Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
File: S2MqdYtZMJ6GEInWVTruBnprNT8.mft (raw, json)
Hash identifier: tC/647Y2YVpQdJBSnPPDWYqUIA3ftZapsXCEzjP6zkA=
Subject key identifier: 32:78:01:A3:78:36:F6:35:81:AE:45:FF:00:CC:F0:BA:65:97:5C:8B
Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
Certificate issuer: /CN=4b632a758b59309e861089d6553aee067a6b353f
Certificate serial: 019A25C18E90373BFA228E89FC7BF9F5C378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 13:00:33 +0000
Manifest this update: Mon 27 Oct 2025 13:00:33 +0000
Manifest next update: Tue 28 Oct 2025 13:00:33 +0000
Files and hashes: 1: BFmKhRFnCi2AJyutOk-Yxml708c.roa (hash: 30fgE+QkDlz/nOmXI9WzL3BXCW8rLDMyhnps4H9jCSs=)
2: S2MqdYtZMJ6GEInWVTruBnprNT8.crl (hash: Qu3+DY7hiBd84Xw6RL8D3Jz7xLW7wsAsXzuNSwY5GsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:8e:90:37:3b:fa:22:8e:89:fc:7b:f9:f5:c3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f
Validity
Not Before: Oct 27 13:00:33 2025 GMT
Not After : Oct 28 13:00:33 2025 GMT
Subject: CN=327801a37836f63581ae45ff00ccf0ba65975c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b7:21:bb:37:4f:ba:d1:b4:6c:0c:b9:2a:bc:
47:e5:a3:98:14:2f:12:a7:53:77:92:49:f2:b8:0a:
fd:ca:d5:2f:ab:0c:45:2f:ee:9d:76:3d:28:ba:64:
25:14:fe:a8:3e:96:06:95:b9:29:a1:ee:52:8e:71:
9f:e3:0b:cf:6b:b8:cc:08:24:d2:7b:c8:8b:5f:43:
a1:a6:ca:30:4c:1c:e0:1a:f1:d2:af:3f:e6:56:a7:
76:e7:4b:bc:a2:d0:94:a8:5c:05:b1:68:92:69:b8:
68:3f:8c:17:be:cc:a5:cb:18:e7:c3:db:70:24:ce:
84:c7:2b:61:89:09:7e:01:f6:30:72:c1:54:e9:96:
c5:26:62:c3:35:34:10:91:fe:97:c5:7c:ae:c6:40:
54:6c:5f:31:bc:7e:f7:91:b5:c2:cb:24:d8:35:5f:
71:c3:bf:67:6c:b2:67:4c:f7:8d:ca:5d:8a:fa:75:
b0:d7:3a:63:03:ee:30:01:c8:2c:02:ec:31:3f:fa:
4f:5c:b3:ee:80:0a:f2:f6:8e:90:85:1d:2e:fe:c4:
f2:a8:62:e8:59:32:07:09:0f:ed:52:e3:ac:69:98:
d6:26:d4:82:34:ea:c3:e5:20:ec:f2:98:f8:62:e1:
71:50:9a:09:39:4d:06:e5:ee:93:3e:cf:62:69:bd:
78:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:78:01:A3:78:36:F6:35:81:AE:45:FF:00:CC:F0:BA:65:97:5C:8B
X509v3 Authority Key Identifier:
keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3e:7f:a4:4e:12:e1:18:dc:65:69:6e:9e:66:34:63:4e:cc:
c7:42:de:89:ee:07:7f:ee:41:71:e8:a0:7d:df:1d:40:3d:ee:
12:bb:4f:7a:28:51:d7:74:c8:55:7b:50:fc:a1:b9:89:ba:24:
