Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
File: sV49wOv7EOu5QZdFRzLveGrHW3A.mft (raw, json)
Hash identifier: wjx9PR9m/jMUF54s1aK37eNmmjZJNrtlLUxR8N2A/Hs=
Subject key identifier: 34:1D:56:7A:C1:10:E9:9F:B2:EC:35:46:3A:F5:C8:9E:95:D2:E6:FC
Authority key identifier: B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
Certificate issuer: /CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Certificate serial: 019A71EE97389E490B5D8C7362726848D790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
Manifest number: 0BDA
Signing time: Tue 11 Nov 2025 08:00:52 +0000
Manifest this update: Tue 11 Nov 2025 08:00:52 +0000
Manifest next update: Wed 12 Nov 2025 08:00:52 +0000
Files and hashes: 1: sV49wOv7EOu5QZdFRzLveGrHW3A.crl (hash: MfE71DCeY7jJt+nU9h1k3r98vmac4Cks33YiFIHF6Y0=)
2: xqJHtB7Nv0rU8nAxtjI4F8Ssziw.roa (hash: xXaHko57KcXgGPz0/l3ONXw7AGqXwRHBoA+nggaHNQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:97:38:9e:49:0b:5d:8c:73:62:72:68:48:d7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Validity
Not Before: Nov 11 08:00:52 2025 GMT
Not After : Nov 12 08:00:52 2025 GMT
Subject: CN=341d567ac110e99fb2ec35463af5c89e95d2e6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:78:18:dd:07:d8:9e:45:ac:e9:49:0b:dc:
f9:b9:84:cf:32:4b:ca:af:f1:e4:ee:ff:d3:2c:ac:
41:ca:89:0c:1f:00:d7:26:e3:8c:3d:1e:4b:56:7c:
5a:53:e0:20:f2:d9:23:40:fd:69:d8:5e:ab:d0:16:
51:c9:64:5d:bf:b2:64:92:42:08:b8:bd:6f:45:0f:
a2:e9:a1:5a:eb:4f:ea:a3:71:6c:5f:81:38:9d:63:
2b:22:e9:20:21:e1:cf:58:51:5d:83:3d:7a:18:1d:
2b:72:a8:b6:de:7f:ef:08:a0:dd:e8:8d:30:74:66:
a5:be:4c:c6:b9:70:a7:f2:b4:f0:8b:aa:0c:46:ad:
8f:c7:ab:8b:3d:b9:0d:8e:cb:7a:aa:89:30:08:06:
a9:53:24:f4:c6:8e:1e:d1:b8:89:a5:87:9d:bf:51:
fe:a7:44:c1:78:45:65:82:10:63:60:65:df:a0:8a:
0a:da:7e:18:cd:3b:10:73:1d:b0:03:13:e3:76:21:
f2:2d:be:dd:66:c2:9b:58:a5:03:40:3f:3e:74:d8:
94:53:40:94:29:a2:58:ca:5f:de:10:93:87:7b:df:
3d:5e:eb:a4:7c:d0:68:9a:de:ee:43:24:e3:78:40:
c6:59:fc:d1:d8:85:48:85:f9:8c:78:20:4c:53:d9:
6e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1D:56:7A:C1:10:E9:9F:B2:EC:35:46:3A:F5:C8:9E:95:D2:E6:FC
X509v3 Authority Key Identifier:
keyid:B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:98:71:4b:94:ee:25:6f:a7:af:2d:7a:ec:cd:a3:63:20:1d:
ba:43:fb:a7:0e:64:68:10:f8:b3:d2:7f:26:dc:40:56:d3:73:
