Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
File: S-CVOnswPWoemgKHFgwvRg8H8iY.mft (raw, json)
Hash identifier: UksHv7ZHFsK3GKwNEVwdT28/uCCMpCMHr3RvAGWY6as=
Subject key identifier: 20:19:DE:27:16:5A:C7:13:D7:8A:E7:8E:6D:72:12:53:E0:C5:E8:81
Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Certificate issuer: /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Certificate serial: 019A73A62BA986B2D5C0EDA7C1FDC1B5F7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
Manifest number: 15F3
Signing time: Tue 11 Nov 2025 16:01:01 +0000
Manifest this update: Tue 11 Nov 2025 16:01:01 +0000
Manifest next update: Wed 12 Nov 2025 16:01:01 +0000
Files and hashes: 1: S-CVOnswPWoemgKHFgwvRg8H8iY.crl (hash: FBXptCL4scydjyRqaADF7ITTa2B2M3VAh0xbc17XraQ=)
2: oeCxzVDUfHaJOXyvnKDzLrak4gk.roa (hash: IomvdIa0fgMjIoUuc5morX/DBZMfwMxLqyV3hq96Pqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:2b:a9:86:b2:d5:c0:ed:a7:c1:fd:c1:b5:f7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Validity
Not Before: Nov 11 16:01:01 2025 GMT
Not After : Nov 12 16:01:01 2025 GMT
Subject: CN=2019de27165ac713d78ae78e6d721253e0c5e881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:2a:b8:e9:8b:cb:43:33:69:bc:2e:78:57:
de:c8:90:56:8e:30:12:23:e7:c6:2b:2b:4f:80:c1:
c0:2a:2c:c7:1c:1e:61:39:99:32:51:80:75:f1:bd:
8c:fc:58:60:44:2d:1f:95:b5:d6:95:59:f1:61:6e:
d5:f7:0b:82:a4:df:1b:9d:c2:b0:6f:31:1e:13:6c:
59:88:42:c7:df:99:12:0d:c4:6e:c0:5d:fc:7e:0a:
49:98:a2:31:6e:bc:8d:b6:24:1d:0c:ca:d7:e2:1d:
af:b2:eb:99:87:a6:c3:44:80:fd:ac:1e:15:2f:e2:
60:15:75:7a:a5:03:bf:98:db:0e:16:cf:6c:a5:6c:
0b:d2:0e:ca:5e:a4:27:ee:15:eb:ab:19:15:c1:af:
65:cd:b1:a2:45:66:d7:8f:38:76:2e:e8:aa:87:d9:
02:84:f7:d8:60:c7:f0:db:96:8f:3c:ad:c2:5b:e0:
bd:c8:9f:46:a4:55:c8:92:4a:d3:f9:fd:68:af:33:
44:8c:9e:ba:44:01:83:ba:a8:9b:04:e8:89:bc:36:
4d:0e:43:b3:8b:ec:92:47:c7:5a:92:74:a2:7a:cc:
f3:92:9c:37:54:7e:04:3d:ee:45:49:2c:8f:d8:9c:
54:38:d4:0a:6d:81:ac:6b:9d:17:59:c3:f8:e3:c4:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:19:DE:27:16:5A:C7:13:D7:8A:E7:8E:6D:72:12:53:E0:C5:E8:81
X509v3 Authority Key Identifier:
keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f8:ff:82:e9:60:10:48:0e:b4:0a:67:b5:5d:1b:18:68:ef:
77:86:2f:d6:e1:8b:7d:0c:3c:74:13:5e:17:ae:17:ae:09:17:
c7:29:28:ae:9c:af:a5:a0:c3:8a:17:44:b6:a4:ef:37:75:af:
