Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json)
Hash identifier: 8VS3VsqDcG7X6CsXnWfKsQ3uWbu8l/JP5FT7y+1hId4=
Subject key identifier: 2A:BF:8F:B9:D2:DD:D8:C4:19:50:79:08:D7:D4:1E:24:C3:C4:AE:DD
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 019A17615E040C0E320615CC31F1FB81EB24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
Manifest number: 0E63
Signing time: Fri 24 Oct 2025 18:00:48 +0000
Manifest this update: Fri 24 Oct 2025 18:00:48 +0000
Manifest next update: Sat 25 Oct 2025 18:00:48 +0000
Files and hashes: 1: 4EkSsDmoQioZqy5Nx3ZgwgNVKek.roa (hash: VGhbj0GwVploD/uygEp/n7MuApEtZ3hQmaUGbybY4XI=)
2: LXrqqPRInqT0YQQrkSiScVOv68s.roa (hash: RhWWbbeT6YQP2eTW6sSumZ2mUd9atkadmzcbsktp9d0=)
3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: QgPkORb+hFwZDVe/JcYk4GXLthygF1rQcb0zx5RSbng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:61:5e:04:0c:0e:32:06:15:cc:31:f1:fb:81:eb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Oct 24 18:00:48 2025 GMT
Not After : Oct 25 18:00:48 2025 GMT
Subject: CN=2abf8fb9d2ddd8c419507908d7d41e24c3c4aedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:03:fd:88:78:aa:08:c5:45:d8:93:b2:67:
17:42:07:00:f4:1c:63:00:be:b8:aa:9d:dc:e0:3b:
c2:14:40:65:0f:be:75:24:71:08:cd:f1:b3:bd:9e:
68:7a:20:ee:75:3f:37:ae:36:a6:2d:96:8f:72:e8:
af:3b:e6:0b:d4:ba:3c:de:0e:cb:bd:42:6a:e6:25:
c1:da:b2:1e:7f:bf:8e:f1:bf:43:bc:51:b1:4e:8c:
9a:09:a6:16:d5:ea:87:3a:ec:d6:66:22:a0:76:23:
f7:e5:7a:03:8f:8b:8a:54:4d:ec:71:1b:d2:c2:71:
18:7c:af:86:56:6e:03:b8:bc:0e:da:65:fe:cc:19:
16:5a:72:58:95:e1:f1:4a:91:18:2d:ff:9d:dc:5e:
a4:76:78:fa:b5:c9:62:02:14:e3:64:ec:d8:ed:8f:
29:07:8b:00:47:15:f0:c1:51:40:43:13:58:cb:63:
53:49:08:d5:84:15:f1:25:f5:f0:2a:76:0a:56:4e:
d8:5a:ef:e7:b1:c6:04:3b:ef:e8:bf:c0:99:3b:b5:
91:7d:31:e8:87:45:37:7f:ed:08:4e:26:e9:e5:0d:
82:06:7b:7d:f4:6e:e3:25:ca:d6:b2:b9:41:1b:88:
6d:ba:85:58:b7:0a:2f:88:b0:91:de:50:d3:70:c8:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BF:8F:B9:D2:DD:D8:C4:19:50:79:08:D7:D4:1E:24:C3:C4:AE:DD
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:af:94:5e:70:6a:c8:e9:9f:55:40:f4:6d:2b:e5:ab:89:0f:
05:da:0d:79:8c:81:61:f1:04:8e:13:3e:0d:b3:54:21:ad:6e:
1f:2c:57:cc:52:30:2b:74:8d:b0:8c:31:2f:52:bc:8b:7d:59:
60:7d:c5:10:b5:b2:52:90:e1:da:7b:53:81:13:ab:19:fb:cf:
c5:47:be:da:eb:99:0d:35:e9:0b:7e:94:af:02:eb:69:59:50:
c4:c2:70:6a:2f:8e:ae:1d:a9:04:8a:05:f3:0b:9d:ea:5b:bf:
93:27:6c:80:ea:bd:04:55:f4:b2:03:24:9d:87:71:2c:6a:e0:
8a:6a:4b:74:43:a1:f3:11:d6:55:a8:09:cc:07:04:ec:93:f6:
36:9a:cd:64:7e:bc:fc:ff:bc:b8:b6:68:c1:01:2b:c9:1b:64:
30:f9:d1:36:a1:56:b9:20:76:78:b6:d2:0a:a6:b4:84:b8:b8:
f2:db:95:b7:d5:a0:11:0e:0d:b6:70:82:32:da:1f:c7:4d:ec:
81:50:64:f0:69:5f:98:6f:5b:59:90:71:de:81:10:69:69:64:
fc:ff:44:57:4c:e9:53:bb:78:36:59:83:5d:cf:bd:c8:89:0b:
06:86:b0:52:c7:4d:42:6a:e0:24:06:f8:26:93:09:02:09:42:
c9:eb:59:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoXYV4EDA4yBhXMMfH7geskMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNWEyMGE4NjkzOWM4ZGU4YWVkYzMwNTI0M2IwZmQ0YWQ4
NjU0ZDAwHhcNMjUxMDI0MTgwMDQ4WhcNMjUxMDI1MTgwMDQ4WjAzMTEwLwYDVQQD
EygyYWJmOGZiOWQyZGRkOGM0MTk1MDc5MDhkN2Q0MWUyNGMzYzRhZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpkD/Yh4qgjFRdiTsmcXQgcA9Bxj
AL64qp3c4DvCFEBlD751JHEIzfGzvZ5oeiDudT83rjamLZaPcuivO+YL1Lo83g7L
vUJq5iXB2rIef7+O8b9DvFGxToyaCaYW1eqHOuzWZiKgdiP35XoDj4uKVE3scRvS
wnEYfK+GVm4DuLwO2mX+zBkWWnJYleHxSpEYLf+d3F6kdnj6tcliAhTjZOzY7Y8p
B4sARxXwwVFAQxNYy2NTSQjVhBXxJfXwKnYKVk7YWu/nscYEO+/ov8CZO7WRfTHo
h0U3f+0ITibp5Q2CBnt99G7jJcrWsrlBG4htuoVYtwoviLCR3lDTcMg4UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCq/j7nS3djEGVB5CNfUHiTDxK7dMB8GA1UdIwQY
MBaAFLNaIKhpOcjeiu3DBSQ7D9SthlTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAt
YTU0MjU4OTc5OWJjLzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAtYTU0MjU4OTc5OWJj
LzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApa+UXnBq
yOmfVUD0bSvlq4kPBdoNeYyBYfEEjhM+DbNUIa1uHyxXzFIwK3SNsIwxL1K8i31Z
YH3FELWyUpDh2ntTgROrGfvPxUe+2uuZDTXpC36UrwLraVlQxMJwai+Orh2pBIoF
8wud6lu/kydsgOq9BFX0sgMknYdxLGrgimpLdEOh8xHWVagJzAcE7JP2NprNZH68
/P+8uLZowQEryRtkMPnRNqFWuSB2eLbSCqa0hLi48tuVt9WgEQ4NtnCCMtofx03s
gVBk8GlfmG9bWZBx3oEQaWlk/P9EV0zpU7t4NlmDXc+9yIkLBoawUsdNQmrgJAb4
JpMJAglCyetZ5A==
-----END CERTIFICATE-----
Generated at Fri Oct 24 22:15:12 2025 by rpki-client