofJMQjA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:54 2025 by rpki-client