Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
File: S92aEzqSSGoU7cTnYlsk-V04kcw.mft (raw, json)
Hash identifier: dmIv34wOVtb1UCZCIq6wPS5ZMvHXkfZLXuScA1kS85U=
Subject key identifier: 2F:AA:A4:13:2E:DE:25:17:4A:F3:5D:BE:EE:4A:A2:DE:B4:CB:7E:2F
Authority key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
Certificate issuer: /CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Certificate serial: 019A4F6218B560553A6E9304809DB83C1509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
Manifest number: 08F8
Signing time: Tue 04 Nov 2025 15:00:20 +0000
Manifest this update: Tue 04 Nov 2025 15:00:20 +0000
Manifest next update: Wed 05 Nov 2025 15:00:20 +0000
Files and hashes: 1: S92aEzqSSGoU7cTnYlsk-V04kcw.crl (hash: 58FJDjU9Ylfslix6ISuH7HPuyHZcF7LiZOhyf3qT6eY=)
2: takXMVWWq86gQFEdW1EUOBKN5bA.roa (hash: aj1iYELR5J1LrrkI2DJAheQdQ03iRDb31bSm3xq1fzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:18:b5:60:55:3a:6e:93:04:80:9d:b8:3c:15:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Validity
Not Before: Nov 4 15:00:20 2025 GMT
Not After : Nov 5 15:00:20 2025 GMT
Subject: CN=2faaa4132ede25174af35dbeee4aa2deb4cb7e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:35:23:31:06:6b:8f:89:6e:de:24:6c:ad:79:
24:56:77:55:9a:f2:ea:61:7f:6b:9e:1c:3e:92:e2:
42:01:13:7d:1a:53:61:db:48:a6:c8:08:4a:99:d4:
c3:8f:bf:e0:52:e8:0b:6e:0d:a9:68:f6:dd:c6:13:
2a:f9:8b:96:34:26:90:bb:10:67:38:05:fc:f4:7b:
09:77:c5:13:ff:68:96:6b:77:f3:08:cd:db:47:c5:
ca:25:ac:39:d5:59:d4:58:46:40:ba:a9:2e:d8:2a:
e4:da:7b:84:8f:40:8f:3c:38:c7:58:da:39:c1:dd:
d0:24:3e:ce:e6:bd:b9:bc:00:2e:c3:81:9a:96:e5:
b2:0e:d9:26:b6:15:0a:b2:c9:1c:2b:d3:9f:ac:6e:
a1:74:53:e6:21:e1:e9:f5:0d:4f:29:74:33:ce:8c:
31:3b:41:de:dc:6f:61:d8:67:e6:20:d3:74:26:6f:
ea:a1:4e:d2:f8:b4:fe:03:fe:eb:49:3e:07:fd:39:
fe:27:b7:75:11:71:a0:f8:5e:94:da:66:d0:85:c8:
4e:92:08:e2:e4:9f:c4:39:43:c9:c0:bd:e5:50:34:
03:ee:e5:29:f5:9a:d9:1a:1d:86:31:3e:39:79:18:
02:b1:9c:1f:42:7a:29:83:85:3e:05:cd:ec:5e:15:
d6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AA:A4:13:2E:DE:25:17:4A:F3:5D:BE:EE:4A:A2:DE:B4:CB:7E:2F
X509v3 Authority Key Identifier:
keyid:4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cd:88:9d:7a:1b:53:ec:36:1f:1b:3d:6f:f7:00:2b:8d:6c:
d7:88:13:d3:2e:d3:b9:ba:22:2a:27:8a:9e:94:77:fb:17:5c:
d3:65:f6:10:d1:ec:6c:e4:d1:c9:58:59:bb:78:08:3c:c9:47:
f6:c8:58:0a:1f:2e:a9:27:de:16:58:7f:ea:dc:40:9f:27:80:
9a:53:43:f5:fe:da:fc:2a:43:7a:bf:ef:dc:9d:ef:81:a8:b5:
94:8f:c1:e9:98:9e:05:b4:b4:80:ce:c7:e4:46:18:48:f2:cc:
51:2a:9f:6c:47:58:65:10:56:a0:4d:c1:da:95:22:64:a9:61:
2f:ab:ca:8c:da:46:67:46:70:11:59:a2:fd:fd:95:98:3e:22:
a7:f9:86:c7:1c:ae:08:de:95:32:02:9b:41:15:92:f5:45:7f:
d4:be:ab:0f:5a:7e:64:01:21:84:fe:ce:4d:dc:f1:c2:80:3a:
7d:44:1f:ab:db:c8:1c:45:b2:79:ca:96:5a:52:49:9e:1b:25:
97:0c:f2:8c:69:67:1b:07:96:68:df:54:53:e5:5a:9e:67:61:
98:92:2f:83:6d:b9:1d:d4:ba:63:e7:ed:34:2a:91:be:de:fd:
6f:f8:86:81:ea:63:58:3d:44:2a:12:f6:35:6a:b2:f1:3f:c9:
e2:f7:e6:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYhi1YFU6bpMEgJ24PBUJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZGQ5YTEzM2E5MjQ4NmExNGVkYzRlNzYyNWIyNGY5NWQz
ODkxY2MwHhcNMjUxMTA0MTUwMDIwWhcNMjUxMTA1MTUwMDIwWjAzMTEwLwYDVQQD
EygyZmFhYTQxMzJlZGUyNTE3NGFmMzVkYmVlZTRhYTJkZWI0Y2I3ZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DUjMQZrj4lu3iRsrXkkVndVmvLq
YX9rnhw+kuJCARN9GlNh20imyAhKmdTDj7/gUugLbg2paPbdxhMq+YuWNCaQuxBn
OAX89HsJd8UT/2iWa3fzCM3bR8XKJaw51VnUWEZAuqku2Crk2nuEj0CPPDjHWNo5
wd3QJD7O5r25vAAuw4GaluWyDtkmthUKsskcK9OfrG6hdFPmIeHp9Q1PKXQzzowx
O0He3G9h2GfmINN0Jm/qoU7S+LT+A/7rST4H/Tn+J7d1EXGg+F6U2mbQhchOkgji
5J/EOUPJwL3lUDQD7uUp9ZrZGh2GMT45eRgCsZwfQnopg4U+Bc3sXhXWXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+qpBMu3iUXSvNdvu5Kot60y34vMB8GA1UdIwQY
MBaAFEvdmhM6kkhqFO3E52JbJPldOJHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83MGE0OTktYzg3ZS00NTQ2LTg5NTAt
YjcwNGVlMjdjNjVjLzEvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83MGE0OTktYzg3ZS00NTQ2LTg5NTAtYjcwNGVlMjdjNjVj
LzEvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAes2InXob
U+w2Hxs9b/cAK41s14gT0y7TuboiKieKnpR3+xdc02X2ENHsbOTRyVhZu3gIPMlH
9shYCh8uqSfeFlh/6txAnyeAmlND9f7a/CpDer/v3J3vgai1lI/B6ZieBbS0gM7H
5EYYSPLMUSqfbEdYZRBWoE3B2pUiZKlhL6vKjNpGZ0ZwEVmi/f2VmD4ip/mGxxyu
CN6VMgKbQRWS9UV/1L6rD1p+ZAEhhP7OTdzxwoA6fUQfq9vIHEWyecqWWlJJnhsl
lwzyjGlnGweWaN9UU+VanmdhmJIvg225HdS6Y+ftNCqRvt79b/iGgepjWD1EKhL2
NWqy8T/J4vfmIw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:23 2025 by rpki-client