Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json)
Hash identifier: JM2Bb8DYDrN25cFx5hv9kWT+6Gv8oGAi7aN6SD0Mxp8=
Subject key identifier: E2:7C:56:DC:BF:A5:C6:9F:56:26:A3:78:2F:09:68:84:D3:27:D3:84
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 019A0C38EDE1CE6E3F6EF6FF6884F8B63269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
Manifest number: 04DE
Signing time: Wed 22 Oct 2025 14:00:48 +0000
Manifest this update: Wed 22 Oct 2025 14:00:48 +0000
Manifest next update: Thu 23 Oct 2025 14:00:48 +0000
Files and hashes: 1: joUfA7wmiDy4bESPg0qWDrSmTss.roa (hash: 1QUrxZN7VrpsU9R2lfkft3ATlxKCm7MpFqrD8hOkNNA=)
2: mHdbhQxgyf7CV9jCGJvliFVilXc.roa (hash: 4CdqTf57TkDxaRHOcnXl2aFyjkgmNRswPmW9ZMUYxw8=)
3: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: gPg73QYwOCrQ3U39fbZ5iEwVq6jqU4xM29o8xWq6v2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:38:ed:e1:ce:6e:3f:6e:f6:ff:68:84:f8:b6:32:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Oct 22 14:00:48 2025 GMT
Not After : Oct 23 14:00:48 2025 GMT
Subject: CN=e27c56dcbfa5c69f5626a3782f096884d327d384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e4:48:99:aa:9e:2a:63:98:7d:5e:e3:4d:80:
52:14:ef:1e:0d:ce:98:ed:f9:17:6d:88:aa:8b:87:
93:7f:57:e3:ea:2b:09:a8:8f:56:76:64:2d:82:3c:
48:30:9e:0b:f0:fd:58:0e:6b:b0:ac:d2:27:80:b8:
71:bc:d9:98:38:1a:bd:2a:37:6d:2b:52:8a:6c:8b:
6b:2c:09:69:0f:f8:a3:e9:ce:60:39:b3:c3:74:b9:
1c:79:ca:0e:dd:af:94:c5:6f:65:90:30:c8:cf:c5:
20:ea:29:9f:cb:42:fc:95:5d:30:72:d3:2f:75:aa:
d7:90:54:0a:16:68:b1:55:bf:3e:ce:96:28:e2:77:
e2:28:a6:17:95:df:53:7a:6c:83:e8:be:2c:4e:b3:
6c:c4:94:ee:2a:f8:fb:cc:71:ce:c2:ac:2b:f4:e6:
19:9c:6a:e3:b6:ec:64:75:e5:01:81:dc:45:5d:87:
3f:82:bd:22:7a:e4:22:9d:a1:df:ac:ee:a9:f7:24:
21:3d:90:ea:87:c6:da:aa:1e:7d:3d:87:3d:72:85:
71:5c:05:59:3a:c5:7b:d5:19:5b:0e:b4:c1:48:ff:
32:bf:58:25:b2:3d:ab:f1:de:ee:88:0b:fd:1c:59:
b2:4b:f9:48:4b:9f:5f:c2:32:03:9b:71:24:eb:26:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7C:56:DC:BF:A5:C6:9F:56:26:A3:78:2F:09:68:84:D3:27:D3:84
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9f:e7:7e:04:5e:5d:c4:03:38:ca:f0:10:f9:8d:fc:32:af:
50:64:b3:73:b1:76:3a:11:55:46:0c:fd:6d:89:03:84:2b:3f:
46:79:c0:4c:f4:fc:55:4f:b5:33:c9:69:6d:da:d1:a4:72:f2:
64:ab:17:f8:7a:5c:c7:df:e4:5e:20:87:27:d7:43:e8:13:4f:
84:28:4e:65:f9:38:46:b1:b7:78:fa:63:e9:bd:93:1e:54:a5:
17:ea:a0:1a:7f:72:5c:f1:a3:30:22:dc:d5:6b:49:de:5f:36:
18:0a:c5:e1:18:e2:35:94:b0:d6:b4:96:b0:59:df:71:14:13:
51:02:b1:81:dd:f2:7e:89:21:ab:b1:77:f6:f3:0a:ba:cb:e8:
e2:28:be:50:f2:1b:e0:ef:2b:91:46:a8:5c:48:6e:50:b1:9b:
a7:9a:81:00:70:9b:2b:17:c6:a1:97:f8:50:7d:43:70:57:ff:
92:2f:5d:20:06:b7:3d:3a:87:13:33:ce:37:da:9b:b1:6e:86:
76:b4:36:88:a0:f8:ef:4e:a6:7f:69:36:2d:64:2e:2e:59:1b:
c2:e6:9c:62:df:41:77:c6:51:db:1e:03:cf:dd:db:78:a2:99:
3c:d8:fc:8d:86:38:d8:e6:3f:f5:89:f9:9a:c4:b9:14:d0:c8:
ab:99:71:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoMOO3hzm4/bvb/aIT4tjJpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWM0Y2U2NjNlMWVjMjQ1ZTc0N2NkODQ2ZjFhNjlkZGI4
MzRiM2IwHhcNMjUxMDIyMTQwMDQ4WhcNMjUxMDIzMTQwMDQ4WjAzMTEwLwYDVQQD
EyhlMjdjNTZkY2JmYTVjNjlmNTYyNmEzNzgyZjA5Njg4NGQzMjdkMzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+RImaqeKmOYfV7jTYBSFO8eDc6Y
7fkXbYiqi4eTf1fj6isJqI9WdmQtgjxIMJ4L8P1YDmuwrNIngLhxvNmYOBq9Kjdt
K1KKbItrLAlpD/ij6c5gObPDdLkcecoO3a+UxW9lkDDIz8Ug6imfy0L8lV0wctMv
darXkFQKFmixVb8+zpYo4nfiKKYXld9TemyD6L4sTrNsxJTuKvj7zHHOwqwr9OYZ
nGrjtuxkdeUBgdxFXYc/gr0ieuQinaHfrO6p9yQhPZDqh8baqh59PYc9coVxXAVZ
OsV71RlbDrTBSP8yv1glsj2r8d7uiAv9HFmyS/lIS59fwjIDm3Ek6ya6LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJ8Vty/pcafViajeC8JaITTJ9OEMB8GA1UdIwQY
MBaAFLMcTOZj4ewkXnR82Ebxpp3bg0s7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMt
NDY1YWRjMjk1OWYyLzEvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMtNDY1YWRjMjk1OWYy
LzEvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJ/nfgRe
XcQDOMrwEPmN/DKvUGSzc7F2OhFVRgz9bYkDhCs/RnnATPT8VU+1M8lpbdrRpHLy
ZKsX+Hpcx9/kXiCHJ9dD6BNPhChOZfk4RrG3ePpj6b2THlSlF+qgGn9yXPGjMCLc
1WtJ3l82GArF4RjiNZSw1rSWsFnfcRQTUQKxgd3yfokhq7F39vMKusvo4ii+UPIb
4O8rkUaoXEhuULGbp5qBAHCbKxfGoZf4UH1DcFf/ki9dIAa3PTqHEzPON9qbsW6G
drQ2iKD4706mf2k2LWQuLlkbwuacYt9Bd8ZR2x4Dz93beKKZPNj8jYY42OY/9Yn5
msS5FNDIq5lxfw==
-----END CERTIFICATE-----
Generated at Wed Oct 22 19:06:34 2025 by rpki-client