Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
File: suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json)
Hash identifier: dxvm//K7kmmtzSlTDwD8GuS/pSew3zPShe7TCP5YVO0=
Subject key identifier: E3:E2:F4:95:BF:58:8E:E4:22:E0:3E:DD:5F:17:3B:80:12:B2:E9:6F
Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Certificate serial: 019A20D256F6199828B3A6E9872C9016FC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
Manifest number: 1688
Signing time: Sun 26 Oct 2025 14:00:46 +0000
Manifest this update: Sun 26 Oct 2025 14:00:46 +0000
Manifest next update: Mon 27 Oct 2025 14:00:46 +0000
Files and hashes: 1: SMvSpcul2Uq4ULXG7ttuvxBBLrU.roa (hash: 2+bGMEFTYIooOi165hCQ7BSjW1Q3smQG481hPb6dBzo=)
2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: QE70bwhD2YGPGPph3i3o+TokMAAC3Jxcy25Z3XScLWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d2:56:f6:19:98:28:b3:a6:e9:87:2c:90:16:fc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Validity
Not Before: Oct 26 14:00:46 2025 GMT
Not After : Oct 27 14:00:46 2025 GMT
Subject: CN=e3e2f495bf588ee422e03edd5f173b8012b2e96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a2:29:c0:35:ca:79:30:43:02:1b:8b:47:f9:
1b:f9:ed:dc:e9:f2:8b:7c:65:f4:9a:3d:f2:9b:0e:
9a:99:c5:f7:33:aa:84:f3:23:ab:e0:6a:a5:f6:f7:
cc:2b:d1:06:41:48:be:66:74:c7:82:1e:e2:a4:56:
1d:ff:6b:5e:49:b8:57:14:44:b8:fa:70:e7:53:1e:
4d:55:07:b3:a4:f5:fe:bf:67:25:af:41:71:42:ac:
25:c5:23:5a:f8:3d:14:3f:ef:9c:f4:1d:b1:d9:6f:
be:6a:ea:12:1d:7b:12:a9:05:62:bf:07:a8:8f:fa:
43:ac:97:7d:03:91:fa:4d:f7:98:25:1a:83:56:6b:
10:2a:7e:ef:94:ed:0e:a8:4e:db:36:84:26:40:40:
dd:0d:a5:cd:6e:7a:4f:e0:9a:ec:61:22:28:5c:8b:
9a:f7:9f:30:90:48:a7:5d:fa:c7:98:3f:28:65:b4:
08:4b:4f:cf:4d:9b:25:1d:02:6c:e7:51:c5:1f:7a:
23:38:f3:5b:54:da:8c:d4:ea:b3:63:79:7c:ae:ec:
07:84:8c:16:e3:9a:5c:4a:25:c4:2f:87:37:63:d8:
cb:73:6d:4f:5d:9b:84:ab:f8:5a:51:39:17:97:8f:
34:40:98:e4:b5:f1:1b:03:12:60:a8:06:d2:0f:aa:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E2:F4:95:BF:58:8E:E4:22:E0:3E:DD:5F:17:3B:80:12:B2:E9:6F
X509v3 Authority Key Identifier:
keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bc:d0:a4:3d:50:fb:46:e2:ad:7d:cf:20:d9:cd:ad:ed:99:
98:ad:e2:98:16:61:60:fc:5f:fe:55:7f:19:91:08:bb:04:6b:
08:91:5b:80:e7:ca:1e:46:4a:b3:fc:1f:55:d0:4c:b7:ec:bd:
b4:b3:07:a5:30:0b:27:ae:39:71:14:e4:db:e9:f3:d9:a8:01:
6d:47:3b:22:97:4e:8c:d0:d8:20:14:e7:20:74:91:af:d6:49:
ea:00:99:7c:e6:f9:84:ba:be:55:57:84:89:58:54:6a:6e:9d:
be:0f:2f:b1:8c:73:9f:5e:87:46:1b:8c:33:9a:44:51:36:b9:
77:83:b8:de:d2:d3:78:fb:6c:08:9a:26:15:42:f4:7f:1a:86:
a7:92:1e:7a:ff:18:7c:7a:9c:eb:e2:40:4c:16:c7:59:09:99:
c9:16:2c:ed:fe:80:32:7a:0c:28:ce:ee:96:4d:99:62:6c:99:
fd:4c:98:9e:1e:31:28:ad:fb:0c:e4:97:d7:be:12:ac:98:e9:
3f:20:76:ff:17:44:4b:fb:04:29:2a:12:30:b3:90:32:21:eb:
8f:b9:7d:24:fb:14:f4:f1:20:b0:48:68:ca:90:4b:68:e6:0a:
7b:82:f6:7a:b3:6a:71:c6:55:28:47:19:2a:dc:3e:db:48:c2:
a7:73:8a:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZog0lb2GZgos6bphyyQFvyMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZTM5MTE2OWYwYzlmMjFhYThmMmU4OWU3Mzc1YzcyZWM2
NzRmZWIwHhcNMjUxMDI2MTQwMDQ2WhcNMjUxMDI3MTQwMDQ2WjAzMTEwLwYDVQQD
EyhlM2UyZjQ5NWJmNTg4ZWU0MjJlMDNlZGQ1ZjE3M2I4MDEyYjJlOTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KIpwDXKeTBDAhuLR/kb+e3c6fKL
fGX0mj3ymw6amcX3M6qE8yOr4Gql9vfMK9EGQUi+ZnTHgh7ipFYd/2teSbhXFES4
+nDnUx5NVQezpPX+v2clr0FxQqwlxSNa+D0UP++c9B2x2W++auoSHXsSqQVivweo
j/pDrJd9A5H6TfeYJRqDVmsQKn7vlO0OqE7bNoQmQEDdDaXNbnpP4JrsYSIoXIua
958wkEinXfrHmD8oZbQIS0/PTZslHQJs51HFH3ojOPNbVNqM1OqzY3l8ruwHhIwW
45pcSiXEL4c3Y9jLc21PXZuEq/haUTkXl480QJjktfEbAxJgqAbSD6qEkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPi9JW/WI7kIuA+3V8XO4ASsulvMB8GA1UdIwQY
MBaAFLLjkRafDJ8hqo8uiec3XHLsZ0/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMt
NTY4NjI3OWVjOTZlLzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMtNTY4NjI3OWVjOTZl
LzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLzQpD1Q
+0birX3PINnNre2ZmK3imBZhYPxf/lV/GZEIuwRrCJFbgOfKHkZKs/wfVdBMt+y9
tLMHpTALJ645cRTk2+nz2agBbUc7IpdOjNDYIBTnIHSRr9ZJ6gCZfOb5hLq+VVeE
iVhUam6dvg8vsYxzn16HRhuMM5pEUTa5d4O43tLTePtsCJomFUL0fxqGp5Ieev8Y
fHqc6+JATBbHWQmZyRYs7f6AMnoMKM7ulk2ZYmyZ/UyYnh4xKK37DOSX174SrJjp
PyB2/xdES/sEKSoSMLOQMiHrj7l9JPsU9PEgsEhoypBLaOYKe4L2erNqccZVKEcZ
Ktw+20jCp3OKDA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:50:25 2025 by rpki-client