c3:dd:65:60:f5:f9:fd:0e:37:08:d7:7b:a9:17:ef:29:51:2f:
cc:46:05:f7:43:10:05:81:fb:20:4c:23:96:5b:25:ae:c1:e2:
2b:e4:4b:b5:68:4d:97:6d:51:98:36:9e:ff:95:d5:29:6d:b6:
e6:c7:10:8c:6b:fa:d3:ac:b8:ee:b2:bc:9c:1e:60:00:02:ef:
b2:4e:f2:df:6c:f6:fe:0b:c4:f2:90:bb:ef:38:d0:81:c4:f3:
45:77:ee:21:26:f5:b7:fd:59:c6:cf:cc:12:c3:9d:58:f8:10:
c6:69:f7:dd:56:5a:ec:10:65:80:77:11:03:fd:f7:85:c9:28:
a5:7b:fa:46:93:18:7a:e7:13:5d:02:57:c5:7d:4c:b9:dc:e8:
18:0a:83:52:69:48:60:47:13:9c:84:3b:42:29:04:65:72:24:
51:bd:b9:f0:6d:c0:e3:58:98:56:ae:3b:fe:a7:24:00:9b:57:
0f:bb:4c:d6:13:d7:58:ad:86:20:72:8a:36:d5:02:c5:2b:99:
7b:40:24:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolwY6QNzv6Io6J/Hv59cN4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNjMyYTc1OGI1OTMwOWU4NjEwODlkNjU1M2FlZTA2N2E2
YjM1M2YwHhcNMjUxMDI3MTMwMDMzWhcNMjUxMDI4MTMwMDMzWjAzMTEwLwYDVQQD
EygzMjc4MDFhMzc4MzZmNjM1ODFhZTQ1ZmYwMGNjZjBiYTY1OTc1YzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rchuzdPutG0bAy5KrxH5aOYFC8S
p1N3kknyuAr9ytUvqwxFL+6ddj0oumQlFP6oPpYGlbkpoe5SjnGf4wvPa7jMCCTS
e8iLX0OhpsowTBzgGvHSrz/mVqd250u8otCUqFwFsWiSabhoP4wXvsylyxjnw9tw
JM6ExythiQl+AfYwcsFU6ZbFJmLDNTQQkf6XxXyuxkBUbF8xvH73kbXCyyTYNV9x
w79nbLJnTPeNyl2K+nWw1zpjA+4wAcgsAuwxP/pPXLPugAry9o6QhR0u/sTyqGLo
WTIHCQ/tUuOsaZjWJtSCNOrD5SDs8pj4YuFxUJoJOU0G5e6TPs9iab14bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJ4AaN4NvY1ga5F/wDM8Lpll1yLMB8GA1UdIwQY
MBaAFEtjKnWLWTCehhCJ1lU67gZ6azU/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzJNcWRZdFpNSjZHRUluV1ZUcnVCbnByTlQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yMTNhOTUtYWFjZi00MGE5LTk3NTMt
OTRjMGIwYjc2MDI5LzEvUzJNcWRZdFpNSjZHRUluV1ZUcnVCbnByTlQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8yMTNhOTUtYWFjZi00MGE5LTk3NTMtOTRjMGIwYjc2MDI5
LzEvUzJNcWRZdFpNSjZHRUluV1ZUcnVCbnByTlQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAij5/pE4S
4RjcZWlunmY0Y07Mx0Leie4Hf+5Bceigfd8dQD3uErtPeihR13TIVXtQ/KG5ibok
w91lYPX5/Q43CNd7qRfvKVEvzEYF90MQBYH7IEwjllslrsHiK+RLtWhNl21RmDae
/5XVKW225scQjGv606y47rK8nB5gAALvsk7y32z2/gvE8pC77zjQgcTzRXfuISb1
t/1Zxs/MEsOdWPgQxmn33VZa7BBlgHcRA/33hckopXv6RpMYeucTXQJXxX1Mudzo
GAqDUmlIYEcTnIQ7QikEZXIkUb258G3A41iYVq47/qckAJtXD7tM1hPXWK2GIHKK
NtUCxSuZe0AkwA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 14:46:21 2025 by rpki-client