Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
File: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft (raw, json)
Hash identifier: h6gTma2SSkZ9BSetOl1+zorAE6m7vRe7O3bgc4MC44o=
Subject key identifier: 08:1B:EC:DD:F1:70:29:E9:1E:D1:02:0C:A3:AB:F5:26:31:45:AF:B6
Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
Certificate issuer: /CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Certificate serial: 0199D1A4C6EE09481AEC113175B573FD809C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
Manifest number: 1519
Signing time: Sat 11 Oct 2025 05:01:00 +0000
Manifest this update: Sat 11 Oct 2025 05:01:00 +0000
Manifest next update: Sun 12 Oct 2025 05:01:00 +0000
Files and hashes: 1: 4HxC1YnWdGWm4g8pwWn_Hlow4Qo.roa (hash: qpMp8mE7oIuGxE7UiKhcFCXTbJmQfeSevFyEhmL5FpM=)
2: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl (hash: Vb8VM2ed5piLWHvtBxMnRcqSWmmH8AnzQqKOY+CLzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d1:a4:c6:ee:09:48:1a:ec:11:31:75:b5:73:fd:80:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Validity
Not Before: Oct 11 05:01:00 2025 GMT
Not After : Oct 12 05:01:00 2025 GMT
Subject: CN=081becddf17029e91ed1020ca3abf5263145afb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:70:c0:c4:64:0c:29:1f:98:c2:b6:19:34:
1e:b8:3b:db:d9:b2:bb:80:21:88:c2:82:f3:0c:00:
0a:f5:40:45:46:c8:ca:88:36:fe:7d:6d:88:4f:20:
62:e6:41:0c:ff:90:8b:48:54:5c:6a:2c:07:44:ec:
b3:f6:7d:8f:17:93:4b:d3:cb:5b:ac:82:50:2f:e2:
29:53:55:ac:59:ec:33:15:4f:fe:3c:ac:d7:a4:41:
40:d4:dd:09:14:4b:66:b2:87:b7:9f:e3:96:0e:97:
16:7a:67:fe:ba:25:65:0c:00:94:67:c1:97:9c:7e:
82:b1:14:9c:f9:47:b8:2c:77:95:54:23:4a:ea:9e:
1a:60:71:da:a6:cd:96:15:61:ea:6d:a5:5e:d2:50:
03:86:b9:cc:e8:a8:cb:fd:fa:a2:cd:f9:6f:8f:36:
70:19:f8:0e:01:ee:2c:33:0c:c1:b6:5e:2a:9b:5b:
2f:8d:ad:95:36:e2:a7:72:76:00:eb:d8:7b:08:b1:
de:0a:4d:66:96:a2:88:d9:30:2c:a4:ab:ad:a2:87:
7a:dd:b2:be:62:d2:77:f4:80:db:58:2d:49:bf:4b:
71:da:5a:c9:74:ef:94:39:85:78:ad:40:40:d7:b2:
de:76:68:19:0c:c3:6c:80:88:ef:82:25:12:28:31:
e3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1B:EC:DD:F1:70:29:E9:1E:D1:02:0C:A3:AB:F5:26:31:45:AF:B6
X509v3 Authority Key Identifier:
keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8b:32:ba:84:56:b3:1e:88:24:a9:13:b3:45:00:44:bd:f0:
9d:5c:b2:10:be:7e:97:49:f1:3b:a2:0c:a8:83:05:23:aa:6b:
7a:d6:2c:d2:c8:4d:5a:9f:2d:8b:28:12:2a:a4:18:83:61:0b:
ad:eb:ef:99:86:1a:1e:5c:87:48:a5:ab:b0:ef:a7:ce:23:07:
ea:e7:4e:f9:75:3b:92:bc:35:f5:55:7a:31:05:bc:1b:06:94:
07:2c:5e:91:bc:27:c4:2b:19:75:b1:e3:10:5d:03:20:8c:d1:
6d:c1:e5:a0:09:ee:ca:97:f6:3f:ee:55:f3:b2:7b:82:a4:44:
09:14:66:60:a8:e5:16:82:15:9b:4e:63:ef:ac:e2:ca:1f:d4:
96:5c:7a:84:e3:0f:af:dc:18:ca:83:a4:d7:10:c1:14:a5:0f:
a2:42:66:89:44:66:dc:d7:c5:32:c6:4c:4c:70:59:c6:bd:63:
0f:a0:33:4e:cb:e3:4c:44:64:ac:00:86:ed:71:ab:25:e5:5c:
61:3c:f4:c9:ba:3f:31:af:86:9f:4c:4b:3b:4e:0a:a4:6f:68:
fc:6b:f6:b6:d2:c8:33:d1:54:aa:7a:cb:bc:2d:d8:be:77:b9:
13:a2:e4:68:5d:11:c8:27:8d:74:46:fa:cb:47:8f:c4:5c:ce:
3e:bf:2f:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnRpMbuCUga7BExdbVz/YCcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhM2MzNjBjMzY0YmI2NmRjNjM1MTcxOTM1NjhmNWJhODUx
N2FjZTgwHhcNMjUxMDExMDUwMTAwWhcNMjUxMDEyMDUwMTAwWjAzMTEwLwYDVQQD
EygwODFiZWNkZGYxNzAyOWU5MWVkMTAyMGNhM2FiZjUyNjMxNDVhZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBFwwMRkDCkfmMK2GTQeuDvb2bK7
gCGIwoLzDAAK9UBFRsjKiDb+fW2ITyBi5kEM/5CLSFRcaiwHROyz9n2PF5NL08tb
rIJQL+IpU1WsWewzFU/+PKzXpEFA1N0JFEtmsoe3n+OWDpcWemf+uiVlDACUZ8GX
nH6CsRSc+Ue4LHeVVCNK6p4aYHHaps2WFWHqbaVe0lADhrnM6KjL/fqizflvjzZw
GfgOAe4sMwzBtl4qm1svja2VNuKncnYA69h7CLHeCk1mlqKI2TAspKutood63bK+
YtJ39IDbWC1Jv0tx2lrJdO+UOYV4rUBA17LedmgZDMNsgIjvgiUSKDHj2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgb7N3xcCnpHtECDKOr9SYxRa+2MB8GA1UdIwQY
MBaAFEo8Ngw2S7ZtxjUXGTVo9bqFF6zoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYt
MWQ5Yzg2NDE2ZTliLzEvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYtMWQ5Yzg2NDE2ZTli
LzEvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYsyuoRW
sx6IJKkTs0UARL3wnVyyEL5+l0nxO6IMqIMFI6pretYs0shNWp8tiygSKqQYg2EL
revvmYYaHlyHSKWrsO+nziMH6udO+XU7krw19VV6MQW8GwaUByxekbwnxCsZdbHj
EF0DIIzRbcHloAnuypf2P+5V87J7gqRECRRmYKjlFoIVm05j76ziyh/Ullx6hOMP
r9wYyoOk1xDBFKUPokJmiURm3NfFMsZMTHBZxr1jD6AzTsvjTERkrACG7XGrJeVc
YTz0ybo/Ma+Gn0xLO04KpG9o/Gv2ttLIM9FUqnrLvC3Yvne5E6LkaF0RyCeNdEb6
y0ePxFzOPr8vLA==
-----END CERTIFICATE-----
Generated at Sat Oct 11 10:06:37 2025 by rpki-client