Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
File: sIRyULOncSfffDx7je-MnZGdxLk.mft (raw, json)
Hash identifier: 91K7po95jUI6Y5LMzZ0oQI2RnCV9fPmmBRgIewMSfos=
Subject key identifier: A9:A8:4C:D9:09:46:F1:68:AA:78:76:D5:6F:5C:39:CF:0B:72:9D:F6
Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
Certificate issuer: /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Certificate serial: 019A4E18D2F7A5E4628072E0FDFCA61C7DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
Manifest number: 0970
Signing time: Tue 04 Nov 2025 09:00:40 +0000
Manifest this update: Tue 04 Nov 2025 09:00:40 +0000
Manifest next update: Wed 05 Nov 2025 09:00:40 +0000
Files and hashes: 1: BEVOt5Hu7SlSOUV5TBn_pg8-Bq4.roa (hash: nEzdIf15rxzhFQC8rcsKrtOrx8pALRaykpAEEi2uLpo=)
2: sIRyULOncSfffDx7je-MnZGdxLk.crl (hash: O94Rv4aP0tQt43LtUqp7n+9bEScpSp4cdr1MzV/7CEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d2:f7:a5:e4:62:80:72:e0:fd:fc:a6:1c:7d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Validity
Not Before: Nov 4 09:00:40 2025 GMT
Not After : Nov 5 09:00:40 2025 GMT
Subject: CN=a9a84cd90946f168aa7876d56f5c39cf0b729df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:0c:db:ca:08:58:48:02:35:64:56:d0:8d:
f5:55:49:8b:e4:43:7f:58:a7:29:c3:01:78:36:cb:
05:d8:4d:c0:08:9b:ff:cb:ff:10:43:f6:da:3f:f0:
c4:71:58:e9:30:56:64:aa:7f:7c:25:52:37:3e:4b:
84:06:ba:fe:bd:39:24:cc:2b:51:cc:ca:d3:a9:a3:
49:ac:4d:8a:d3:83:b8:13:a1:bb:f5:4d:82:1f:bf:
46:df:f6:30:94:a6:08:f1:14:bf:5e:18:35:f2:cf:
ed:82:47:63:18:fd:b0:51:87:f0:3d:25:f6:29:e4:
19:46:22:7b:83:89:95:6d:56:51:cf:e4:b4:1e:bf:
ae:91:3d:3c:19:ee:ae:cf:13:22:26:d8:55:a5:dc:
4c:16:44:b6:ab:78:90:7d:32:36:be:ac:1f:f3:14:
ed:13:02:7f:2c:ce:8b:89:2d:53:e0:9d:76:3f:a4:
0f:94:80:3f:f0:e6:54:7d:15:82:28:2d:cf:0b:f1:
80:92:84:15:84:88:cb:11:59:df:6f:21:fd:66:b8:
ab:cf:d2:57:55:1a:4d:8d:1c:0b:30:01:e4:68:f9:
4b:25:4b:64:51:52:30:ce:08:67:a7:5e:40:11:69:
b5:fa:71:ee:62:64:d6:30:65:14:54:b4:5f:ca:74:
14:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A8:4C:D9:09:46:F1:68:AA:78:76:D5:6F:5C:39:CF:0B:72:9D:F6
X509v3 Authority Key Identifier:
keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:43:8e:39:3a:74:56:6f:f4:61:b9:bd:a6:f5:16:3a:b7:3c:
b0:ed:54:cf:a3:29:ad:4f:41:dc:63:b5:c1:8b:41:2b:74:2e:
97:43:ff:1f:15:96:60:46:82:85:f6:63:21:48:96:54:08:3c:
