Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
File: s30V5DRw7wodxwEHQ5P-cPLfjQY.mft (raw, json)
Hash identifier: BVdGmcRSNRDYY+mjlw7RejIvHWgQeniVj0z03ECh6ok=
Subject key identifier: 8A:CD:6B:51:A4:1F:FC:5D:C1:A1:09:63:1C:EF:F7:80:CE:BA:95:53
Authority key identifier: B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06
Certificate issuer: /CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
Certificate serial: 019A53E446DD7E5F4C5617D0ADDC55E7F1A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
Manifest number: 07D4
Signing time: Wed 05 Nov 2025 12:01:00 +0000
Manifest this update: Wed 05 Nov 2025 12:01:00 +0000
Manifest next update: Thu 06 Nov 2025 12:01:00 +0000
Files and hashes: 1: htjbCi_8qWneZo93vjbuIGh7N8U.roa (hash: g/IDR+6xEAPBW47ZPcz7WOY/otLteI/yTBnpVyBmbgA=)
2: s30V5DRw7wodxwEHQ5P-cPLfjQY.crl (hash: yC/dhfPqZdtfWZ76w2erq7G5w7XtQXHQ1QrW1OhCZIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:46:dd:7e:5f:4c:56:17:d0:ad:dc:55:e7:f1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
Validity
Not Before: Nov 5 12:01:00 2025 GMT
Not After : Nov 6 12:01:00 2025 GMT
Subject: CN=8acd6b51a41ffc5dc1a109631ceff780ceba9553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:93:97:c5:a1:b8:96:85:6f:1f:81:82:f5:b9:
d1:87:ba:7d:c8:6b:62:ef:4a:f5:1f:60:85:79:fc:
bc:87:05:96:66:e2:8b:a8:da:61:2d:7c:98:c8:04:
14:2a:8c:6d:3a:30:fe:6d:8d:73:ba:d2:ef:a8:9e:
16:7e:f5:37:9e:71:04:98:05:fa:02:a7:66:b2:23:
6b:ac:3c:f0:cb:23:d6:1b:4a:25:55:14:71:e4:8f:
03:e8:87:3f:f8:4c:e3:a8:d1:6b:be:f0:48:9c:df:
f8:c0:69:f3:09:e1:62:57:0c:16:90:bd:17:91:75:
72:12:53:20:12:19:66:97:16:08:8c:f0:e9:30:22:
8d:66:f8:40:ba:bf:fc:32:92:44:36:5f:91:2d:7b:
5f:f0:a3:1f:43:9e:f0:f6:f4:79:de:81:d9:d4:c7:
bc:67:ba:c1:be:35:87:ec:19:ee:b0:ad:a0:84:3c:
c1:73:ab:24:12:d8:e6:dc:e4:b0:82:04:11:a5:34:
58:ad:f9:36:9d:5a:df:64:4d:bc:cb:33:99:e1:86:
e9:40:28:42:9c:06:04:67:42:d9:7b:9f:27:e8:92:
53:1e:d0:5d:1f:aa:06:46:70:f3:bc:93:c0:6b:25:
d8:91:cd:11:d3:8c:a8:60:f6:75:22:0a:7e:07:82:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CD:6B:51:A4:1F:FC:5D:C1:A1:09:63:1C:EF:F7:80:CE:BA:95:53
X509v3 Authority Key Identifier:
keyid:B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:96:04:52:ce:d2:b9:cb:3e:b6:65:f9:3f:ef:79:05:e0:88:
4e:11:fe:08:a1:2b:6b:34:41:7c:f6:f4:5f:10:08:a8:f9:36:
