Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
File: sK3wWv729l-hmmHDCuT7EcfPJbY.mft (raw, json)
Hash identifier: TtldICn5NDx/OEPUj0rTGwAG2q2wk461zbAD5StwJLk=
Subject key identifier: 90:29:B8:3B:45:99:61:40:FE:5C:B7:EE:54:A7:3C:EB:F4:37:64:20
Authority key identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
Certificate issuer: /CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Certificate serial: 019A4E18D746424F4B274264C4BF2770CB60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 09:00:42 +0000
Manifest this update: Tue 04 Nov 2025 09:00:42 +0000
Manifest next update: Wed 05 Nov 2025 09:00:42 +0000
Files and hashes: 1: IO0LvnAOcWauTMBpIRocATcgbnc.roa (hash: X7MgkZkBpVtr92LvTB/v/8FDDjBqTMenme65NutXS6Q=)
2: sK3wWv729l-hmmHDCuT7EcfPJbY.crl (hash: lOEKATF9R5b7HFxXJnvILgSdrK4cTPxj11HkNfgKMp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d7:46:42:4f:4b:27:42:64:c4:bf:27:70:cb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Validity
Not Before: Nov 4 09:00:42 2025 GMT
Not After : Nov 5 09:00:42 2025 GMT
Subject: CN=9029b83b45996140fe5cb7ee54a73cebf4376420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d9:1f:07:ea:67:a7:5c:65:98:3c:03:89:b7:
2f:0c:50:fd:97:a0:03:c7:0c:20:7e:82:0d:47:dc:
ea:b3:2f:18:42:6d:bf:8d:7f:12:ab:9a:97:a0:aa:
47:12:c2:ee:a9:0d:6f:a0:9a:a8:24:82:9f:e9:03:
a6:e8:09:4f:86:45:7a:4c:06:29:f5:af:65:96:f0:
4c:50:42:41:a6:8c:73:34:36:7a:b3:46:eb:a7:89:
e6:2b:11:c4:6a:a7:14:ef:50:c9:6a:ad:ff:32:13:
86:0c:80:cc:25:2c:a5:3b:7d:ce:e9:df:cc:23:87:
40:55:b2:3f:52:2c:10:66:f4:93:60:9c:ea:87:17:
f0:50:dc:42:d7:85:24:54:8b:0e:fe:d1:53:ac:d9:
77:35:f8:4b:3d:2f:14:5c:89:70:4a:47:b2:98:6a:
8d:d1:83:79:ca:98:bd:4e:82:2c:aa:f6:15:a0:cc:
f8:b0:3b:47:c9:53:d3:42:08:b4:a2:e1:a6:4c:4b:
54:ef:14:99:43:9b:f5:05:fa:f1:c7:bd:52:63:9d:
d9:e7:aa:7a:4b:ef:a8:76:0a:a5:4e:ce:95:74:20:
d8:f0:5b:8c:09:c2:6e:7e:d9:1b:57:dc:10:71:95:
ce:c9:26:4b:ec:0f:e5:51:db:5c:ed:a7:b4:e8:ba:
07:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:29:B8:3B:45:99:61:40:FE:5C:B7:EE:54:A7:3C:EB:F4:37:64:20
X509v3 Authority Key Identifier:
keyid:B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:22:86:29:9e:bd:d6:13:12:64:70:2e:e1:8f:b5:fd:9c:5a:
4c:d8:8d:f8:bd:86:ee:3b:56:6f:c5:81:91:d5:44:7c:25:5b:
07:9d:65:72:6c:fc:bd:4a:8f:6d:d9:8b:1d:df:54:54:08:3f:
