Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
File: SGfTe3Yct6BfxzPj20M2b6NiU2w.mft (raw, json)
Hash identifier: zAC2PCoqukl9tvh3dShCMywUbhglOzvd1IGBBpNpr64=
Subject key identifier: 1D:82:64:9A:85:E4:15:E3:6B:DF:62:87:89:AB:B6:7D:3F:65:F3:C6
Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
Certificate issuer: /CN=4867d37b761cb7a05fc733e3db43366fa362536c
Certificate serial: 019A71B7C0A88736C020901D1029EC72CFE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
Manifest number: 0FF4
Signing time: Tue 11 Nov 2025 07:00:59 +0000
Manifest this update: Tue 11 Nov 2025 07:00:59 +0000
Manifest next update: Wed 12 Nov 2025 07:00:59 +0000
Files and hashes: 1: Nx8KeWYh1HnL5iAJ_PCU7YJun4c.roa (hash: MQQ4lqV14DgsP9PSgDv3Sm3nFuHvBvMEPlVur5pwdsw=)
2: SGfTe3Yct6BfxzPj20M2b6NiU2w.crl (hash: j7VCd2a5pLdPpXjRtXMKpAlMNUaErHQ/Cb7UgL5BjBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c0:a8:87:36:c0:20:90:1d:10:29:ec:72:cf:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c
Validity
Not Before: Nov 11 07:00:59 2025 GMT
Not After : Nov 12 07:00:59 2025 GMT
Subject: CN=1d82649a85e415e36bdf628789abb67d3f65f3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b4:db:c5:e1:56:65:c1:db:2e:a0:2b:74:dd:
12:cb:89:47:17:b0:3e:d4:50:4e:f2:d0:53:99:fb:
53:e5:a7:e8:36:6a:38:c9:a5:9c:70:ab:69:5a:d0:
e4:40:a9:42:79:fb:c5:f2:e1:0a:1d:96:3f:ab:c3:
e3:f4:c1:92:04:82:b1:20:8d:55:a4:f3:35:78:1c:
cf:49:4f:78:b0:c5:d3:2d:80:42:c3:e8:cf:8d:e2:
91:42:15:2e:a2:ac:44:a2:d7:28:3d:68:64:a0:33:
c0:3d:3d:bc:3c:9a:05:48:48:62:69:6f:31:2f:99:
86:bb:9d:c1:8f:90:70:92:e1:50:74:7a:93:f1:84:
20:e5:e0:c3:fd:ba:88:02:90:c3:55:3d:43:7b:e1:
25:29:39:13:df:b2:9e:fb:79:99:dd:23:c3:f2:62:
62:99:39:68:ec:5f:62:a5:87:de:96:fc:d3:b7:17:
c2:2f:27:18:06:15:d4:a6:70:74:25:73:64:84:5d:
8e:78:a7:7a:b7:65:26:33:b2:d8:a1:9b:6b:ec:f8:
16:30:bc:2c:af:47:b3:06:b3:30:b8:d8:ab:b5:7f:
3b:68:0e:ab:3d:34:32:00:05:ca:f3:c6:32:b1:a7:
b9:19:5a:6d:a7:6b:f1:33:6a:fa:38:0a:08:36:d8:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:82:64:9A:85:E4:15:E3:6B:DF:62:87:89:AB:B6:7D:3F:65:F3:C6
X509v3 Authority Key Identifier:
keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:42:2d:a6:8f:c4:05:0f:ae:f5:cc:f5:73:eb:5f:cb:a8:d9:
21:54:fe:5a:4b:84:36:b7:06:e1:f2:78:5e:18:35:38:50:7e:
02:5b:fc:c1:58:b9:65:33:1e:91:37:64:1f:12:27:17:0c:d6:
b9:29:a4:22:6e:55:c4:0c:05:14:20:ee:5e:0b:8d:28:5a:2e:
a9:d9:5b:fd:e1:fe:5d:e8:2b:0f:4c:9d:8c:fc:aa:88:c5:16:
20:6c:64:33:81:b4:c6:d6:b8:a5:c6:de:ec:6c:d9:0a:0d:c3:
35:46:84:ca:c3:03:0d:9f:bd:db:41:92:2b:3d:9f:7a:d3:3f:
c2:f2:0d:fa:bb:9b:5d:54:10:a7:56:10:96:c4:96:9b:e1:4a:
b8:94:c4:cc:25:2e:53:3f:2d:b3:ef:0d:1e:46:62:05:d5:f5:
81:b8:ca:dc:e0:73:44:77:42:36:ac:c5:ac:6a:d7:77:68:cf:
af:7c:63:9c:de:51:9e:ef:9f:f2:f0:e7:59:52:ec:42:52:d2:
21:a4:6d:03:3f:a2:b7:b4:04:0e:af:f5:72:0c:8c:14:c7:73:
2d:50:cc:f1:53:68:ee:22:0f:97:e0:14:fa:c4:03:e4:0b:b0:
d6:b6:98:88:91:37:70:0b:c6:cf:34:14:65:09:65:dd:5e:83:
04:8e:f6:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt8CohzbAIJAdECnscs/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NjdkMzdiNzYxY2I3YTA1ZmM3MzNlM2RiNDMzNjZmYTM2
MjUzNmMwHhcNMjUxMTExMDcwMDU5WhcNMjUxMTEyMDcwMDU5WjAzMTEwLwYDVQQD
EygxZDgyNjQ5YTg1ZTQxNWUzNmJkZjYyODc4OWFiYjY3ZDNmNjVmM2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrTbxeFWZcHbLqArdN0Sy4lHF7A+
1FBO8tBTmftT5afoNmo4yaWccKtpWtDkQKlCefvF8uEKHZY/q8Pj9MGSBIKxII1V
pPM1eBzPSU94sMXTLYBCw+jPjeKRQhUuoqxEotcoPWhkoDPAPT28PJoFSEhiaW8x
L5mGu53Bj5BwkuFQdHqT8YQg5eDD/bqIApDDVT1De+ElKTkT37Ke+3mZ3SPD8mJi
mTlo7F9ipYfelvzTtxfCLycYBhXUpnB0JXNkhF2OeKd6t2UmM7LYoZtr7PgWMLws
r0ezBrMwuNirtX87aA6rPTQyAAXK88Yysae5GVptp2vxM2r6OAoINthPxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2CZJqF5BXja99ih4mrtn0/ZfPGMB8GA1UdIwQY
MBaAFEhn03t2HLegX8cz49tDNm+jYlNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMGM1YjctZDJhYy00YTVhLTgwOTgt
NjBmOWRlYTQzODk5LzEvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMGM1YjctZDJhYy00YTVhLTgwOTgtNjBmOWRlYTQzODk5
LzEvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0Itpo/E
BQ+u9cz1c+tfy6jZIVT+WkuENrcG4fJ4Xhg1OFB+Alv8wVi5ZTMekTdkHxInFwzW
uSmkIm5VxAwFFCDuXguNKFouqdlb/eH+XegrD0ydjPyqiMUWIGxkM4G0xta4pcbe
7GzZCg3DNUaEysMDDZ+920GSKz2fetM/wvIN+rubXVQQp1YQlsSWm+FKuJTEzCUu
Uz8ts+8NHkZiBdX1gbjK3OBzRHdCNqzFrGrXd2jPr3xjnN5Rnu+f8vDnWVLsQlLS
IaRtAz+it7QEDq/1cgyMFMdzLVDM8VNo7iIPl+AU+sQD5Auw1raYiJE3cAvGzzQU
ZQll3V6DBI72sQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:46 2025 by rpki-client