Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
File: sZQPAAmW6_0tq3HEacxR7ogbP14.mft (raw, json)
Hash identifier: Q+VfjoZ7K2qOtbgy/UMQ+YjXQz9ukc9evFymDkdbA4Q=
Subject key identifier: 7B:FB:4D:EE:AA:5D:15:E3:61:51:EB:71:34:52:4A:71:EA:BB:40:2A
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial: 019A7293E9730F4A67577787C6B18EFD9C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:01:27 +0000
Manifest this update: Tue 11 Nov 2025 11:01:27 +0000
Manifest next update: Wed 12 Nov 2025 11:01:27 +0000
Files and hashes: 1: BA5XRS-VBm8RVVbSCJW6HST0wD0.roa (hash: b9K7NP8BwX8VNftSD4zDv00erFxrleUYzaeFhztZOO8=)
2: gbBXW-vxInHi16BrBBKHLf7If3g.roa (hash: fBYMDG4bZkxXYdO0y/chVffLP2RSHLaDCHJZ1DFzD3E=)
3: sZQPAAmW6_0tq3HEacxR7ogbP14.crl (hash: oyFxi6++9gIKwtA+mweNU8lCW4ccnpgkyR5Qe+WUwqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e9:73:0f:4a:67:57:77:87:c6:b1:8e:fd:9c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Validity
Not Before: Nov 11 11:01:27 2025 GMT
Not After : Nov 12 11:01:27 2025 GMT
Subject: CN=7bfb4deeaa5d15e36151eb7134524a71eabb402a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b0:2e:e4:c3:89:c9:58:ce:5d:f1:85:1c:74:
e5:32:7f:82:63:a4:c7:3e:41:59:df:77:98:3f:4c:
2c:dc:d7:75:fb:31:de:05:b0:a0:5d:53:3f:7d:e3:
69:8b:31:9b:30:23:f8:ba:59:79:09:4c:f7:20:ca:
32:e2:ee:94:b1:9e:cd:b5:e6:b5:25:6c:d2:90:f3:
6e:13:1c:b8:48:56:64:03:e6:6a:a7:ec:26:7c:53:
ce:c2:6d:0a:2f:65:50:14:30:af:ae:3f:68:38:ab:
bc:e7:99:44:a3:29:b2:00:0c:d1:8d:3e:d5:0d:1d:
60:19:50:cd:cd:66:17:74:44:20:9f:48:b5:99:d0:
e4:8b:3a:bd:e2:6a:57:95:52:c0:c6:c7:e5:09:23:
15:8a:b3:4e:90:a3:13:6b:6c:f6:85:0d:1d:29:93:
9c:c4:c0:c5:9e:8d:7f:0e:ba:f3:d7:d0:cc:84:86:
05:90:a1:de:0c:6b:06:fa:b1:a4:13:0f:77:18:cd:
db:03:d4:f3:db:f1:58:de:20:86:60:2d:b7:d7:c0:
bd:fe:34:0a:65:71:c1:35:93:d9:18:6e:05:24:c7:
51:c3:fd:68:f2:da:23:cd:d0:90:c5:22:5d:e4:14:
b7:5c:0a:ca:5b:30:78:d5:85:75:0f:a1:68:1a:36:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FB:4D:EE:AA:5D:15:E3:61:51:EB:71:34:52:4A:71:EA:BB:40:2A
X509v3 Authority Key Identifier:
keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f9:e0:28:ed:a0:29:e3:da:a5:fd:4c:30:28:2b:25:1a:73:
4b:1d:c8:c5:72:1e:1b:45:ce:a8:35:6c:ba:e9:23:85:96:2c:
56:88:a8:e7:a4:64:6e:ec:5d:bb:cf:dc:42:3e:05:f1:b0:18:
