Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
File: _sQT3TZn54GV5SaKooWupRa8sZk.mft (raw, json)
Hash identifier: WjDRQQ8DOuZ+sW+d61OCqIKij1bGQk3iMo6/9H51haM=
Subject key identifier: 57:47:24:1E:93:0D:3F:2C:54:F0:6F:DE:FD:CE:79:B5:6C:02:EC:90
Authority key identifier: FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
Certificate issuer: /CN=fec413dd3667e78195e5268aa285aea516bcb199
Certificate serial: 019A503E470A155918118AD38D6E8C909528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
Manifest number: 1437
Signing time: Tue 04 Nov 2025 19:00:49 +0000
Manifest this update: Tue 04 Nov 2025 19:00:49 +0000
Manifest next update: Wed 05 Nov 2025 19:00:49 +0000
Files and hashes: 1: _sQT3TZn54GV5SaKooWupRa8sZk.crl (hash: laRT3Vk13ZKBUZE/EX+0jWoe+hpAX0S8/jQnf7Ea8VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:47:0a:15:59:18:11:8a:d3:8d:6e:8c:90:95:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec413dd3667e78195e5268aa285aea516bcb199
Validity
Not Before: Nov 4 19:00:49 2025 GMT
Not After : Nov 5 19:00:49 2025 GMT
Subject: CN=5747241e930d3f2c54f06fdefdce79b56c02ec90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:5d:01:27:21:0b:bc:86:e4:84:0f:3c:6e:
fc:36:70:96:03:3a:99:a0:c9:2e:24:54:05:e6:28:
7e:de:65:56:b6:d0:6b:52:cc:47:f3:88:f6:ea:bc:
67:74:a8:4d:2f:c4:ea:f6:11:ff:74:c2:44:ed:49:
b9:0d:22:33:26:16:d9:55:c8:73:c1:78:bc:b7:08:
3f:8a:e9:f0:c6:64:1c:31:25:2d:35:27:8c:ee:25:
62:65:43:af:7d:d4:8c:1d:8d:05:ce:19:0f:89:c6:
00:5f:4e:da:a8:b3:f6:22:9b:08:76:67:9c:cb:a4:
61:1c:b9:1b:0c:89:01:42:88:4e:a7:19:fd:b3:6f:
98:35:0c:6e:e6:60:b9:7b:d6:70:64:bb:bf:a5:1a:
a2:e5:93:39:1b:94:1a:d2:38:62:cb:a1:7b:fb:7d:
61:1c:70:6a:1c:b3:56:d6:6e:e6:84:a4:36:57:7c:
d1:3a:31:45:28:59:40:42:4b:3d:e3:22:d6:d0:0f:
0f:a8:2e:93:f6:65:f0:33:f0:94:63:e1:16:f8:26:
00:1c:47:33:6b:7c:3a:78:2e:09:c8:83:43:40:54:
ec:d2:0d:1c:aa:dd:cd:75:83:fb:d7:7b:4d:f6:2d:
5a:f3:1d:b2:b8:7d:1f:ac:24:70:b5:61:f7:18:9f:
fa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:47:24:1E:93:0D:3F:2C:54:F0:6F:DE:FD:CE:79:B5:6C:02:EC:90
X509v3 Authority Key Identifier:
keyid:FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ee:0c:04:c5:5e:ec:7c:be:02:40:c6:c7:9f:ba:92:60:f8:
bf:d2:50:f2:76:95:6d:4c:a6:61:f4:aa:bc:38:a7:b2:de:51:
eb:26:57:38:e1:8d:5f:92:65:90:b6:04:ad:33:dd:51:e7:22:
5d:9b:8e:a4:cf:cb:a0:34:1d:1e:50:3b:e0:49:1e:f6:41:94:
a5:8b:e8:0a:1a:f9:41:4c:53:1e:f7:c3:6c:39:66:dc:45:80:
fa:93:90:bd:18:8c:e8:9f:05:08:ca:41:09:22:e3:17:67:a7:
26:ce:ab:eb:ae:3b:e6:a5:1c:4c:14:f3:2a:23:ee:a7:76:53:
09:e1:c0:34:53:bd:57:65:95:91:a6:8c:82:d7:fa:27:12:c6:
fd:3b:98:35:05:77:c1:49:cc:19:1a:72:94:18:d0:e9:04:bf:
6f:5b:9e:c4:ca:84:42:f0:5a:52:2a:55:d6:ce:eb:f8:df:fb:
fe:39:05:4a:3f:98:4c:77:43:26:35:b0:ff:10:4d:0f:58:f8:
a3:92:5f:c1:ed:b7:2d:ec:c9:a9:7d:b2:70:94:7c:ed:6a:94:
05:96:60:0c:35:10:57:61:bc:56:84:cd:85:d6:39:f8:c0:c7:
b9:e1:b7:f8:d0:b1:24:3b:d1:d0:07:29:b6:99:8e:d0:bd:d4:
4f:a6:2c:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPkcKFVkYEYrTjW6MkJUoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzQxM2RkMzY2N2U3ODE5NWU1MjY4YWEyODVhZWE1MTZi
Y2IxOTkwHhcNMjUxMTA0MTkwMDQ5WhcNMjUxMTA1MTkwMDQ5WjAzMTEwLwYDVQQD
Eyg1NzQ3MjQxZTkzMGQzZjJjNTRmMDZmZGVmZGNlNzliNTZjMDJlYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNZdASchC7yG5IQPPG78NnCWAzqZ
oMkuJFQF5ih+3mVWttBrUsxH84j26rxndKhNL8Tq9hH/dMJE7Um5DSIzJhbZVchz
wXi8twg/iunwxmQcMSUtNSeM7iViZUOvfdSMHY0FzhkPicYAX07aqLP2IpsIdmec
y6RhHLkbDIkBQohOpxn9s2+YNQxu5mC5e9ZwZLu/pRqi5ZM5G5Qa0jhiy6F7+31h
HHBqHLNW1m7mhKQ2V3zROjFFKFlAQks94yLW0A8PqC6T9mXwM/CUY+EW+CYAHEcz
a3w6eC4JyINDQFTs0g0cqt3NdYP713tN9i1a8x2yuH0frCRwtWH3GJ/6BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdHJB6TDT8sVPBv3v3OebVsAuyQMB8GA1UdIwQY
MBaAFP7EE902Z+eBleUmiqKFrqUWvLGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NRVDNUWm41NEdWNVNhS29vV3VwUmE4c1prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9iMTk1ZTctYjgwNC00NTk0LTk2NWUt
M2ZkMTRiOTM2ZWI0LzEvX3NRVDNUWm41NEdWNVNhS29vV3VwUmE4c1prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9iMTk1ZTctYjgwNC00NTk0LTk2NWUtM2ZkMTRiOTM2ZWI0
LzEvX3NRVDNUWm41NEdWNVNhS29vV3VwUmE4c1prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbe4MBMVe
7Hy+AkDGx5+6kmD4v9JQ8naVbUymYfSqvDinst5R6yZXOOGNX5JlkLYErTPdUeci
XZuOpM/LoDQdHlA74Eke9kGUpYvoChr5QUxTHvfDbDlm3EWA+pOQvRiM6J8FCMpB
CSLjF2enJs6r66475qUcTBTzKiPup3ZTCeHANFO9V2WVkaaMgtf6JxLG/TuYNQV3
wUnMGRpylBjQ6QS/b1uexMqEQvBaUipV1s7r+N/7/jkFSj+YTHdDJjWw/xBND1j4
o5Jfwe23LezJqX2ycJR87WqUBZZgDDUQV2G8VoTNhdY5+MDHueG3+NCxJDvR0Acp
tpmO0L3UT6YsHg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:30:01 2025 by rpki-client