Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
File: sHATRrrVXff13IGLu7z7t9sQcKs.mft (raw, json)
Hash identifier: nimzPiXsy1DTyAA5vCLEOAzf1iszLa1QEMOezuRXnt0=
Subject key identifier: 03:59:0C:BF:4B:4B:E1:0B:68:18:59:FD:0B:A7:26:0D:A6:80:00:AB
Authority key identifier: B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
Certificate issuer: /CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Certificate serial: 019A71EEEC84558FFB7B49AFBD1249DE00F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
Manifest number: 08F3
Signing time: Tue 11 Nov 2025 08:01:14 +0000
Manifest this update: Tue 11 Nov 2025 08:01:14 +0000
Manifest next update: Wed 12 Nov 2025 08:01:14 +0000
Files and hashes: 1: 2vj5B04hPRrl36o4PSEreNmSh7Y.roa (hash: IJqTeCNZ6pF/BafJ55wl0YbKPxsnvPNim6xG4D9/f0M=)
2: sHATRrrVXff13IGLu7z7t9sQcKs.crl (hash: FQv76hun9PgKx758wEyCq3HDOSebY66Iqcij5murNZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ec:84:55:8f:fb:7b:49:af:bd:12:49:de:00:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Validity
Not Before: Nov 11 08:01:14 2025 GMT
Not After : Nov 12 08:01:14 2025 GMT
Subject: CN=03590cbf4b4be10b681859fd0ba7260da68000ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:dd:a9:f4:58:05:f2:b7:a0:7c:5f:2c:6d:
8b:20:3d:69:4a:bf:38:96:d8:91:ff:a7:31:e9:02:
fd:b0:8c:c0:80:3b:18:70:bb:e3:bc:37:fc:13:cd:
54:96:db:97:01:37:5a:65:91:3d:e2:8d:a0:a6:ba:
38:eb:75:45:d9:f7:0e:84:37:f9:b6:7c:ba:19:2d:
b9:2d:53:13:2c:95:dc:11:b4:96:d5:f3:2e:c4:61:
27:0e:dd:fe:2b:eb:2c:df:0e:f3:cd:57:5b:e4:02:
73:22:1f:e6:9d:a3:df:da:5c:1b:57:18:48:8e:e5:
a4:fe:73:9a:fe:b4:18:f6:d7:4d:05:de:26:d4:8f:
83:33:78:41:2a:be:5f:bc:82:7b:1c:2e:09:ac:56:
db:dd:89:38:14:19:ac:79:65:1c:84:1f:30:da:09:
26:b7:5c:a7:10:eb:39:21:29:2a:55:8e:79:2c:43:
1c:6a:56:c1:d4:58:79:72:c9:c0:53:3c:eb:a2:5c:
a5:da:c5:21:9b:6c:76:d1:49:ce:37:b0:d9:2b:b1:
d1:26:ce:3d:95:11:1d:2f:4d:0a:53:2f:51:0a:5c:
50:62:89:24:56:53:03:37:aa:be:52:fc:0c:47:ce:
ad:dd:06:bf:d4:10:e2:6f:a8:36:88:d5:1d:3f:8d:
2a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:59:0C:BF:4B:4B:E1:0B:68:18:59:FD:0B:A7:26:0D:A6:80:00:AB
X509v3 Authority Key Identifier:
keyid:B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e3:b4:26:4d:dd:a2:21:7c:ec:f4:35:54:0b:3f:66:73:82:
a5:68:0d:96:32:3c:e6:d0:cf:27:40:5d:62:b2:83:6f:93:69:
