Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json)
Hash identifier: 3CVw9iWjwVndk82Szc9aw28UNj6b56TXtQ+C58+3gfE=
Subject key identifier: 74:A9:35:4C:A6:7F:E6:CC:6E:8B:B6:57:F8:C8:34:12:9B:15:A1:C7
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 019A714A03DB05506911B8E4B2A3426FFAD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 05:01:07 +0000
Manifest this update: Tue 11 Nov 2025 05:01:07 +0000
Manifest next update: Wed 12 Nov 2025 05:01:07 +0000
Files and hashes: 1: CwqvWSmBdm9lt3PehiaP0H6J-oY.roa (hash: gTSav2fMjMmokQJGJr0YwjWXX9H3AhJSgjsJ2wpM5SA=)
2: QdvbepQukFmfMSQYf6HBBLcHcMk.roa (hash: F/Id75RSk4+xz0N0tNwJ7jB7AAssoyiwdWIUCFeT7Qg=)
3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: GgTtdqzQaMhkmF+/UgQE3akv6UKnM7Bz9p90cTOtZWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:03:db:05:50:69:11:b8:e4:b2:a3:42:6f:fa:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Nov 11 05:01:07 2025 GMT
Not After : Nov 12 05:01:07 2025 GMT
Subject: CN=74a9354ca67fe6cc6e8bb657f8c834129b15a1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:34:74:62:5e:ed:27:aa:f2:43:3e:13:46:
51:85:9a:96:0f:b6:15:87:77:2f:9a:55:af:86:bf:
f0:32:29:31:1e:83:6a:2b:c1:9b:f8:e4:41:c6:5e:
f1:6d:13:65:a8:3a:61:f6:6e:be:cc:bf:83:d3:e8:
73:3a:fd:60:8f:b3:f0:56:1b:65:c7:cd:9f:19:a4:
39:c8:d3:2d:2f:38:63:b7:16:89:14:a8:f5:c4:1a:
ec:8f:24:13:87:d1:f1:1d:90:10:04:3f:57:59:17:
83:06:9a:22:1a:74:3a:a4:4d:fd:96:94:9f:b9:ae:
44:83:2e:49:7e:cb:24:6c:c5:f3:aa:00:6d:28:5f:
0b:6b:7d:a6:47:73:c1:21:19:c5:28:3c:6b:63:03:
97:98:3d:35:2c:19:d4:c0:9c:50:64:d0:95:a7:bf:
d4:4e:21:68:ee:af:2e:72:9d:2a:36:84:45:3f:75:
e0:28:1f:e9:b6:a7:a6:5c:10:fa:b5:c1:61:3e:51:
2a:eb:e9:3c:86:90:b7:37:be:97:4b:2d:92:cf:12:
34:30:b8:0a:e4:f2:97:c3:02:06:a8:d9:13:22:3c:
03:c5:3e:5e:80:6a:4a:a5:31:a8:f3:38:25:72:68:
c8:79:5f:d9:d9:f8:e2:5b:a9:5e:5e:92:e0:df:f7:
a1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A9:35:4C:A6:7F:E6:CC:6E:8B:B6:57:F8:C8:34:12:9B:15:A1:C7
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d0:31:9e:e2:f2:95:39:5f:22:b4:f9:a7:72:e9:f8:5e:6d:
8c:db:19:5d:07:2a:d8:b1:28:40:90:d7:31:95:36:03:0e:76:
cd:2d:19:17:69:2b:11:53:a4:bf:f3:a7:b4:ef:c3:03:34:9a:
95:07:d4:11:36:0a:b0:51:b3:8c:ea:b9:fe:8c:ff:48:9c:09:
ef:ad:72:a4:be:7d:fc:9a:bc:16:6a:56:fe:71:c6:e7:6f:14:
0c:75:cf:96:0d:27:53:fc:12:55:55:6d:98:f3:d4:18:8c:e2:
a5:2b:a7:3b:92:09:01:87:82:d3:7d:6a:fc:65:e3:91:90:82:
9e:e8:7c:b6:e0:6b:a3:05:c7:cf:e0:b2:b1:15:99:b7:43:8d:
e9:e5:49:b1:c2:02:77:d0:8c:89:8e:15:f3:5c:14:c6:80:8e:
40:47:fa:3e:56:0d:21:e3:93:1d:3f:77:b5:c4:72:69:ab:cd:
0e:5e:0c:09:c7:87:c8:9a:9a:02:17:30:58:06:1e:1a:c2:cb:
a6:37:80:4f:10:05:af:37:a4:22:c1:b4:e9:79:05:1d:5a:97:
cc:7b:cc:95:92:fd:bf:7b:86:e0:b3:c8:fe:22:f0:91:d5:d6:
d4:12:26:00:5c:62:45:4b:87:48:3f:fd:cd:3e:94:34:1f:27:
5b:1d:28:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSgPbBVBpEbjksqNCb/rTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNjU1MTkzN2VmYzk2ZTE0NWUzM2ExZWJjYTI0NDkyZGMx
MjBlY2IwHhcNMjUxMTExMDUwMTA3WhcNMjUxMTEyMDUwMTA3WjAzMTEwLwYDVQQD
Eyg3NGE5MzU0Y2E2N2ZlNmNjNmU4YmI2NTdmOGM4MzQxMjliMTVhMWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5c0dGJe7Seq8kM+E0ZRhZqWD7YV
h3cvmlWvhr/wMikxHoNqK8Gb+ORBxl7xbRNlqDph9m6+zL+D0+hzOv1gj7PwVhtl
x82fGaQ5yNMtLzhjtxaJFKj1xBrsjyQTh9HxHZAQBD9XWReDBpoiGnQ6pE39lpSf
ua5Egy5JfsskbMXzqgBtKF8La32mR3PBIRnFKDxrYwOXmD01LBnUwJxQZNCVp7/U
TiFo7q8ucp0qNoRFP3XgKB/ptqemXBD6tcFhPlEq6+k8hpC3N76XSy2SzxI0MLgK
5PKXwwIGqNkTIjwDxT5egGpKpTGo8zglcmjIeV/Z2fjiW6leXpLg3/ehcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSpNUymf+bMbou2V/jINBKbFaHHMB8GA1UdIwQY
MBaAFLBlUZN+/JbhReM6HryiRJLcEg7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0dWUmszNzhsdUZGNHpvZXZLSkVrdHdTRHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8yYzQ3MzEtODlkNS00ZTliLWI0YWEt
YmYwOWFkMzJjODg4LzEvc0dWUmszNzhsdUZGNHpvZXZLSkVrdHdTRHNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8yYzQ3MzEtODlkNS00ZTliLWI0YWEtYmYwOWFkMzJjODg4
LzEvc0dWUmszNzhsdUZGNHpvZXZLSkVrdHdTRHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdAxnuLy
lTlfIrT5p3Lp+F5tjNsZXQcq2LEoQJDXMZU2Aw52zS0ZF2krEVOkv/OntO/DAzSa
lQfUETYKsFGzjOq5/oz/SJwJ761ypL59/Jq8FmpW/nHG528UDHXPlg0nU/wSVVVt
mPPUGIzipSunO5IJAYeC031q/GXjkZCCnuh8tuBrowXHz+CysRWZt0ON6eVJscIC
d9CMiY4V81wUxoCOQEf6PlYNIeOTHT93tcRyaavNDl4MCceHyJqaAhcwWAYeGsLL
pjeATxAFrzekIsG06XkFHVqXzHvMlZL9v3uG4LPI/iLwkdXW1BImAFxiRUuHSD/9
zT6UNB8nWx0ovw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:57 2025 by rpki-client