Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
File: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft (raw, json)
Hash identifier: psixNuyiT0JsMMwdZc/VdYivhYIQ92EfiwUyGGubGAE=
Subject key identifier: D0:66:74:E1:D1:15:96:24:AE:10:A0:6E:B7:74:C9:77:56:61:3B:25
Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
Certificate issuer: /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Certificate serial: 019A725C849F68895865D67AC855EF52D905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
Manifest number: 0EA8
Signing time: Tue 11 Nov 2025 10:00:57 +0000
Manifest this update: Tue 11 Nov 2025 10:00:57 +0000
Manifest next update: Wed 12 Nov 2025 10:00:57 +0000
Files and hashes: 1: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl (hash: 08OVRnAmsc/Q/qk4srqP71Myit690QknFFZtDETL8Rs=)
2: sdwBrQY4WiA2lt3H1cKis5W9S04.roa (hash: Mk3APkF4fBeIqw1OvvqRXpLXb2g4dXwfd7H1jQoWJzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:84:9f:68:89:58:65:d6:7a:c8:55:ef:52:d9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Validity
Not Before: Nov 11 10:00:57 2025 GMT
Not After : Nov 12 10:00:57 2025 GMT
Subject: CN=d06674e1d1159624ae10a06eb774c97756613b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:dc:d4:1c:41:3e:4b:3e:6b:b6:3b:56:b5:
bf:29:16:4f:54:df:be:6a:a8:27:9a:71:5a:2e:d3:
83:09:09:c9:0f:f4:5d:d5:8f:d0:65:a9:c6:77:5c:
3e:3e:af:e2:fd:fa:ae:c5:04:74:00:c9:da:02:01:
96:d1:c7:cf:2a:4a:69:39:ab:7a:e4:cb:b4:34:43:
16:aa:7c:fd:3e:cd:89:91:8f:e3:25:e7:9b:ca:bc:
bf:e0:fa:3c:e7:8c:c6:21:2a:f9:91:bc:6f:e5:fa:
4f:66:61:cb:5d:61:5e:6b:8b:b6:a1:57:1e:91:2d:
52:8f:b8:0a:68:15:ee:af:c8:23:8b:89:f6:16:0a:
3a:53:46:4f:9b:14:7b:75:40:73:87:88:ad:3d:21:
63:31:e3:05:7c:b5:48:e2:82:b0:f9:81:e2:f2:20:
b5:e9:59:3b:01:d5:6a:42:77:5c:4d:94:f3:48:42:
76:28:50:14:3b:ac:81:95:11:ba:e3:e9:45:96:c2:
02:6a:67:7f:1e:4f:c4:41:49:a9:e0:7e:fa:d0:3f:
09:5e:42:5f:eb:70:0e:0b:fe:46:d7:60:a2:15:c0:
28:7a:2f:df:e8:84:e6:42:37:82:35:bb:66:8b:e5:
1d:6b:d8:d2:be:2e:f7:7b:11:8e:ca:82:94:72:54:
49:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:66:74:E1:D1:15:96:24:AE:10:A0:6E:B7:74:C9:77:56:61:3B:25
X509v3 Authority Key Identifier:
keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:84:ce:13:ca:b9:a6:d3:93:e6:d6:bb:2b:b2:50:d6:b9:1d:
82:6e:92:92:0b:b6:88:c3:2d:68:03:4f:8d:73:91:af:54:5d:
bf:52:48:af:32:b1:05:bf:55:82:83:a7:b2:5b:f9:9b:90:db:
bf:04:a6:af:d1:ad:e2:1c:ca:d8:c9:27:aa:52:ad:11:94:5d:
f9:3d:aa:fb:15:91:4e:d0:76:f5:73:27:32:58:01:72:6f:53:
1f:75:be:3c:c0:d6:08:2e:aa:74:2a:23:25:b7:54:46:f0:a2:
26:d8:ec:c7:68:7b:1a:d8:30:9e:9e:03:3a:65:44:20:c3:2a:
dc:27:70:2a:8e:e3:35:48:54:e5:be:92:c7:b0:65:4b:d1:a4:
19:ef:0f:63:3e:49:6c:7c:30:82:ed:03:25:77:ba:9d:4d:dd:
fc:30:2f:39:16:5a:ef:6e:8b:df:5f:e6:ce:7d:94:13:b5:27:
96:bf:87:8e:e3:7e:d5:4c:ac:8a:a2:0e:92:13:08:d9:1d:51:
1e:ed:28:e4:c9:9b:56:17:fc:8b:55:a4:a0:f5:33:45:cf:b5:
db:4b:f9:c5:61:e2:ab:cc:19:f2:9b:8e:3f:7d:8c:fe:be:1b:
d9:80:63:ac:38:1b:4e:5e:cf:ca:a4:3e:b3:70:e8:21:d4:75:
1e:c1:ae:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXISfaIlYZdZ6yFXvUtkFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MjRhODNmZmYyZjAwMGU5OWMxZjI4ZWMxOTY0ODk4NmY4
ZGRjMzcwHhcNMjUxMTExMTAwMDU3WhcNMjUxMTEyMTAwMDU3WjAzMTEwLwYDVQQD
EyhkMDY2NzRlMWQxMTU5NjI0YWUxMGEwNmViNzc0Yzk3NzU2NjEzYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6Lc1BxBPks+a7Y7VrW/KRZPVN++
aqgnmnFaLtODCQnJD/Rd1Y/QZanGd1w+Pq/i/fquxQR0AMnaAgGW0cfPKkppOat6
5Mu0NEMWqnz9Ps2JkY/jJeebyry/4Po854zGISr5kbxv5fpPZmHLXWFea4u2oVce
kS1Sj7gKaBXur8gji4n2Fgo6U0ZPmxR7dUBzh4itPSFjMeMFfLVI4oKw+YHi8iC1
6Vk7AdVqQndcTZTzSEJ2KFAUO6yBlRG64+lFlsICamd/Hk/EQUmp4H760D8JXkJf
63AOC/5G12CiFcAoei/f6ITmQjeCNbtmi+Uda9jSvi73exGOyoKUclRJiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBmdOHRFZYkrhCgbrd0yXdWYTslMB8GA1UdIwQY
MBaAFNUkqD//LwAOmcHyjsGWSJhvjdw3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVNTb1BfOHZBQTZad2ZLT3daWkltRy1OM0RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kYmFmY2QtYTUxZC00NDZiLTljZDct
NDRkNDBkMWM0NmQ1LzEvMVNTb1BfOHZBQTZad2ZLT3daWkltRy1OM0RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kYmFmY2QtYTUxZC00NDZiLTljZDctNDRkNDBkMWM0NmQ1
LzEvMVNTb1BfOHZBQTZad2ZLT3daWkltRy1OM0RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYTOE8q5
ptOT5ta7K7JQ1rkdgm6Skgu2iMMtaANPjXORr1Rdv1JIrzKxBb9VgoOnslv5m5Db
vwSmr9Gt4hzK2MknqlKtEZRd+T2q+xWRTtB29XMnMlgBcm9TH3W+PMDWCC6qdCoj
JbdURvCiJtjsx2h7Gtgwnp4DOmVEIMMq3CdwKo7jNUhU5b6Sx7BlS9GkGe8PYz5J
bHwwgu0DJXe6nU3d/DAvORZa726L31/mzn2UE7Unlr+HjuN+1UysiqIOkhMI2R1R
Hu0o5MmbVhf8i1WkoPUzRc+120v5xWHiq8wZ8puOP32M/r4b2YBjrDgbTl7PyqQ+
s3DoIdR1HsGupw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:25 2025 by rpki-client