Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
File: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft (raw, json)
Hash identifier: o4etKCk5v+LQiQYLCiCQN8CIDR4wRS6BBUek9ENbarM=
Subject key identifier: 5C:01:FA:55:73:10:1F:42:15:8B:27:6E:5E:B7:29:BA:C4:D2:83:E9
Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
Certificate issuer: /CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Certificate serial: 019A4D3D3CEEDC7694C1C7D0B0273EBC0CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
Manifest number: 1559
Signing time: Tue 04 Nov 2025 05:00:50 +0000
Manifest this update: Tue 04 Nov 2025 05:00:50 +0000
Manifest next update: Wed 05 Nov 2025 05:00:50 +0000
Files and hashes: 1: 4HxC1YnWdGWm4g8pwWn_Hlow4Qo.roa (hash: qpMp8mE7oIuGxE7UiKhcFCXTbJmQfeSevFyEhmL5FpM=)
2: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl (hash: aT2GrSJJxRBstFnSZuh1pXI+Ir7UYe82+UIkneU/JG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:3c:ee:dc:76:94:c1:c7:d0:b0:27:3e:bc:0c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Validity
Not Before: Nov 4 05:00:50 2025 GMT
Not After : Nov 5 05:00:50 2025 GMT
Subject: CN=5c01fa5573101f42158b276e5eb729bac4d283e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:9a:36:35:cb:ff:5e:05:2a:60:b8:57:ca:
65:e9:57:49:d4:2a:bf:28:5a:dc:f8:31:b7:d1:5d:
3e:fe:5e:7c:16:8a:64:05:63:ae:d7:f2:cc:18:39:
7b:80:6e:c8:b7:56:78:41:6e:f0:33:9f:a8:95:ab:
00:fc:5a:23:ae:d6:59:7f:59:bb:b3:55:c7:84:ad:
65:d5:34:c4:ac:c9:43:fd:dc:70:3e:d9:d8:93:c6:
32:a1:9d:2e:34:b9:6d:ec:7e:3b:2c:d0:74:54:d7:
ad:0d:a9:36:fa:c9:da:aa:12:9b:e7:c9:86:bd:90:
e7:2e:8a:41:86:1c:50:4d:a1:2a:68:09:15:a7:a4:
29:fc:6c:82:9a:48:64:0f:2a:5e:2c:d3:16:59:10:
8a:32:52:d3:d5:2f:28:d7:d0:4c:b6:c2:e9:46:6e:
cf:a9:3c:53:9e:7f:02:fd:c1:78:20:30:3c:02:12:
19:d8:bf:fb:9f:2c:d7:ed:cd:7f:1a:77:9e:15:e0:
bc:83:be:16:c5:7f:66:bf:2e:bc:bd:49:26:01:19:
ae:37:be:c7:ff:05:6e:5d:51:24:bd:d0:b1:5b:90:
6e:62:ff:33:17:52:95:47:e4:a5:98:ca:1f:00:8c:
cf:09:01:66:91:60:b4:36:db:91:11:08:1e:6f:0c:
24:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:01:FA:55:73:10:1F:42:15:8B:27:6E:5E:B7:29:BA:C4:D2:83:E9
X509v3 Authority Key Identifier:
keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d0:9d:5d:38:5d:5a:61:e1:23:9c:fe:c0:39:76:d3:33:01:
b9:50:c0:e9:01:ac:21:f5:01:44:96:28:ce:2f:d0:d4:8f:7f:
e1:19:30:14:7b:13:ba:e7:12:c0:f3:b2:ee:af:81:53:b4:29:
28:42:7b:39:a5:4b:c7:17:48:01:65:4f:55:5d:5b:1b:66:87:
c7:47:af:6b:fa:28:bb:ea:9e:f0:a3:a5:0e:2b:34:4e:3f:50:
9e:ca:d7:78:0c:02:a3:f1:5e:32:c3:5b:bf:db:9f:cb:df:b8:
d2:d5:c5:ca:c7:e0:e1:27:6e:f0:7d:98:50:70:35:14:85:bc:
49:05:30:ec:3f:9b:3a:15:5a:47:0b:b7:50:88:aa:fc:b2:33:
b9:d8:94:14:6c:48:0c:25:ff:da:99:3c:c3:e4:7d:71:bd:ad:
cb:8a:10:59:0b:5a:1f:27:1f:6d:5a:ef:8b:4f:85:46:55:07:
39:fe:82:fd:60:a9:8e:e2:2b:4b:d8:10:05:ef:20:de:98:43:
99:16:72:c5:bd:88:a2:73:3f:ff:ed:5e:3b:0a:23:61:99:95:
01:69:7c:7f:d1:bf:de:9a:f3:f5:f8:18:ca:3c:bb:cf:4d:4b:
af:82:bd:1e:f3:8b:26:3e:aa:0d:a4:01:af:7e:39:5e:0a:5f:
10:4b:19:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPTzu3HaUwcfQsCc+vAyoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhM2MzNjBjMzY0YmI2NmRjNjM1MTcxOTM1NjhmNWJhODUx
N2FjZTgwHhcNMjUxMTA0MDUwMDUwWhcNMjUxMTA1MDUwMDUwWjAzMTEwLwYDVQQD
Eyg1YzAxZmE1NTczMTAxZjQyMTU4YjI3NmU1ZWI3MjliYWM0ZDI4M2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KyaNjXL/14FKmC4V8pl6VdJ1Cq/
KFrc+DG30V0+/l58FopkBWOu1/LMGDl7gG7It1Z4QW7wM5+olasA/FojrtZZf1m7
s1XHhK1l1TTErMlD/dxwPtnYk8YyoZ0uNLlt7H47LNB0VNetDak2+snaqhKb58mG
vZDnLopBhhxQTaEqaAkVp6Qp/GyCmkhkDypeLNMWWRCKMlLT1S8o19BMtsLpRm7P
qTxTnn8C/cF4IDA8AhIZ2L/7nyzX7c1/GneeFeC8g74WxX9mvy68vUkmARmuN77H
/wVuXVEkvdCxW5BuYv8zF1KVR+SlmMofAIzPCQFmkWC0NtuREQgebwwk2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwB+lVzEB9CFYsnbl63KbrE0oPpMB8GA1UdIwQY
MBaAFEo8Ngw2S7ZtxjUXGTVo9bqFF6zoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYt
MWQ5Yzg2NDE2ZTliLzEvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYtMWQ5Yzg2NDE2ZTli
LzEvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9CdXThd
WmHhI5z+wDl20zMBuVDA6QGsIfUBRJYozi/Q1I9/4RkwFHsTuucSwPOy7q+BU7Qp
KEJ7OaVLxxdIAWVPVV1bG2aHx0eva/oou+qe8KOlDis0Tj9QnsrXeAwCo/FeMsNb
v9ufy9+40tXFysfg4Sdu8H2YUHA1FIW8SQUw7D+bOhVaRwu3UIiq/LIzudiUFGxI
DCX/2pk8w+R9cb2ty4oQWQtaHycfbVrvi0+FRlUHOf6C/WCpjuIrS9gQBe8g3phD
mRZyxb2IonM//+1eOwojYZmVAWl8f9G/3prz9fgYyjy7z01Lr4K9HvOLJj6qDaQB
r345XgpfEEsZgQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:26 2025 by rpki-client