6b:aa:20:6c:82:ca:f5:ba:7a:67:ac:9d:4c:5f:8f:33:b0:cd:
a4:9d:11:39:31:16:d5:14:15:7b:22:bb:df:c0:e1:1b:84:04:
42:e0:94:a8:57:ef:74:44:ac:16:c3:05:c6:d3:48:b5:ac:e9:
aa:48:5f:d3:24:6a:cf:60:de:9c:3b:08:c8:2f:15:c8:ba:10:
ef:d7:53:5c:61:a4:64:80:ee:7f:38:74:e7:7f:88:e7:60:12:
d6:c1:97:7b:9d:b1:ef:00:f8:65:15:bb:47:db:bf:2a:1c:62:
c7:40:fb:9b:70:a8:87:51:8e:24:d1:d7:1b:14:22:4c:76:81:
09:e8:70:0a:1b:3f:3b:96:09:c5:e1:de:df:1f:4a:78:39:b1:
2a:ae:f4:ae:e8:ed:b7:1b:52:5a:bf:05:50:d1:e0:6b:db:ce:
ed:10:dd:52:40:c6:3b:d0:18:fc:21:2d:04:5c:94:d1:99:32:
ff:35:b2:41:28:17:37:82:92:d3:2e:6e:0b:74:26:11:6e:56:
57:c4:5c:a8:cf:5a:dc:ee:15:e3:29:26:8b:da:a9:f8:03:80:
40:8c:d6:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT5Ebdfl9MVhfQrdxV5/GjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2QxNWU0MzQ3MGVmMGExZGM3MDEwNzQzOTNmZTcwZjJk
ZjhkMDYwHhcNMjUxMTA1MTIwMTAwWhcNMjUxMTA2MTIwMTAwWjAzMTEwLwYDVQQD
Eyg4YWNkNmI1MWE0MWZmYzVkYzFhMTA5NjMxY2VmZjc4MGNlYmE5NTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65OXxaG4loVvH4GC9bnRh7p9yGti
70r1H2CFefy8hwWWZuKLqNphLXyYyAQUKoxtOjD+bY1zutLvqJ4WfvU3nnEEmAX6
AqdmsiNrrDzwyyPWG0olVRRx5I8D6Ic/+EzjqNFrvvBInN/4wGnzCeFiVwwWkL0X
kXVyElMgEhlmlxYIjPDpMCKNZvhAur/8MpJENl+RLXtf8KMfQ57w9vR53oHZ1Me8
Z7rBvjWH7BnusK2ghDzBc6skEtjm3OSwggQRpTRYrfk2nVrfZE28yzOZ4YbpQChC
nAYEZ0LZe58n6JJTHtBdH6oGRnDzvJPAayXYkc0R04yoYPZ1Igp+B4LUkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrNa1GkH/xdwaEJYxzv94DOupVTMB8GA1UdIwQY
MBaAFLN9FeQ0cO8KHccBB0OT/nDy340GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczMwVjVEUnc3d29keHdFSFE1UC1jUExmalFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kNjc0NGQtYjVjZC00ZGE3LWExMGQt
ZGFmNjY5ZmFiZjgwLzEvczMwVjVEUnc3d29keHdFSFE1UC1jUExmalFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9kNjc0NGQtYjVjZC00ZGE3LWExMGQtZGFmNjY5ZmFiZjgw
LzEvczMwVjVEUnc3d29keHdFSFE1UC1jUExmalFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZYEUs7S
ucs+tmX5P+95BeCIThH+CKErazRBfPb0XxAIqPk2a6ogbILK9bp6Z6ydTF+PM7DN
pJ0ROTEW1RQVeyK738DhG4QEQuCUqFfvdESsFsMFxtNItazpqkhf0yRqz2DenDsI
yC8VyLoQ79dTXGGkZIDufzh053+I52AS1sGXe52x7wD4ZRW7R9u/Khxix0D7m3Co
h1GOJNHXGxQiTHaBCehwChs/O5YJxeHe3x9KeDmxKq70rujttxtSWr8FUNHga9vO
7RDdUkDGO9AY/CEtBFyU0Zky/zWyQSgXN4KS0y5uC3QmEW5WV8RcqM9a3O4V4ykm
i9qp+AOAQIzWtw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:05:06 2025 by rpki-client