Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
File: RmSbV7gX7BQ93LfXcSwiux8orHU.mft (raw, json)
Hash identifier: Y68zXNbwu/LEyK8ef9AKF648oEPlS1VNjE2mjiOUwtA=
Subject key identifier: 86:2B:60:9B:F9:24:65:14:78:1C:83:17:78:24:50:D6:FB:CD:BE:7E
Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
Certificate issuer: /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Certificate serial: 019A54C0567486D034420AB57BFD744A7987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
Manifest number: 16EA
Signing time: Wed 05 Nov 2025 16:01:22 +0000
Manifest this update: Wed 05 Nov 2025 16:01:22 +0000
Manifest next update: Thu 06 Nov 2025 16:01:22 +0000
Files and hashes: 1: E48fxMRuF9_usgkv-wBA_GtkkY8.roa (hash: TJ/B+8gZ2LSJEkkPcBk2s1l74WkEA3d0hjUzJQAQi8w=)
2: RmSbV7gX7BQ93LfXcSwiux8orHU.crl (hash: Q9gdLdqaffFWkbueGuNGmTyFFYK8eRr16ORI+r10080=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:56:74:86:d0:34:42:0a:b5:7b:fd:74:4a:79:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Validity
Not Before: Nov 5 16:01:22 2025 GMT
Not After : Nov 6 16:01:22 2025 GMT
Subject: CN=862b609bf9246514781c8317782450d6fbcdbe7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:d3:9a:1f:97:9a:95:a7:9c:7e:f5:64:d4:
8c:95:bc:d7:7d:d6:09:e0:ca:64:76:5c:c3:6d:79:
eb:3f:33:f2:23:34:9c:be:41:b0:77:65:ab:44:0a:
b2:9e:9a:e8:b0:29:58:14:2d:2f:b9:3b:16:61:07:
14:8f:9b:07:2e:47:8e:e0:70:e9:69:16:dc:11:39:
e5:37:4e:5b:b4:34:bd:9d:6b:72:63:e1:c8:58:25:
dd:f0:6f:3a:ee:47:4d:ca:0c:c4:a9:a8:b1:86:4d:
da:a3:57:01:ec:73:d9:9f:5f:dc:8d:8e:03:d1:4e:
74:09:97:1c:b3:df:2e:a5:e8:6f:2a:26:8a:a9:c9:
72:3a:d8:26:72:a5:cf:3b:ef:a8:51:cb:ce:67:c7:
e8:f8:22:cf:73:ec:83:cf:91:ee:6f:f4:c7:e2:a5:
59:da:1c:be:81:ad:3a:65:10:72:1f:80:86:ca:6c:
f7:4a:fe:a8:a1:a1:12:07:07:72:bc:68:87:48:04:
c0:73:ff:ca:c2:e2:b9:5f:a5:f2:67:ef:f1:54:6e:
39:b2:da:8a:84:90:16:8e:d5:70:ba:52:9e:4f:d7:
e2:0e:1b:fa:6f:87:41:b5:f8:ad:96:0c:66:7c:81:
3c:1e:9a:21:25:1f:4c:9d:75:eb:6d:ac:06:f6:dd:
0c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2B:60:9B:F9:24:65:14:78:1C:83:17:78:24:50:D6:FB:CD:BE:7E
X509v3 Authority Key Identifier:
keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:00:8f:e9:a0:ae:e9:c5:90:25:ac:f3:f9:83:a9:84:f9:79:
ce:a4:f5:97:21:52:3f:ee:d4:d7:d7:55:fa:3c:df:07:8c:46:
47:88:7e:e4:25:b4:0a:2a:92:27:2b:18:03:42:6b:e1:31:a3:
eb:a4:45:ee:5a:f4:04:ec:af:b3:3f:a5:87:1f:50:95:a1:11:
41:80:6e:7c:a2:3c:56:6b:e8:d0:1f:42:2c:84:58:53:2b:37:
a8:19:7f:02:0b:bd:e8:df:28:fa:dd:73:be:11:d9:0c:df:86:
54:42:c1:b3:b7:4c:9d:cd:1f:80:d0:42:77:d9:57:c3:40:85:
1d:c6:8b:df:3f:b7:a3:45:7c:aa:67:bf:10:c9:aa:f6:7d:cb:
3e:89:bd:63:bf:79:d8:52:59:8d:95:7e:66:4e:9a:60:16:e4:
41:c5:aa:82:8b:f4:6d:44:05:7d:a9:40:ee:6b:61:2c:c7:75:
12:1b:23:9e:df:38:b4:17:df:6e:0f:e5:80:ab:51:33:e6:51:
8b:ed:c1:9d:38:09:96:ed:99:1c:be:ab:e5:3b:7c:08:1b:f5:
0f:21:15:6a:4d:69:00:52:e4:fc:2f:19:73:c6:67:c6:6b:64:
80:a1:ac:c6:a6:bb:61:82:08:1c:a0:27:e1:bd:77:87:42:bf:
8f:05:70:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUwFZ0htA0Qgq1e/10SnmHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjQ5YjU3YjgxN2VjMTQzZGRjYjdkNzcxMmMyMmJiMWYy
OGFjNzUwHhcNMjUxMTA1MTYwMTIyWhcNMjUxMTA2MTYwMTIyWjAzMTEwLwYDVQQD
Eyg4NjJiNjA5YmY5MjQ2NTE0NzgxYzgzMTc3ODI0NTBkNmZiY2RiZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojbTmh+XmpWnnH71ZNSMlbzXfdYJ
4MpkdlzDbXnrPzPyIzScvkGwd2WrRAqynprosClYFC0vuTsWYQcUj5sHLkeO4HDp
aRbcETnlN05btDS9nWtyY+HIWCXd8G867kdNygzEqaixhk3ao1cB7HPZn1/cjY4D
0U50CZccs98upehvKiaKqclyOtgmcqXPO++oUcvOZ8fo+CLPc+yDz5Hub/TH4qVZ
2hy+ga06ZRByH4CGymz3Sv6ooaESBwdyvGiHSATAc//KwuK5X6XyZ+/xVG45stqK
hJAWjtVwulKeT9fiDhv6b4dBtfitlgxmfIE8HpohJR9MnXXrbawG9t0MRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYrYJv5JGUUeByDF3gkUNb7zb5+MB8GA1UdIwQY
MBaAFEZkm1e4F+wUPdy313EsIrsfKKx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2Mt
Y2E4ZmJhNTk1ZDRmLzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2MtY2E4ZmJhNTk1ZDRm
LzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtACP6aCu
6cWQJazz+YOphPl5zqT1lyFSP+7U19dV+jzfB4xGR4h+5CW0CiqSJysYA0Jr4TGj
66RF7lr0BOyvsz+lhx9QlaERQYBufKI8Vmvo0B9CLIRYUys3qBl/Agu96N8o+t1z
vhHZDN+GVELBs7dMnc0fgNBCd9lXw0CFHcaL3z+3o0V8qme/EMmq9n3LPom9Y795
2FJZjZV+Zk6aYBbkQcWqgov0bUQFfalA7mthLMd1Ehsjnt84tBffbg/lgKtRM+ZR
i+3BnTgJlu2ZHL6r5Tt8CBv1DyEVak1pAFLk/C8Zc8ZnxmtkgKGsxqa7YYIIHKAn
4b13h0K/jwVwew==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:13:42 2025 by rpki-client