c8:d6:3f:1f:33:51:2c:e7:0e:73:a8:62:a5:be:c6:a8:80:bd:
41:d1:80:a1:39:6e:b7:97:79:bc:ea:28:6c:f2:59:c5:67:66:
3f:93:75:bb:45:cb:7e:aa:c5:6b:a8:83:fa:fd:54:e1:f3:a0:
4d:c6:7f:36:25:ea:45:60:36:67:6f:6e:38:8d:d0:50:79:05:
0c:b1:fa:80:ed:86:7c:f5:b3:a9:12:9a:d8:b0:5f:fa:97:b1:
e5:3e:ed:b3:8c:c2:35:0a:2f:87:95:1f:25:c4:39:80:59:08:
4a:f4:6f:b6:85:8e:6a:fe:5d:42:6f:aa:67:5a:3f:8b:51:4d:
fd:c1:d5:f3:33:0b:eb:01:64:13:6b:32:60:4d:6e:7c:03:a4:
ab:54:c6:46:f2:07:3b:ad:92:7b:8b:3e:18:4b:25:9c:40:99:
36:39:d6:11:e0:4f:0b:05:bb:86:73:91:86:f0:47:89:7a:ff:
06:ad:83:c6:a1:31:bf:17:66:bf:ae:27:69:24:ac:0b:f0:d1:
ef:35:b4:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk+lzD0pnV3eHxrGO/ZwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOTQwZjAwMDk5NmViZmQyZGFiNzFjNDY5Y2M1MWVlODgx
YjNmNWUwHhcNMjUxMTExMTEwMTI3WhcNMjUxMTEyMTEwMTI3WjAzMTEwLwYDVQQD
Eyg3YmZiNGRlZWFhNWQxNWUzNjE1MWViNzEzNDUyNGE3MWVhYmI0MDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9bAu5MOJyVjOXfGFHHTlMn+CY6TH
PkFZ33eYP0ws3Nd1+zHeBbCgXVM/feNpizGbMCP4ull5CUz3IMoy4u6UsZ7Ntea1
JWzSkPNuExy4SFZkA+Zqp+wmfFPOwm0KL2VQFDCvrj9oOKu855lEoymyAAzRjT7V
DR1gGVDNzWYXdEQgn0i1mdDkizq94mpXlVLAxsflCSMVirNOkKMTa2z2hQ0dKZOc
xMDFno1/Drrz19DMhIYFkKHeDGsG+rGkEw93GM3bA9Tz2/FY3iCGYC2318C9/jQK
ZXHBNZPZGG4FJMdRw/1o8tojzdCQxSJd5BS3XArKWzB41YV1D6FoGjZ3jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHv7Te6qXRXjYVHrcTRSSnHqu0AqMB8GA1UdIwQY
MBaAFLGUDwAJluv9LatxxGnMUe6IGz9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1pRUEFBbVc2XzB0cTNIRWFjeFI3b2diUDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYzEzZDktODFkNS00Y2RiLWEyZTEt
YTVhYmIyMGQyNDYyLzEvc1pRUEFBbVc2XzB0cTNIRWFjeFI3b2diUDE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xYzEzZDktODFkNS00Y2RiLWEyZTEtYTVhYmIyMGQyNDYy
LzEvc1pRUEFBbVc2XzB0cTNIRWFjeFI3b2diUDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvngKO2g
KePapf1MMCgrJRpzSx3IxXIeG0XOqDVsuukjhZYsVoio56Rkbuxdu8/cQj4F8bAY
yNY/HzNRLOcOc6hipb7GqIC9QdGAoTlut5d5vOoobPJZxWdmP5N1u0XLfqrFa6iD
+v1U4fOgTcZ/NiXqRWA2Z29uOI3QUHkFDLH6gO2GfPWzqRKa2LBf+pex5T7ts4zC
NQovh5UfJcQ5gFkISvRvtoWOav5dQm+qZ1o/i1FN/cHV8zML6wFkE2syYE1ufAOk
q1TGRvIHO62Se4s+GEslnECZNjnWEeBPCwW7hnORhvBHiXr/Bq2DxqExvxdmv64n
aSSsC/DR7zW0MA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:52 2025 by rpki-client