Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
File: S-kZqE4aIp94nZOdGqpxKk08OZ0.mft (raw, json)
Hash identifier: Y5YfvqwxS2taBqAebBSsxilv9F+tKHNG/Ru0BqCjGm0=
Subject key identifier: AC:43:CE:BF:30:07:0B:EE:00:12:A8:25:F7:73:F6:F7:ED:2C:72:54
Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
Certificate issuer: /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Certificate serial: 019A4D05D83F6C07751769AA9389992C0E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
Manifest number: 056A
Signing time: Tue 04 Nov 2025 04:00:19 +0000
Manifest this update: Tue 04 Nov 2025 04:00:19 +0000
Manifest next update: Wed 05 Nov 2025 04:00:19 +0000
Files and hashes: 1: FE9TisHKbwT-TG7WXc-HdjPStqc.roa (hash: pRwsqMoq8wG5C6fvp0aFlXXk9XmPop41EHqaLEOgfSc=)
2: S-kZqE4aIp94nZOdGqpxKk08OZ0.crl (hash: eTLml2IyfAUa25tS/m8M7JL5EV9R7QAusW02eCLcLiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:d8:3f:6c:07:75:17:69:aa:93:89:99:2c:0e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Validity
Not Before: Nov 4 04:00:19 2025 GMT
Not After : Nov 5 04:00:19 2025 GMT
Subject: CN=ac43cebf30070bee0012a825f773f6f7ed2c7254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:d5:93:a4:2b:0e:26:a6:6b:4a:93:7b:36:
1a:45:63:55:d7:0a:87:df:88:a8:39:01:51:4b:e5:
50:f7:65:94:9a:d0:27:75:d6:ea:82:ca:ad:4f:e8:
fd:df:89:95:3d:ef:89:d9:72:e7:d1:7c:27:e1:bf:
d7:91:a4:c5:3f:ef:3b:81:e7:8b:1d:33:c4:6c:ae:
88:58:ca:c4:0a:d2:44:b5:d7:6f:fa:bc:50:d6:8f:
81:c4:7d:bb:8f:d6:9e:f7:e8:cc:45:ed:7d:ca:a2:
f8:2d:24:70:d1:77:da:d6:3a:dc:08:d3:e3:8a:81:
ba:c1:ef:6b:7d:46:fd:d8:98:9f:36:4f:10:49:a8:
56:7e:a8:a9:76:1f:92:dd:86:cf:89:65:57:54:bd:
2d:43:49:63:98:ea:bc:fc:34:db:10:ee:7e:35:0a:
d5:fa:e7:66:c1:05:87:78:c1:3a:5f:e4:51:56:d9:
d6:9e:06:b0:43:c3:f5:59:5c:0b:2c:2a:ad:5b:2e:
03:96:7c:d8:5c:d7:b9:17:da:dc:ec:45:97:c0:8f:
c6:5f:ca:49:1e:c0:83:26:ee:a3:e7:fd:c1:28:3f:
f1:99:2c:ab:1f:cf:2e:a6:c6:a0:38:24:4a:d9:83:
ff:77:b8:1c:7a:96:71:35:1a:71:97:f3:74:91:71:
5f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:43:CE:BF:30:07:0B:EE:00:12:A8:25:F7:73:F6:F7:ED:2C:72:54
X509v3 Authority Key Identifier:
keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:69:6b:85:36:d9:75:81:01:73:a2:e5:dc:52:53:6a:3c:4e:
d4:95:fe:55:58:4a:52:ce:5a:d8:5a:8b:90:b1:8d:09:0f:b0:
50:f8:4a:84:fb:5e:a7:c8:c4:b8:ef:92:e0:79:e0:de:88:d3:
84:89:cf:13:2b:af:dc:96:6d:8f:1f:80:7a:5e:a4:f8:43:bf:
cc:8e:da:d1:f5:ce:91:e6:d3:1a:ac:0e:f5:29:f1:73:3e:b4:
fa:3b:21:9d:5a:f6:cf:ae:cd:43:22:35:55:44:71:d5:57:51:
23:30:15:0f:cb:50:02:af:01:cd:83:4e:de:7d:74:4f:60:e7:
ca:ec:92:e2:b1:f4:0d:d3:44:11:ed:de:ec:df:05:e2:7f:45:
62:f3:b2:ee:9a:d8:c4:3f:3b:6b:b5:80:55:57:53:8b:64:57:
b8:d8:0b:f9:49:e8:17:a2:30:af:47:2a:f8:2f:9b:77:95:6d:
c0:43:d2:aa:e5:aa:b4:bf:89:b3:9f:92:38:fd:9a:58:1f:f4:
dc:a9:34:04:ea:89:08:89:b5:71:74:4f:bc:8e:e6:39:53:cf:
de:0d:d4:d6:73:39:c1:f0:d3:c8:60:99:88:70:ef:37:55:36:
48:41:26:fb:09:70:0e:b0:bb:e0:7c:08:c9:55:8b:0a:b1:80:
b7:17:0b:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBdg/bAd1F2mqk4mZLA5UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZTkxOWE4NGUxYTIyOWY3ODlkOTM5ZDFhYWE3MTJhNGQz
YzM5OWQwHhcNMjUxMTA0MDQwMDE5WhcNMjUxMTA1MDQwMDE5WjAzMTEwLwYDVQQD
EyhhYzQzY2ViZjMwMDcwYmVlMDAxMmE4MjVmNzczZjZmN2VkMmM3MjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJPVk6QrDiama0qTezYaRWNV1wqH
34ioOQFRS+VQ92WUmtAnddbqgsqtT+j934mVPe+J2XLn0Xwn4b/XkaTFP+87geeL
HTPEbK6IWMrECtJEtddv+rxQ1o+BxH27j9ae9+jMRe19yqL4LSRw0Xfa1jrcCNPj
ioG6we9rfUb92JifNk8QSahWfqipdh+S3YbPiWVXVL0tQ0ljmOq8/DTbEO5+NQrV
+udmwQWHeME6X+RRVtnWngawQ8P1WVwLLCqtWy4DlnzYXNe5F9rc7EWXwI/GX8pJ
HsCDJu6j5/3BKD/xmSyrH88upsagOCRK2YP/d7gcepZxNRpxl/N0kXFfZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxDzr8wBwvuABKoJfdz9vftLHJUMB8GA1UdIwQY
MBaAFEvpGahOGiKfeJ2TnRqqcSpNPDmdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNjc3NDgtODg1Yy00NjIxLWI0NGMt
MTE5NWZlMDUwZGUxLzEvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8zNjc3NDgtODg1Yy00NjIxLWI0NGMtMTE5NWZlMDUwZGUx
LzEvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWlrhTbZ
dYEBc6Ll3FJTajxO1JX+VVhKUs5a2FqLkLGNCQ+wUPhKhPtep8jEuO+S4Hng3ojT
hInPEyuv3JZtjx+Ael6k+EO/zI7a0fXOkebTGqwO9Snxcz60+jshnVr2z67NQyI1
VURx1VdRIzAVD8tQAq8BzYNO3n10T2DnyuyS4rH0DdNEEe3e7N8F4n9FYvOy7prY
xD87a7WAVVdTi2RXuNgL+UnoF6Iwr0cq+C+bd5VtwEPSquWqtL+Js5+SOP2aWB/0
3Kk0BOqJCIm1cXRPvI7mOVPP3g3U1nM5wfDTyGCZiHDvN1U2SEEm+wlwDrC74HwI
yVWLCrGAtxcLew==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:02 2025 by rpki-client