Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
File: svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json)
Hash identifier: HufzK0MCm9WqIr+WCjmBnsIK9a+WkGlcTsR60Oq8CAU=
Subject key identifier: 46:43:C4:B3:7E:3C:1B:FA:F9:59:F1:E0:6A:5B:7D:E6:D6:0D:50:08
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial: 019A251CF740E33235DEEB59CA4F3ED56A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
Manifest number: 1087
Signing time: Mon 27 Oct 2025 10:00:46 +0000
Manifest this update: Mon 27 Oct 2025 10:00:46 +0000
Manifest next update: Tue 28 Oct 2025 10:00:46 +0000
Files and hashes: 1: bkaEgwUfFQuvU4deHKYEq645oxo.roa (hash: a6t899hSFrNnCxDeJsEHX7KWBkAwoAJJxMP3KbPkcsM=)
2: gM8Vs4rZduYc-FMusqbqCtswvSM.roa (hash: PdGvc2+s2b+cxeznU9E/uPp7OuLxD8n8FSf7bdTA3Io=)
3: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: 4cfoHHuB5NnjQDzBG/kkgna0mGSMATsolrn2vlATIzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:f7:40:e3:32:35:de:eb:59:ca:4f:3e:d5:6a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Validity
Not Before: Oct 27 10:00:46 2025 GMT
Not After : Oct 28 10:00:46 2025 GMT
Subject: CN=4643c4b37e3c1bfaf959f1e06a5b7de6d60d5008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:a3:8a:85:11:8c:20:bb:dc:01:cf:64:b9:
a9:56:2f:c0:59:2b:3d:6c:88:d4:47:2f:5a:4c:b1:
83:10:f4:68:46:b7:ab:9c:11:ac:f2:64:64:27:aa:
cc:e2:4c:b2:f5:70:63:89:6a:bf:af:b5:05:3f:3a:
e1:b3:32:41:c5:bf:84:83:90:4f:56:46:2d:be:35:
31:a3:07:9c:e5:5e:7b:e5:fe:90:72:14:b9:87:df:
52:40:82:7d:6a:fe:89:36:20:c5:0f:b1:96:ea:38:
06:a4:f6:25:26:8e:95:c5:0f:48:a9:d5:16:ee:1a:
be:79:e5:c8:e6:12:c0:36:54:06:81:a7:61:84:32:
8c:3a:30:2b:86:97:db:db:57:ad:64:39:5b:5f:0f:
be:58:d4:65:0c:ef:5c:69:f1:25:56:dd:1e:8c:f1:
0b:01:b2:79:b5:03:b3:ac:34:a4:31:8e:43:0d:ba:
32:db:ed:51:d3:44:cf:dd:56:b3:48:52:fb:69:a9:
59:11:90:21:3e:59:85:23:26:1d:b1:2b:d1:cc:02:
b1:5e:12:91:70:c2:31:5e:2a:df:16:c5:6a:d2:54:
41:8c:31:c1:e5:39:c6:ad:d3:80:03:66:f7:bd:a0:
c6:0a:39:5d:7b:5f:d5:5f:15:37:b2:e4:44:5e:6b:
08:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:43:C4:B3:7E:3C:1B:FA:F9:59:F1:E0:6A:5B:7D:E6:D6:0D:50:08
X509v3 Authority Key Identifier:
keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ab:00:40:c1:d9:ed:42:70:1e:1b:d0:90:74:b2:91:16:c2:
0a:d7:fb:ba:5d:fa:d3:1c:10:01:4b:2c:6d:97:08:70:e4:76:
9a:97:c4:6b:62:f8:da:a9:e0:27:ae:90:f0:17:40:0e:e6:29:
22:29:1d:a6:f5:c1:3e:bc:9b:1b:cf:e3:4c:69:f5:cb:22:77:
7f:d5:87:83:df:75:5d:81:11:36:a9:34:a6:4a:a6:7e:f2:38:
b1:29:07:5c:5b:3a:b3:2e:66:e3:63:2e:ca:39:54:57:2f:de:
0a:2c:83:01:27:e9:aa:61:5f:28:ad:24:3e:7d:34:74:b1:8f:
0b:a1:ab:a0:a7:fe:ee:7d:fd:b7:ae:fb:06:ce:94:d9:17:93:
eb:94:4f:da:2e:47:6d:23:43:7c:0d:71:84:10:f2:e9:b6:a0:
1c:d8:2d:27:36:3d:45:c2:e0:40:9c:af:50:42:f7:2d:e5:ab:
dd:9a:90:95:67:35:26:e0:58:cf:5f:88:02:b0:16:41:15:64:
3f:5a:70:76:e0:a9:7c:11:a6:3f:70:10:bd:54:92:da:83:10:
bd:20:92:d8:34:f8:c3:c7:9a:d8:db:bc:90:b3:f9:73:b5:de:
28:f7:1d:09:fa:45:ab:d8:0e:a6:bb:65:7c:11:28:f2:b6:35:
38:9d:54:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolHPdA4zI13utZyk8+1WpJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZjI3OTUzYWQ0NjkwYzA2OGZiNDBmOWYzNTYwMDMzNzli
YjYzZjgwHhcNMjUxMDI3MTAwMDQ2WhcNMjUxMDI4MTAwMDQ2WjAzMTEwLwYDVQQD
Eyg0NjQzYzRiMzdlM2MxYmZhZjk1OWYxZTA2YTViN2RlNmQ2MGQ1MDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5+jioURjCC73AHPZLmpVi/AWSs9
bIjURy9aTLGDEPRoRrernBGs8mRkJ6rM4kyy9XBjiWq/r7UFPzrhszJBxb+Eg5BP
VkYtvjUxowec5V575f6QchS5h99SQIJ9av6JNiDFD7GW6jgGpPYlJo6VxQ9IqdUW
7hq+eeXI5hLANlQGgadhhDKMOjArhpfb21etZDlbXw++WNRlDO9cafElVt0ejPEL
AbJ5tQOzrDSkMY5DDboy2+1R00TP3VazSFL7aalZEZAhPlmFIyYdsSvRzAKxXhKR
cMIxXirfFsVq0lRBjDHB5TnGrdOAA2b3vaDGCjlde1/VXxU3suREXmsI6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZDxLN+PBv6+Vnx4GpbfebWDVAIMB8GA1UdIwQY
MBaAFLLyeVOtRpDAaPtA+fNWADN5u2P4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wODk3M2YtZmI2YS00MWU1LTg3MjAt
ZmI0Y2YxMzdjMWU5LzEvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wODk3M2YtZmI2YS00MWU1LTg3MjAtZmI0Y2YxMzdjMWU5
LzEvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6sAQMHZ
7UJwHhvQkHSykRbCCtf7ul360xwQAUssbZcIcOR2mpfEa2L42qngJ66Q8BdADuYp
IikdpvXBPrybG8/jTGn1yyJ3f9WHg991XYERNqk0pkqmfvI4sSkHXFs6sy5m42Mu
yjlUVy/eCiyDASfpqmFfKK0kPn00dLGPC6GroKf+7n39t677Bs6U2ReT65RP2i5H
bSNDfA1xhBDy6bagHNgtJzY9RcLgQJyvUEL3LeWr3ZqQlWc1JuBYz1+IArAWQRVk
P1pwduCpfBGmP3AQvVSS2oMQvSCS2DT4w8ea2Nu8kLP5c7XeKPcdCfpFq9gOprtl
fBEo8rY1OJ1U7w==
-----END CERTIFICATE-----
Generated at Mon Oct 27 17:32:52 2025 by rpki-client