97:62:5c:aa:f4:ba:75:f9:b8:fe:0b:fa:83:85:8e:9e:2e:18:
f1:f0:a3:10:2e:62:08:52:8a:fe:28:07:94:6e:a4:f2:36:e9:
05:5c:1a:f9:59:d5:f7:51:6f:62:e8:38:4b:55:0b:d5:67:ee:
ae:3a:6a:7d:c5:cd:1f:89:b6:1a:32:b8:8b:22:38:0d:e9:b2:
0a:28:1a:6f:ac:c3:4d:2e:4a:7c:22:44:ec:d1:0d:77:d6:a0:
ea:e0:7c:5f:13:39:4d:18:fb:7f:8f:22:08:72:97:de:3d:81:
4e:2d:0e:46:db:9c:57:88:f3:4d:bf:5b:98:ca:38:61:22:ad:
12:be:f5:96:6d:e1:be:80:95:03:fb:b5:36:c9:8b:cc:b4:20:
11:e2:08:db:f7:72:c8:3c:4e:62:b6:1a:a3:3d:e4:60:4a:03:
c0:cf:18:6d:39:1b:4a:05:1a:67:40:76:57:c3:44:29:17:1f:
33:c9:15:42:70:ee:fc:a6:59:2d:86:bc:4a:9b:cc:c0:81:23:
e2:50:2d:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGNL3peRigHLg/fymHH3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwODQ3MjUwYjNhNzcxMjdkZjdjM2M3YjhkZWY4YzlkOTE5
ZGM0YjkwHhcNMjUxMTA0MDkwMDQwWhcNMjUxMTA1MDkwMDQwWjAzMTEwLwYDVQQD
EyhhOWE4NGNkOTA5NDZmMTY4YWE3ODc2ZDU2ZjVjMzljZjBiNzI5ZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKIM28oIWEgCNWRW0I31VUmL5EN/
WKcpwwF4NssF2E3ACJv/y/8QQ/baP/DEcVjpMFZkqn98JVI3PkuEBrr+vTkkzCtR
zMrTqaNJrE2K04O4E6G79U2CH79G3/YwlKYI8RS/Xhg18s/tgkdjGP2wUYfwPSX2
KeQZRiJ7g4mVbVZRz+S0Hr+ukT08Ge6uzxMiJthVpdxMFkS2q3iQfTI2vqwf8xTt
EwJ/LM6LiS1T4J12P6QPlIA/8OZUfRWCKC3PC/GAkoQVhIjLEVnfbyH9Zrirz9JX
VRpNjRwLMAHkaPlLJUtkUVIwzghnp15AEWm1+nHuYmTWMGUUVLRfynQUqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmoTNkJRvFoqnh21W9cOc8Lcp32MB8GA1UdIwQY
MBaAFLCEclCzp3En33w8e43vjJ2RncS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0lSeVVMT25jU2ZmZkR4N2plLU1uWkdkeExrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xNzhmZmQtYTk5Yy00MzMzLThlOWIt
Y2EzNTQ2OTU1M2NmLzEvc0lSeVVMT25jU2ZmZkR4N2plLU1uWkdkeExrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xNzhmZmQtYTk5Yy00MzMzLThlOWItY2EzNTQ2OTU1M2Nm
LzEvc0lSeVVMT25jU2ZmZkR4N2plLU1uWkdkeExrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkOOOTp0
Vm/0Ybm9pvUWOrc8sO1Uz6MprU9B3GO1wYtBK3Qul0P/HxWWYEaChfZjIUiWVAg8
l2JcqvS6dfm4/gv6g4WOni4Y8fCjEC5iCFKK/igHlG6k8jbpBVwa+VnV91FvYug4
S1UL1WfurjpqfcXNH4m2GjK4iyI4DemyCigab6zDTS5KfCJE7NENd9ag6uB8XxM5
TRj7f48iCHKX3j2BTi0ORtucV4jzTb9bmMo4YSKtEr71lm3hvoCVA/u1NsmLzLQg
EeII2/dyyDxOYrYaoz3kYEoDwM8YbTkbSgUaZ0B2V8NEKRcfM8kVQnDu/KZZLYa8
SpvMwIEj4lAtOQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:19 2025 by rpki-client