Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
File: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft (raw, json)
Hash identifier: Sj8MFVvTtQn4M0B+pCFUc3RfT/20uSRSaJOXCbhWZ+Q=
Subject key identifier: 39:F8:2F:C1:AC:BB:55:0B:4E:C3:61:39:AB:ED:18:1F:2E:C5:1A:54
Authority key identifier: B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
Certificate issuer: /CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Certificate serial: 019A71B93534EE9097207462095662A10307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
Manifest number: 0564
Signing time: Tue 11 Nov 2025 07:02:34 +0000
Manifest this update: Tue 11 Nov 2025 07:02:34 +0000
Manifest next update: Wed 12 Nov 2025 07:02:34 +0000
Files and hashes: 1: f-wF0yIlDOHaFqLViWnFWeP4B9o.roa (hash: 8olsSb6V441J0mOtJjve8qF0Z7IUWgXwJVtuxOxK2Bg=)
2: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl (hash: Y6MNUNz/xu1Bj+wFo6xojkSaXuBoCNS0yRvjOA/GZCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:35:34:ee:90:97:20:74:62:09:56:62:a1:03:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Validity
Not Before: Nov 11 07:02:34 2025 GMT
Not After : Nov 12 07:02:34 2025 GMT
Subject: CN=39f82fc1acbb550b4ec36139abed181f2ec51a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:b9:b5:55:9f:f7:bf:fb:b8:47:35:fa:f7:
76:93:0b:29:58:46:a2:af:6d:1b:13:f3:58:63:46:
f3:ce:10:ad:9c:cf:d0:69:aa:49:b9:19:52:36:d9:
c4:ea:90:86:0c:90:c1:3d:58:4d:04:40:98:0c:42:
7f:88:cd:7b:d6:39:00:fa:33:49:d8:5a:a3:97:69:
b4:79:4a:82:8e:f1:75:59:00:eb:dd:a3:10:64:da:
c1:81:9d:b4:dd:1d:4c:0e:9d:14:b5:76:ff:b9:13:
c5:a9:0b:33:e6:4b:46:84:59:68:4b:08:63:6c:87:
27:86:56:e1:78:72:09:31:f0:31:74:0a:d8:0f:0a:
e9:37:dd:d0:68:5d:72:56:5a:da:1d:61:28:59:b1:
37:10:83:43:0d:85:23:93:e5:59:69:ef:bc:2f:01:
82:88:c6:bd:aa:9c:4a:63:b7:41:e9:d9:cf:7b:1e:
45:28:a4:95:00:25:e2:0b:1f:81:ab:16:e2:51:c4:
11:1b:24:5c:69:b5:0f:ce:d9:ee:5a:cc:91:ff:96:
d4:73:e3:e9:9d:9a:bb:3f:81:ae:6d:03:06:1f:6c:
67:b0:bf:9a:85:b8:bd:d9:cf:08:fe:fc:72:71:cd:
f8:0a:f8:86:75:0a:2e:37:e2:89:5f:1b:d7:a7:c3:
83:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F8:2F:C1:AC:BB:55:0B:4E:C3:61:39:AB:ED:18:1F:2E:C5:1A:54
X509v3 Authority Key Identifier:
keyid:B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:57:aa:13:0c:a0:8b:9d:00:a3:9f:47:a0:8a:47:77:a6:b8:
c3:f1:7a:53:ac:48:13:bb:6e:5c:4a:a1:d5:28:74:33:70:7c:
bb:de:26:f4:0b:a7:00:31:55:9f:88:8d:c7:02:01:74:db:a9:
d1:5e:47:b5:b5:b9:67:58:e1:5f:ea:cb:2c:f2:86:a9:b4:b8:
3e:9b:9e:cd:e7:b7:29:5b:38:2d:3b:c5:85:f3:a9:8d:87:93:
d9:ba:08:67:b9:3a:4c:6a:f7:50:9d:05:fd:b6:d5:a2:2c:a6:
6c:fd:35:b3:f1:73:75:13:6a:ba:04:b7:eb:1c:20:6c:65:3b:
1f:3c:f6:a3:db:87:4f:c3:08:02:14:ce:97:b4:db:56:44:f9:
c0:91:a3:2b:52:2e:21:71:8a:65:ba:e5:d5:2a:c5:23:1e:43:
a0:d3:8b:b0:13:7b:f4:4b:4c:eb:52:c9:37:59:0a:78:88:72:
0e:1b:bc:e4:8e:e1:07:14:eb:e1:e3:0e:c9:2c:49:9c:d6:07:
de:5a:2d:9b:3e:13:29:43:16:be:12:e7:1a:63:ac:92:08:7b:
a1:3f:99:90:bb:36:24:03:1c:ee:56:8c:b8:f0:88:dc:88:5c:
46:dd:45:de:7e:70:b8:71:9c:83:e1:32:53:0f:2c:21:30:bf:
c2:60:5a:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuTU07pCXIHRiCVZioQMHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwODBmODAwMWQ1OTkzMzM3M2ZlOGU1ODg0OWU0YjkxZGVh
YTJiYjIwHhcNMjUxMTExMDcwMjM0WhcNMjUxMTEyMDcwMjM0WjAzMTEwLwYDVQQD
EygzOWY4MmZjMWFjYmI1NTBiNGVjMzYxMzlhYmVkMTgxZjJlYzUxYTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBu5tVWf97/7uEc1+vd2kwspWEai
r20bE/NYY0bzzhCtnM/QaapJuRlSNtnE6pCGDJDBPVhNBECYDEJ/iM171jkA+jNJ
2Fqjl2m0eUqCjvF1WQDr3aMQZNrBgZ203R1MDp0UtXb/uRPFqQsz5ktGhFloSwhj
bIcnhlbheHIJMfAxdArYDwrpN93QaF1yVlraHWEoWbE3EINDDYUjk+VZae+8LwGC
iMa9qpxKY7dB6dnPex5FKKSVACXiCx+BqxbiUcQRGyRcabUPztnuWsyR/5bUc+Pp
nZq7P4GubQMGH2xnsL+ahbi92c8I/vxycc34CviGdQouN+KJXxvXp8ODGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDn4L8Gsu1ULTsNhOavtGB8uxRpUMB8GA1UdIwQY
MBaAFLCA+AAdWZMzc/6OWISeS5HeqiuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0lENEFCMVprek56X281WWhKNUxrZDZxSzdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hMDIyNjItZTM3Zi00MTQyLTlhMmMt
OWYxNzZlMjRjMDM0LzEvc0lENEFCMVprek56X281WWhKNUxrZDZxSzdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hMDIyNjItZTM3Zi00MTQyLTlhMmMtOWYxNzZlMjRjMDM0
LzEvc0lENEFCMVprek56X281WWhKNUxrZDZxSzdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFeqEwyg
i50Ao59HoIpHd6a4w/F6U6xIE7tuXEqh1Sh0M3B8u94m9AunADFVn4iNxwIBdNup
0V5HtbW5Z1jhX+rLLPKGqbS4Ppuezee3KVs4LTvFhfOpjYeT2boIZ7k6TGr3UJ0F
/bbVoiymbP01s/FzdRNqugS36xwgbGU7Hzz2o9uHT8MIAhTOl7TbVkT5wJGjK1Iu
IXGKZbrl1SrFIx5DoNOLsBN79EtM61LJN1kKeIhyDhu85I7hBxTr4eMOySxJnNYH
3lotmz4TKUMWvhLnGmOskgh7oT+ZkLs2JAMc7laMuPCI3IhcRt1F3n5wuHGcg+Ey
Uw8sITC/wmBaog==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:47 2025 by rpki-client