b2:b5:b3:5e:cf:b7:88:57:37:6b:26:bc:99:ee:5b:f3:14:f5:
68:80:a2:8a:20:0d:a9:b5:f3:06:8c:ee:60:9b:b6:74:0d:d9:
ca:03:8a:85:0e:c4:c2:95:9a:2e:c7:8c:1e:03:29:58:1d:ae:
99:6e:6b:2f:07:d8:66:e4:06:32:ca:5c:b6:5e:27:b0:b8:b8:
7d:0d:47:8c:55:13:38:ea:ec:46:c0:77:6e:a7:ee:db:12:de:
7b:1b:85:e3:92:8d:61:65:3c:12:b9:75:2c:4e:a6:b7:76:46:
ec:94:aa:45:d1:1c:bb:72:e9:81:e4:15:c9:0c:a3:53:d8:18:
83:8f:a6:59:d5:af:b8:39:37:cb:a5:0f:97:83:07:27:4f:cb:
79:f2:82:f0:5b:20:12:d2:ad:e3:84:d0:6e:9d:a0:cb:4a:cd:
f2:29:cd:97:b5:51:bb:eb:9a:25:fd:1a:37:ca:29:3b:fc:02:
49:6b:d5:17:62:c4:8f:78:30:40:f4:27:b2:ef:07:cd:49:cf:
c8:53:85:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGNdGQk9LJ0JkxL8ncMtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYWRmMDVhZmVmNmY2NWZhMTlhNjFjMzBhZTRmYjExYzdj
ZjI1YjYwHhcNMjUxMTA0MDkwMDQyWhcNMjUxMTA1MDkwMDQyWjAzMTEwLwYDVQQD
Eyg5MDI5YjgzYjQ1OTk2MTQwZmU1Y2I3ZWU1NGE3M2NlYmY0Mzc2NDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+tkfB+pnp1xlmDwDibcvDFD9l6AD
xwwgfoINR9zqsy8YQm2/jX8Sq5qXoKpHEsLuqQ1voJqoJIKf6QOm6AlPhkV6TAYp
9a9llvBMUEJBpoxzNDZ6s0brp4nmKxHEaqcU71DJaq3/MhOGDIDMJSylO33O6d/M
I4dAVbI/UiwQZvSTYJzqhxfwUNxC14UkVIsO/tFTrNl3NfhLPS8UXIlwSkeymGqN
0YN5ypi9ToIsqvYVoMz4sDtHyVPTQgi0ouGmTEtU7xSZQ5v1Bfrxx71SY53Z56p6
S++odgqlTs6VdCDY8FuMCcJuftkbV9wQcZXOySZL7A/lUdtc7ae06LoHZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJApuDtFmWFA/ly37lSnPOv0N2QgMB8GA1UdIwQY
MBaAFLCt8Fr+9vZfoZphwwrk+xHHzyW2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0szd1d2NzI5bC1obW1IREN1VDdFY2ZQSmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDk1OWItZDc5Yi00MmRjLWI4OTMt
NWYyZDBlMmFlNzE0LzEvc0szd1d2NzI5bC1obW1IREN1VDdFY2ZQSmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS83MDk1OWItZDc5Yi00MmRjLWI4OTMtNWYyZDBlMmFlNzE0
LzEvc0szd1d2NzI5bC1obW1IREN1VDdFY2ZQSmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyKGKZ69
1hMSZHAu4Y+1/ZxaTNiN+L2G7jtWb8WBkdVEfCVbB51lcmz8vUqPbdmLHd9UVAg/
srWzXs+3iFc3aya8me5b8xT1aICiiiANqbXzBozuYJu2dA3ZygOKhQ7EwpWaLseM
HgMpWB2umW5rLwfYZuQGMspctl4nsLi4fQ1HjFUTOOrsRsB3bqfu2xLeexuF45KN
YWU8Erl1LE6mt3ZG7JSqRdEcu3LpgeQVyQyjU9gYg4+mWdWvuDk3y6UPl4MHJ0/L
efKC8FsgEtKt44TQbp2gy0rN8inNl7VRu+uaJf0aN8opO/wCSWvVF2LEj3gwQPQn
su8HzUnPyFOF7w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:16 2025 by rpki-client