2a:4e:ba:aa:a9:b8:63:25:91:9e:8d:95:be:2b:b4:63:78:7e:
b1:8c:42:96:cd:1a:ce:73:09:59:46:c8:01:31:89:a6:62:4c:
f5:13:c0:8e:a4:36:a4:5d:5d:ae:f2:be:36:44:19:01:b6:59:
5e:d4:67:5b:56:16:84:45:50:d5:b5:fd:f0:66:3d:89:c8:26:
0d:36:4b:19:fc:52:be:78:00:8c:32:e0:11:4c:57:3f:46:49:
3d:ca:44:a7:1d:f8:19:2c:9d:95:39:8b:f5:92:93:f5:87:06:
cc:d1:dd:2b:3f:41:6b:62:df:b7:2f:4c:9b:00:0b:cb:db:5d:
c0:6e:42:55:25:d1:9f:0c:5d:c6:54:25:bc:3d:8d:80:ce:01:
42:d6:d2:f6:87:f7:c4:27:ab:38:92:cf:28:2f:02:32:59:09:
ad:55:57:b0:69:a9:94:c4:f1:06:6c:30:ad:25:22:36:52:bc:
53:c1:24:8b:0d:cb:b5:ad:68:ab:fe:4b:2c:92:6c:34:51:1d:
3b:e0:b8:0d:46:1e:bb:ac:e4:a4:69:f0:e3:b7:58:ce:d3:7f:
d2:de:30:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7pc4nkkLXYxzYnJoSNeQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNWUzZGMwZWJmYjEwZWJiOTQxOTc0NTQ3MzJlZjc4NmFj
NzViNzAwHhcNMjUxMTExMDgwMDUyWhcNMjUxMTEyMDgwMDUyWjAzMTEwLwYDVQQD
EygzNDFkNTY3YWMxMTBlOTlmYjJlYzM1NDYzYWY1Yzg5ZTk1ZDJlNmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKZ4GN0H2J5FrOlJC9z5uYTPMkvK
r/Hk7v/TLKxByokMHwDXJuOMPR5LVnxaU+Ag8tkjQP1p2F6r0BZRyWRdv7JkkkII
uL1vRQ+i6aFa60/qo3FsX4E4nWMrIukgIeHPWFFdgz16GB0rcqi23n/vCKDd6I0w
dGalvkzGuXCn8rTwi6oMRq2Px6uLPbkNjst6qokwCAapUyT0xo4e0biJpYedv1H+
p0TBeEVlghBjYGXfoIoK2n4YzTsQcx2wAxPjdiHyLb7dZsKbWKUDQD8+dNiUU0CU
KaJYyl/eEJOHe989XuukfNBomt7uQyTjeEDGWfzR2IVIhfmMeCBMU9luGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQdVnrBEOmfsuw1Rjr1yJ6V0ub8MB8GA1UdIwQY
MBaAFLFePcDr+xDruUGXRUcy73hqx1twMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1Y0OXdPdjdFT3U1UVpkRlJ6THZlR3JIVzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80YWRjM2ItM2JkMy00NTQ3LTgwMDYt
MWQwMDdiZTljZGQ4LzEvc1Y0OXdPdjdFT3U1UVpkRlJ6THZlR3JIVzNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi80YWRjM2ItM2JkMy00NTQ3LTgwMDYtMWQwMDdiZTljZGQ4
LzEvc1Y0OXdPdjdFT3U1UVpkRlJ6THZlR3JIVzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJhxS5Tu
JW+nry167M2jYyAdukP7pw5kaBD4s9J/JtxAVtNzKk66qqm4YyWRno2Vviu0Y3h+
sYxCls0aznMJWUbIATGJpmJM9RPAjqQ2pF1drvK+NkQZAbZZXtRnW1YWhEVQ1bX9
8GY9icgmDTZLGfxSvngAjDLgEUxXP0ZJPcpEpx34GSydlTmL9ZKT9YcGzNHdKz9B
a2Lfty9MmwALy9tdwG5CVSXRnwxdxlQlvD2NgM4BQtbS9of3xCerOJLPKC8CMlkJ
rVVXsGmplMTxBmwwrSUiNlK8U8Ekiw3Lta1oq/5LLJJsNFEdO+C4DUYeu6zkpGnw
47dYztN/0t4wTQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:23 2025 by rpki-client