Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
File: 96Sm-g_D47k2V-7xCu2sD7LEU4w.mft (raw, json)
Hash identifier: 4uJ33ouGFAgGxZp0UzzQEGPBwi9yUUmfcX1i3wSlXkQ=
Subject key identifier: 63:ED:4F:DD:FB:C4:08:20:3E:C0:03:62:BA:2D:AF:CC:90:34:5D:0B
Authority key identifier: F7:A4:A6:FA:0F:C3:E3:B9:36:57:EE:F1:0A:ED:AC:0F:B2:C4:53:8C
Certificate issuer: /CN=f7a4a6fa0fc3e3b93657eef10aedac0fb2c4538c
Certificate serial: 019A72CA3B406188875A3D936DC80ED8BFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
Manifest number: 0482
Signing time: Tue 11 Nov 2025 12:00:47 +0000
Manifest this update: Tue 11 Nov 2025 12:00:47 +0000
Manifest next update: Wed 12 Nov 2025 12:00:47 +0000
Files and hashes: 1: 96Sm-g_D47k2V-7xCu2sD7LEU4w.crl (hash: PpZCRSKvfA24yGlE16f36Cm7TTK7T3K/AnioUcbKyKg=)
2: DqSVFNPqA_J9o0vXdKEoqfgBQv0.roa (hash: ZwggkA5coi0s9FB05nyVzSy5fJIa0mQqtItQ7c3UO84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:3b:40:61:88:87:5a:3d:93:6d:c8:0e:d8:bf:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a4a6fa0fc3e3b93657eef10aedac0fb2c4538c
Validity
Not Before: Nov 11 12:00:47 2025 GMT
Not After : Nov 12 12:00:47 2025 GMT
Subject: CN=63ed4fddfbc408203ec00362ba2dafcc90345d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:34:80:53:0c:53:1e:02:bf:f2:3c:51:18:
55:db:42:73:8f:33:81:fc:4e:23:77:4a:b0:da:e1:
67:6a:32:e4:ae:25:34:a4:51:6a:e8:70:05:93:10:
d0:dc:95:8f:e1:7f:25:6d:f9:64:0a:6e:34:00:4f:
ac:93:55:0a:b6:84:49:77:41:1c:af:6a:92:c8:d6:
3e:e7:b3:a7:54:7a:ef:c0:3d:b4:f3:0a:76:f8:66:
6f:da:83:e4:02:5c:c0:16:1f:d7:fb:d9:fe:cc:d2:
79:50:29:0a:61:cd:ec:cd:57:31:5f:1e:87:07:4a:
55:51:9a:39:16:0b:46:66:07:10:c3:e0:a0:66:29:
2d:98:fd:71:7d:9e:44:e3:a1:84:cd:bd:b5:74:ac:
3a:99:67:c3:3b:94:0a:a1:85:f9:b7:c5:f5:ff:fb:
e8:a3:54:9d:ef:c9:8c:bd:cb:d5:0c:7a:9b:78:25:
68:68:57:12:52:c0:99:30:95:64:92:8b:97:c8:8b:
f3:65:48:69:77:b2:c8:c5:8b:f4:2f:c3:b9:b9:5e:
4a:e8:a4:3f:4f:b7:74:69:61:6b:04:f1:b3:47:81:
eb:1f:b3:4f:da:70:ab:3d:c5:fb:43:84:34:b9:be:
01:ce:aa:1a:e9:4c:ba:27:c4:40:70:6c:b7:b4:37:
a8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:ED:4F:DD:FB:C4:08:20:3E:C0:03:62:BA:2D:AF:CC:90:34:5D:0B
X509v3 Authority Key Identifier:
keyid:F7:A4:A6:FA:0F:C3:E3:B9:36:57:EE:F1:0A:ED:AC:0F:B2:C4:53:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5d:37:0e:04:f0:a5:0c:1d:e7:3e:fc:75:55:bc:18:77:ea:
a7:95:ce:20:a1:70:de:14:9b:5e:a2:ed:ec:bb:56:b0:92:1a:
43:89:67:f8:f2:2d:15:fd:ad:8b:85:c4:fb:55:25:ae:1b:bb:
98:09:92:e9:c7:07:68:94:e1:25:a5:23:5d:3b:c0:76:40:3c:
41:68:95:a3:63:64:17:15:56:92:17:13:52:06:db:fa:0e:18:
2d:0f:83:1a:64:a7:57:4c:58:0b:0a:95:35:66:58:49:ae:a3:
41:32:e6:7f:1e:92:fb:5a:62:da:12:a4:09:24:58:0f:4c:e8:
51:6e:af:e4:e3:5c:e5:fe:9e:16:d5:b0:76:43:cc:7c:6c:cc:
0e:58:d1:22:f8:d4:a0:f4:a8:37:b5:af:05:2b:56:94:e6:09:
c7:09:33:96:ac:2d:e1:c6:e4:0a:52:e4:20:9c:36:4d:2a:4a:
a8:95:3e:11:46:61:8f:ea:f9:f0:7d:83:c2:5b:ac:9f:13:99:
34:ff:32:fe:45:7b:35:d9:d8:96:26:54:e1:e3:dc:dc:29:13:
bd:2f:f7:f8:43:9c:7d:20:58:3d:33:2c:0a:3d:ab:e7:69:dc:
77:a7:86:2e:8d:58:6b:2e:e2:65:0e:9f:71:7c:cc:b5:37:ba:
d7:1d:ba:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyjtAYYiHWj2TbcgO2L/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YTRhNmZhMGZjM2UzYjkzNjU3ZWVmMTBhZWRhYzBmYjJj
NDUzOGMwHhcNMjUxMTExMTIwMDQ3WhcNMjUxMTEyMTIwMDQ3WjAzMTEwLwYDVQQD
Eyg2M2VkNGZkZGZiYzQwODIwM2VjMDAzNjJiYTJkYWZjYzkwMzQ1ZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6k0gFMMUx4Cv/I8URhV20JzjzOB
/E4jd0qw2uFnajLkriU0pFFq6HAFkxDQ3JWP4X8lbflkCm40AE+sk1UKtoRJd0Ec
r2qSyNY+57OnVHrvwD208wp2+GZv2oPkAlzAFh/X+9n+zNJ5UCkKYc3szVcxXx6H
B0pVUZo5FgtGZgcQw+CgZiktmP1xfZ5E46GEzb21dKw6mWfDO5QKoYX5t8X1//vo
o1Sd78mMvcvVDHqbeCVoaFcSUsCZMJVkkouXyIvzZUhpd7LIxYv0L8O5uV5K6KQ/
T7d0aWFrBPGzR4HrH7NP2nCrPcX7Q4Q0ub4Bzqoa6Uy6J8RAcGy3tDeowQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPtT937xAggPsADYrotr8yQNF0LMB8GA1UdIwQY
MBaAFPekpvoPw+O5Nlfu8QrtrA+yxFOMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTZTbS1nX0Q0N2syVi03eEN1MnNEN0xFVTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80MDRiYTUtYzQ2Ni00M2MzLWE2MTYt
OWUwNDA3NjI2NjY3LzEvOTZTbS1nX0Q0N2syVi03eEN1MnNEN0xFVTR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80MDRiYTUtYzQ2Ni00M2MzLWE2MTYtOWUwNDA3NjI2NjY3
LzEvOTZTbS1nX0Q0N2syVi03eEN1MnNEN0xFVTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbF03DgTw
pQwd5z78dVW8GHfqp5XOIKFw3hSbXqLt7LtWsJIaQ4ln+PItFf2ti4XE+1Ulrhu7
mAmS6ccHaJThJaUjXTvAdkA8QWiVo2NkFxVWkhcTUgbb+g4YLQ+DGmSnV0xYCwqV
NWZYSa6jQTLmfx6S+1pi2hKkCSRYD0zoUW6v5ONc5f6eFtWwdkPMfGzMDljRIvjU
oPSoN7WvBStWlOYJxwkzlqwt4cbkClLkIJw2TSpKqJU+EUZhj+r58H2DwlusnxOZ
NP8y/kV7NdnYliZU4ePc3CkTvS/3+EOcfSBYPTMsCj2r52ncd6eGLo1Yay7iZQ6f
cXzMtTe61x26Iw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:56:46 2025 by rpki-client