Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
File: sUP6cD--4Eu9kc5joyFIs2uOVao.mft (raw, json)
Hash identifier: W42lZ/DjvUxDo/zpgT0dvrScDKB2+wX1KYCksFyOUg4=
Subject key identifier: 89:C4:3F:6F:42:C9:5F:3E:97:39:81:4B:CA:4A:9A:ED:D1:89:EA:40
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Certificate issuer: /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial: 019A4F9917612124868B1C5E4A07AB0C133F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 16:00:24 +0000
Manifest this update: Tue 04 Nov 2025 16:00:24 +0000
Manifest next update: Wed 05 Nov 2025 16:00:24 +0000
Files and hashes: 1: 58fbPOFYsvSvpunLR9rNMDG4HkA.roa (hash: ReuETm25IMaI+/tSCMwYNSlxDNomkPKvSSM3DvSw9hM=)
2: 5bh70NDw7zp64NXJ_51b90SAuu4.roa (hash: 4ywVwFnAjMHvhsAsLPg1qryIBj6T959YwjsSeW0RTBc=)
3: bmIFkmc46wZv6ewcgJwZwj1cvlM.roa (hash: t+xCiPV9KaRJxGAZeXjb1sny70g09pMUXGWJ9TkswqI=)
4: sUP6cD--4Eu9kc5joyFIs2uOVao.crl (hash: QsraklB8VwTmzIW8qL3PQVja9EY1cKsrqUn5pefyk8E=)
5: uQ91Nqx0wJ0hnu7-KkzAQL_V-cs.roa (hash: /lYRhYLBo69SAVI30wQHJh+caFfwu0pd662lIZiJCC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:17:61:21:24:86:8b:1c:5e:4a:07:ab:0c:13:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Validity
Not Before: Nov 4 16:00:24 2025 GMT
Not After : Nov 5 16:00:24 2025 GMT
Subject: CN=89c43f6f42c95f3e9739814bca4a9aedd189ea40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:93:84:6c:f1:b0:4c:38:0c:c9:db:1c:67:
15:66:6f:b5:33:18:ec:34:60:29:7f:78:5c:d5:ca:
3c:3c:eb:11:7f:0a:e3:c5:83:1b:bf:30:9c:17:e7:
cf:63:80:e7:ad:0f:d1:8c:45:13:e9:b4:3a:43:7a:
0e:96:2b:01:a7:e1:fc:45:32:19:20:b2:86:df:33:
88:63:f6:8a:bc:df:7a:a4:ad:23:a3:74:b3:76:ee:
1f:d5:0b:8e:ad:19:48:99:c1:73:6e:da:4f:77:4b:
6b:80:9a:27:75:cd:24:ca:f9:e4:55:ad:29:af:4e:
39:a9:05:4b:81:72:58:5b:6c:94:69:eb:22:8e:e2:
27:b2:ca:dc:29:ee:40:3b:25:88:34:f0:2d:e4:26:
8d:98:7a:85:97:14:e7:91:9a:c0:58:d2:0e:68:aa:
b0:85:a8:8c:7e:c6:4c:50:ed:cf:29:c3:4e:d2:09:
39:0f:2e:e7:0e:d0:17:d3:60:69:a0:b4:9b:67:15:
52:18:c8:cd:c0:ad:2d:f3:ca:37:38:bd:12:58:4a:
88:21:52:c8:b9:c4:de:db:17:61:e9:a8:d0:0e:e2:
8a:61:be:5e:51:b0:1c:f9:19:fe:96:4f:31:ea:d9:
cb:7c:4a:5b:1e:cd:e2:77:43:2a:e2:68:94:84:1e:
68:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C4:3F:6F:42:C9:5F:3E:97:39:81:4B:CA:4A:9A:ED:D1:89:EA:40
X509v3 Authority Key Identifier:
keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:13:67:86:2f:8f:46:c7:ad:49:36:fd:79:f2:b6:f2:02:f8:
cf:61:4b:57:80:dc:69:a9:43:78:c7:8b:0c:25:41:c5:45:43:
9d:5f:62:e6:50:0e:49:85:03:37:73:6c:3b:83:3f:91:80:19:
6a:a6:de:43:40:c2:16:d5:a9:41:b9:29:58:ca:c3:5d:89:39:
ed:76:c2:78:f6:47:5a:2d:9a:aa:a5:cd:ba:73:50:a9:12:43:
be:e3:58:0a:cc:51:64:4f:9d:08:2b:37:32:63:1f:c9:cc:52:
a2:2b:e4:ac:6d:5c:f2:d2:59:79:4d:3d:07:5f:55:99:e0:65:
94:38:06:c5:b1:91:71:1f:76:99:bc:f6:87:2f:7c:a3:4d:43:
4e:d6:88:bc:ff:89:bf:f2:d3:5e:ed:b7:49:7a:10:c2:04:1f:
0a:5d:03:0d:40:9c:60:10:7f:fa:71:70:35:d6:33:33:dd:20:
32:25:a5:9c:41:51:3f:d9:5a:24:5d:7b:d2:e5:31:5c:8a:f0:
6a:4f:50:2e:f1:fe:70:44:49:27:67:54:13:e4:9e:13:10:d2:
d7:5a:62:7d:07:ff:88:b4:c6:23:f3:d0:e2:83:d3:31:0a:3f:
00:fc:ea:13:ac:f6:44:21:c7:ae:b8:b4:52:c3:d0:ce:04:fe:
72:39:c1:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmRdhISSGixxeSgerDBM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDNmYTcwM2ZiZWUwNGJiZDkxY2U2M2EzMjE0OGIzNmI4
ZTU1YWEwHhcNMjUxMTA0MTYwMDI0WhcNMjUxMTA1MTYwMDI0WjAzMTEwLwYDVQQD
Eyg4OWM0M2Y2ZjQyYzk1ZjNlOTczOTgxNGJjYTRhOWFlZGQxODllYTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMaThGzxsEw4DMnbHGcVZm+1Mxjs
NGApf3hc1co8POsRfwrjxYMbvzCcF+fPY4DnrQ/RjEUT6bQ6Q3oOlisBp+H8RTIZ
ILKG3zOIY/aKvN96pK0jo3Szdu4f1QuOrRlImcFzbtpPd0trgJondc0kyvnkVa0p
r045qQVLgXJYW2yUaesijuInssrcKe5AOyWINPAt5CaNmHqFlxTnkZrAWNIOaKqw
haiMfsZMUO3PKcNO0gk5Dy7nDtAX02BpoLSbZxVSGMjNwK0t88o3OL0SWEqIIVLI
ucTe2xdh6ajQDuKKYb5eUbAc+Rn+lk8x6tnLfEpbHs3id0Mq4miUhB5otwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInEP29CyV8+lzmBS8pKmu3RiepAMB8GA1UdIwQY
MBaAFLFD+nA/vuBLvZHOY6MhSLNrjlWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iOTM0MmYtNTkxNi00NjQ0LWIxYWEt
MDBkMWU3YTE3MGEyLzEvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iOTM0MmYtNTkxNi00NjQ0LWIxYWEtMDBkMWU3YTE3MGEy
LzEvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuRNnhi+P
RsetSTb9efK28gL4z2FLV4DcaalDeMeLDCVBxUVDnV9i5lAOSYUDN3NsO4M/kYAZ
aqbeQ0DCFtWpQbkpWMrDXYk57XbCePZHWi2aqqXNunNQqRJDvuNYCsxRZE+dCCs3
MmMfycxSoivkrG1c8tJZeU09B19VmeBllDgGxbGRcR92mbz2hy98o01DTtaIvP+J
v/LTXu23SXoQwgQfCl0DDUCcYBB/+nFwNdYzM90gMiWlnEFRP9laJF170uUxXIrw
ak9QLvH+cERJJ2dUE+SeExDS11pifQf/iLTGI/PQ4oPTMQo/APzqE6z2RCHHrri0
UsPQzgT+cjnBQw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:46:55 2025 by rpki-client