Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
File: SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft (raw, json)
Hash identifier: IJywlmV75yUv2dLZq6J5bEdii0H+/bKyn0SnNcqrQfo=
Subject key identifier: 65:87:AC:0B:CE:C4:63:E0:5A:3C:63:8F:56:9A:9E:14:1B:DE:40:DA
Authority key identifier: 4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
Certificate issuer: /CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Certificate serial: 019A7112EEFD1788E7C4F33647E4EE78750B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 04:00:57 +0000
Manifest this update: Tue 11 Nov 2025 04:00:57 +0000
Manifest next update: Wed 12 Nov 2025 04:00:57 +0000
Files and hashes: 1: KUfFcY4n_r75t21wBTn8NHwpPWo.roa (hash: Vj4b0HHRAbzzjfGSfe71X4pK6wA9f27I+UmGi3mJNYI=)
2: SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl (hash: tPaunWF3g7BPwzWAxMH+MpPdMQQP9vHtbpO++guklWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ee:fd:17:88:e7:c4:f3:36:47:e4:ee:78:75:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Validity
Not Before: Nov 11 04:00:57 2025 GMT
Not After : Nov 12 04:00:57 2025 GMT
Subject: CN=6587ac0bcec463e05a3c638f569a9e141bde40da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:81:c5:d8:3e:5d:21:cc:9e:9a:d9:a0:08:ba:
d9:86:a7:49:d2:d1:07:f5:ce:73:f2:7f:74:36:cf:
f4:29:67:c1:c4:ca:03:3d:f6:96:ae:19:6b:8b:5d:
68:d5:ba:42:c3:c0:ff:38:8a:76:83:11:13:58:7b:
64:c4:61:f2:7f:d3:4a:99:51:ae:60:88:95:67:b8:
d9:a4:16:b7:46:88:f8:e0:22:cd:92:59:78:85:9e:
fb:b5:6d:24:ac:30:40:1b:21:87:89:70:3f:ae:67:
e0:ef:14:9f:61:88:ac:36:f7:d0:9d:e0:a7:93:6b:
95:06:90:d3:6f:04:99:43:d5:22:9a:52:1e:ea:d9:
49:b3:6e:75:5c:32:7c:21:76:cc:21:09:25:27:02:
c1:b8:fd:4b:e1:21:21:51:bd:2e:61:84:5e:4d:00:
ea:d6:f5:58:0a:ce:20:bb:3e:32:83:66:77:8c:dc:
8c:da:a0:12:bb:ae:74:12:57:4f:ee:3b:ff:bd:70:
ca:85:3f:45:f9:12:5a:85:2c:dc:c5:a1:15:c9:84:
e0:ed:0a:0e:4e:75:a9:3f:9c:a9:d9:d2:4a:9e:45:
1a:1d:a4:25:b8:ce:c2:2a:d4:b6:7c:e6:cd:1b:83:
8f:01:07:bd:67:72:98:70:02:10:11:56:5d:0c:2b:
9f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:87:AC:0B:CE:C4:63:E0:5A:3C:63:8F:56:9A:9E:14:1B:DE:40:DA
X509v3 Authority Key Identifier:
keyid:4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a4:26:e9:b0:32:22:c5:c9:83:a7:38:a5:83:19:16:ed:06:
3b:0a:98:ef:3d:c4:dc:15:39:ea:16:7c:b0:2f:3f:d4:4c:59:
69:01:5f:fb:17:a7:3b:b1:29:45:a5:3c:9a:47:64:84:33:1b:
8f:6a:f1:3a:7c:85:54:93:03:46:53:12:a5:a6:e4:f6:8a:0d:
09:cb:e5:a7:bc:2a:ee:04:96:2d:dc:fa:a8:12:a7:23:54:30:
23:b8:94:01:fb:4b:e9:24:58:37:36:d4:f1:e9:43:c3:49:cd:
77:9a:41:38:7f:1c:be:35:51:4f:0e:a4:6f:5e:91:69:f1:f6:
cc:aa:ea:63:0d:3c:24:05:0c:68:57:9b:9b:2f:af:e0:e2:8d:
5b:16:8e:36:41:d5:cd:00:b4:68:25:4b:07:1c:07:9c:88:02:
f0:ec:08:6c:15:7f:f1:a0:fe:c3:8d:3c:6b:47:10:53:a6:a9:
84:eb:04:c8:fa:7e:99:79:e6:b7:c3:9b:23:e9:51:f7:8c:40:
e2:8c:78:a0:d2:ff:16:62:fd:9f:17:dd:67:c1:24:60:f9:27:
ba:59:4b:c1:76:5b:f5:31:52:69:bc:e9:1f:e3:f9:9e:e5:81:
71:b7:2b:97:38:d1:fa:1b:74:b0:da:09:cc:27:68:83:aa:eb:
d9:88:c4:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEu79F4jnxPM2R+TueHULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMjAyN2RiYjg5NDI3YThlMDMxYjkwOTYyZTI2ZTQ0YWZm
YTVhOTUwHhcNMjUxMTExMDQwMDU3WhcNMjUxMTEyMDQwMDU3WjAzMTEwLwYDVQQD
Eyg2NTg3YWMwYmNlYzQ2M2UwNWEzYzYzOGY1NjlhOWUxNDFiZGU0MGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oHF2D5dIcyemtmgCLrZhqdJ0tEH
9c5z8n90Ns/0KWfBxMoDPfaWrhlri11o1bpCw8D/OIp2gxETWHtkxGHyf9NKmVGu
YIiVZ7jZpBa3Roj44CLNkll4hZ77tW0krDBAGyGHiXA/rmfg7xSfYYisNvfQneCn
k2uVBpDTbwSZQ9UimlIe6tlJs251XDJ8IXbMIQklJwLBuP1L4SEhUb0uYYReTQDq
1vVYCs4guz4yg2Z3jNyM2qASu650EldP7jv/vXDKhT9F+RJahSzcxaEVyYTg7QoO
TnWpP5yp2dJKnkUaHaQluM7CKtS2fObNG4OPAQe9Z3KYcAIQEVZdDCuf5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWHrAvOxGPgWjxjj1aanhQb3kDaMB8GA1UdIwQY
MBaAFEogJ9u4lCeo4DG5CWLibkSv+lqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2lBbjI3aVVKNmpnTWJrSll1SnVSS182V3BVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80NzExYTEtNGQyNS00N2U2LWFjZjct
YjA3MTJhYjBiMDc3LzEvU2lBbjI3aVVKNmpnTWJrSll1SnVSS182V3BVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80NzExYTEtNGQyNS00N2U2LWFjZjctYjA3MTJhYjBiMDc3
LzEvU2lBbjI3aVVKNmpnTWJrSll1SnVSS182V3BVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaQm6bAy
IsXJg6c4pYMZFu0GOwqY7z3E3BU56hZ8sC8/1ExZaQFf+xenO7EpRaU8mkdkhDMb
j2rxOnyFVJMDRlMSpabk9ooNCcvlp7wq7gSWLdz6qBKnI1QwI7iUAftL6SRYNzbU
8elDw0nNd5pBOH8cvjVRTw6kb16RafH2zKrqYw08JAUMaFebmy+v4OKNWxaONkHV
zQC0aCVLBxwHnIgC8OwIbBV/8aD+w408a0cQU6aphOsEyPp+mXnmt8ObI+lR94xA
4ox4oNL/FmL9nxfdZ8EkYPknullLwXZb9TFSabzpH+P5nuWBcbcrlzjR+ht0sNoJ
zCdog6rr2YjE1Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:17 2025 by rpki-client