15:e7:08:de:9a:c3:6c:59:4e:08:b0:e2:d8:26:4c:67:a2:07:
b1:77:f4:77:ad:63:05:cf:7f:cb:66:b1:04:46:e8:c6:c0:0d:
33:6d:5b:b0:6d:96:8d:42:2f:64:b8:ec:7f:b9:60:51:04:53:
9e:4a:ec:28:a0:04:f2:88:a6:97:a3:d7:b4:0e:80:20:e8:37:
58:90:61:f0:ab:59:61:3f:5f:e2:cc:a2:ac:b4:96:d0:7b:52:
0a:f6:25:94:10:65:81:a2:17:a3:e2:8e:2f:ef:3f:f7:5a:c0:
f1:2f:ad:38:66:29:e6:ea:62:cf:c3:af:c7:b6:04:b1:12:34:
c7:cd:89:25:49:19:0a:a7:2e:9a:fb:1a:23:bb:b1:f8:e1:e8:
39:d0:a3:0f:8f:f9:2a:21:46:fe:69:f1:d9:71:7a:0f:a0:fa:
cc:5d:c4:06:c7:22:fd:0f:d7:49:02:63:03:ff:43:9c:14:10:
e0:34:34:72:49:2a:cb:d0:0a:ae:ab:e9:86:1e:5f:86:f2:19:
d4:83:b8:29:b5:d0:41:fb:64:ae:d3:5d:18:98:da:d3:d2:12:
e0:a8:8b:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7uyEVY/7e0mvvRJJ3gD0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNzAxMzQ2YmFkNTVkZjdmNWRjODE4YmJiYmNmYmI3ZGIx
MDcwYWIwHhcNMjUxMTExMDgwMTE0WhcNMjUxMTEyMDgwMTE0WjAzMTEwLwYDVQQD
EygwMzU5MGNiZjRiNGJlMTBiNjgxODU5ZmQwYmE3MjYwZGE2ODAwMGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKndqfRYBfK3oHxfLG2LID1pSr84
ltiR/6cx6QL9sIzAgDsYcLvjvDf8E81UltuXATdaZZE94o2gpro463VF2fcOhDf5
tny6GS25LVMTLJXcEbSW1fMuxGEnDt3+K+ss3w7zzVdb5AJzIh/mnaPf2lwbVxhI
juWk/nOa/rQY9tdNBd4m1I+DM3hBKr5fvIJ7HC4JrFbb3Yk4FBmseWUchB8w2gkm
t1ynEOs5ISkqVY55LEMcalbB1Fh5csnAUzzrolyl2sUhm2x20UnON7DZK7HRJs49
lREdL00KUy9RClxQYokkVlMDN6q+UvwMR86t3Qa/1BDib6g2iNUdP40qHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANZDL9LS+ELaBhZ/QunJg2mgACrMB8GA1UdIwQY
MBaAFLBwE0a61V339dyBi7u8+7fbEHCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0hBVFJyclZYZmYxM0lHTHU3ejd0OXNRY0tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yZjVmMjItNzQzOS00MjA4LThiMzkt
N2QxMWZjZjE3MTIzLzEvc0hBVFJyclZYZmYxM0lHTHU3ejd0OXNRY0tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yZjVmMjItNzQzOS00MjA4LThiMzktN2QxMWZjZjE3MTIz
LzEvc0hBVFJyclZYZmYxM0lHTHU3ejd0OXNRY0tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOO0Jk3d
oiF87PQ1VAs/ZnOCpWgNljI85tDPJ0BdYrKDb5NpFecI3prDbFlOCLDi2CZMZ6IH
sXf0d61jBc9/y2axBEboxsANM21bsG2WjUIvZLjsf7lgUQRTnkrsKKAE8oiml6PX
tA6AIOg3WJBh8KtZYT9f4syirLSW0HtSCvYllBBlgaIXo+KOL+8/91rA8S+tOGYp
5upiz8Ovx7YEsRI0x82JJUkZCqcumvsaI7ux+OHoOdCjD4/5KiFG/mnx2XF6D6D6
zF3EBsci/Q/XSQJjA/9DnBQQ4DQ0ckkqy9AKrqvphh5fhvIZ1IO4KbXQQftkrtNd
GJja09IS4KiLVg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:37 2025 by rpki-client