49:30:35:19:55:34:cb:7d:d5:7c:f3:a9:8d:1b:4c:9f:fe:24:
34:e2:e9:62:22:a6:dd:91:44:d7:c1:f9:9f:92:9d:a9:55:92:
90:43:28:14:41:d0:a9:e6:58:90:96:8f:ae:f0:b1:26:c3:8c:
ff:d3:e1:34:23:46:f8:66:e0:2f:63:33:6e:52:15:eb:91:d1:
4c:99:06:26:c0:20:85:02:07:b0:1e:5a:4a:a5:5d:40:f5:13:
b9:b6:bf:f8:2a:9a:c5:74:09:4a:ea:2f:7a:cb:33:09:19:72:
40:32:c0:5f:e4:3a:9b:eb:f5:57:14:a7:4b:2d:2d:71:cb:fd:
f3:cd:b9:d4:09:6c:4d:67:a5:eb:4e:be:6b:90:5e:85:11:04:
b7:8d:8a:9a:ea:e1:0f:a7:70:06:b8:ef:97:d1:19:f0:87:7e:
9a:45:eb:4e:4e:fa:81:8b:7b:82:d0:37:c4:18:75:4b:10:fc:
5e:5d:9c:5e:5f:2e:00:70:3f:91:0c:41:10:d5:53:e8:fb:fc:
df:f5:ae:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzpiuphrLVwO2nwf3BtffFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZTA5NTNhN2IzMDNkNmExZTlhMDI4NzE2MGMyZjQ2MGYw
N2YyMjYwHhcNMjUxMTExMTYwMTAxWhcNMjUxMTEyMTYwMTAxWjAzMTEwLwYDVQQD
EygyMDE5ZGUyNzE2NWFjNzEzZDc4YWU3OGU2ZDcyMTI1M2UwYzVlODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnUquOmLy0MzabwueFfeyJBWjjAS
I+fGKytPgMHAKizHHB5hOZkyUYB18b2M/FhgRC0flbXWlVnxYW7V9wuCpN8bncKw
bzEeE2xZiELH35kSDcRuwF38fgpJmKIxbryNtiQdDMrX4h2vsuuZh6bDRID9rB4V
L+JgFXV6pQO/mNsOFs9spWwL0g7KXqQn7hXrqxkVwa9lzbGiRWbXjzh2Luiqh9kC
hPfYYMfw25aPPK3CW+C9yJ9GpFXIkkrT+f1orzNEjJ66RAGDuqibBOiJvDZNDkOz
i+ySR8daknSieszzkpw3VH4EPe5FSSyP2JxUONQKbYGsa50XWcP448ROwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAZ3icWWscT14rnjm1yElPgxeiBMB8GA1UdIwQY
MBaAFEvglTp7MD1qHpoChxYML0YPB/ImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1DVk9uc3dQV29lbWdLSEZnd3ZSZzhIOGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lNDVjNTItMTcxZi00YzVjLWFiZTgt
ZWU5NmQwZGYwMDAzLzEvUy1DVk9uc3dQV29lbWdLSEZnd3ZSZzhIOGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lNDVjNTItMTcxZi00YzVjLWFiZTgtZWU5NmQwZGYwMDAz
LzEvUy1DVk9uc3dQV29lbWdLSEZnd3ZSZzhIOGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvj/gulg
EEgOtApntV0bGGjvd4Yv1uGLfQw8dBNeF64XrgkXxykorpyvpaDDihdEtqTvN3Wv
STA1GVU0y33VfPOpjRtMn/4kNOLpYiKm3ZFE18H5n5KdqVWSkEMoFEHQqeZYkJaP
rvCxJsOM/9PhNCNG+GbgL2MzblIV65HRTJkGJsAghQIHsB5aSqVdQPUTuba/+Cqa
xXQJSuovesszCRlyQDLAX+Q6m+v1VxSnSy0tccv988251AlsTWel606+a5BehREE
t42KmurhD6dwBrjvl9EZ8Id+mkXrTk76gYt7gtA3xBh1SxD8Xl2cXl8uAHA/kQxB
ENVT6Pv83/Wu+g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:12 2025 by rpki-client