Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File: S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier: JPnYIxLpf8YcpPrKdS46hYjFRqi88usTxWXcDwJYECQ=
Subject key identifier: 87:78:68:A7:35:F3:BD:37:F0:26:BC:33:15:5B:1A:2C:88:79:D1:33
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 019A4F2AE826D986C0D5AC39B1B2533415DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 14:00:03 +0000
Manifest this update: Tue 04 Nov 2025 14:00:03 +0000
Manifest next update: Wed 05 Nov 2025 14:00:03 +0000
Files and hashes: 1: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: 6EoaEVzg65TYqVvS/DJ8VeHbf0LpxDtqmKeX8EnJWw0=)
2: pPYYG56VOORuxgT5M_ZuhSvmRfg.roa (hash: UBXy6znS5i9dvxzfkJnX+PZpKfrnJ0My4xHbPC9KdaQ=)
3: yMSeuAa3_Q3isG4V5xgKNphOKMM.roa (hash: BbbggzpZ1LYSMsSpb6m/RdWTAN0ir/nCUyEfsxCRTww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:e8:26:d9:86:c0:d5:ac:39:b1:b2:53:34:15:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Nov 4 14:00:03 2025 GMT
Not After : Nov 5 14:00:03 2025 GMT
Subject: CN=877868a735f3bd37f026bc33155b1a2c8879d133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:db:29:5e:23:5f:1d:c7:b6:a3:57:da:d7:a9:
38:eb:4f:bb:6e:87:31:3d:c2:99:b0:40:2f:c2:76:
a4:52:71:fa:3e:df:c0:af:eb:4f:ae:68:f2:cd:07:
6a:54:0e:3a:30:10:69:c3:62:ce:5f:87:2e:77:96:
2d:a7:6a:39:5a:62:56:5e:26:4a:1d:ee:57:13:d6:
81:c3:2c:6b:5a:81:df:69:01:65:82:cf:bd:e2:32:
e9:d5:e1:b7:fe:b4:96:df:d1:f5:61:1d:30:f7:30:
23:48:e0:d5:80:05:b3:1f:5d:45:fe:2b:14:ec:e8:
fe:1d:ab:a5:d6:14:e2:8d:03:96:ee:cf:75:68:f9:
42:b7:42:b9:72:b5:94:e9:b5:d5:65:81:54:6c:2a:
f9:ea:37:31:ec:3a:a3:1c:a9:36:7d:ae:5e:c2:7e:
d6:55:ea:a5:6c:62:25:e5:50:96:eb:7a:51:6c:09:
21:12:13:92:14:c6:c5:25:11:21:62:2f:7e:4d:8c:
9d:d6:20:24:01:e8:1b:9b:1e:7a:6d:81:ff:9e:1d:
a3:ee:e7:6b:48:7d:c5:97:90:7e:0f:c9:4c:23:fc:
8f:49:6f:10:4f:28:38:12:19:d8:fc:42:bc:29:c1:
eb:c9:e9:74:38:64:aa:bd:05:61:b4:45:cb:67:78:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:78:68:A7:35:F3:BD:37:F0:26:BC:33:15:5B:1A:2C:88:79:D1:33
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:8e:c4:e8:de:9f:ab:14:8d:6b:42:aa:27:5b:68:aa:0f:11:
2d:ca:ce:1e:d5:cb:4f:f6:18:10:66:33:2d:32:58:b0:96:b5:
67:39:a6:0f:9e:2e:ce:1f:df:c6:76:47:db:c4:c5:3c:8e:f0:
ee:19:5b:af:71:e1:34:8f:86:4f:6c:b6:90:86:be:de:c0:6b:
a1:34:9e:14:03:b2:da:82:a1:7d:6f:70:bd:65:35:a8:75:38:
55:69:dc:76:06:69:01:96:d0:7c:64:fd:ef:ad:ed:2a:74:95:
b7:eb:83:f4:96:1a:00:c5:cb:99:54:a5:b1:5d:d3:e9:ec:5c:
91:63:35:61:7e:6d:e2:1b:12:e5:a3:0a:c5:2b:25:f5:ab:1b:
1c:e9:11:17:9c:9c:88:96:16:8d:d7:1c:cb:c0:e1:4e:18:62:
43:9a:c2:6e:40:68:85:ac:3d:3a:ec:c5:de:c3:b2:16:01:48:
fe:34:a3:77:13:ae:6a:ac:10:59:be:fa:9a:63:af:92:71:09:
18:c6:24:72:13:07:b7:c3:df:5c:ad:1f:3c:38:58:3e:75:c5:
f5:81:61:2a:e2:d7:5a:23:3c:fb:9b:bc:be:51:c5:42:25:01:
0f:03:21:b9:76:4a:57:3f:03:1d:fe:07:df:e6:01:ca:63:15:
fb:ab:73:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKugm2YbA1aw5sbJTNBXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTgxMjc5NDNlNzE3NTczNDk2NDAxMGM4OWVmODIxNDE2
YTMxYjMwHhcNMjUxMTA0MTQwMDAzWhcNMjUxMTA1MTQwMDAzWjAzMTEwLwYDVQQD
Eyg4Nzc4NjhhNzM1ZjNiZDM3ZjAyNmJjMzMxNTViMWEyYzg4NzlkMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dspXiNfHce2o1fa16k460+7bocx
PcKZsEAvwnakUnH6Pt/Ar+tPrmjyzQdqVA46MBBpw2LOX4cud5Ytp2o5WmJWXiZK
He5XE9aBwyxrWoHfaQFlgs+94jLp1eG3/rSW39H1YR0w9zAjSODVgAWzH11F/isU
7Oj+Haul1hTijQOW7s91aPlCt0K5crWU6bXVZYFUbCr56jcx7DqjHKk2fa5ewn7W
VeqlbGIl5VCW63pRbAkhEhOSFMbFJREhYi9+TYyd1iAkAegbmx56bYH/nh2j7udr
SH3Fl5B+D8lMI/yPSW8QTyg4EhnY/EK8KcHryel0OGSqvQVhtEXLZ3jAKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFId4aKc187038Ca8MxVbGiyIedEzMB8GA1UdIwQY
MBaAFEuYEnlD5xdXNJZAEMie+CFBajGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2Njgt
NjIxNzkyZjdlNTZhLzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2NjgtNjIxNzkyZjdlNTZh
LzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuI7E6N6f
qxSNa0KqJ1toqg8RLcrOHtXLT/YYEGYzLTJYsJa1ZzmmD54uzh/fxnZH28TFPI7w
7hlbr3HhNI+GT2y2kIa+3sBroTSeFAOy2oKhfW9wvWU1qHU4VWncdgZpAZbQfGT9
763tKnSVt+uD9JYaAMXLmVSlsV3T6exckWM1YX5t4hsS5aMKxSsl9asbHOkRF5yc
iJYWjdccy8DhThhiQ5rCbkBohaw9OuzF3sOyFgFI/jSjdxOuaqwQWb76mmOvknEJ
GMYkchMHt8PfXK0fPDhYPnXF9YFhKuLXWiM8+5u8vlHFQiUBDwMhuXZKVz8DHf4H
3+YBymMV+6tzSQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:59 2025 by rpki-client