Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
File: s4slrXyWWJ5KjKpfpIksxN_Me1M.mft (raw, json)
Hash identifier: 9x+gLdiBTg08YCeoczgt+MgmtxflLmeg830MUUoEO9A=
Subject key identifier: 5A:CE:77:3F:90:E3:4B:02:0F:34:2C:B1:04:AC:77:DA:C2:EB:4F:47
Authority key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
Certificate issuer: /CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Certificate serial: 019A73385936043173A171ED7BB0CECCECFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 14:01:03 +0000
Manifest this update: Tue 11 Nov 2025 14:01:03 +0000
Manifest next update: Wed 12 Nov 2025 14:01:03 +0000
Files and hashes: 1: JJG6lSZApZVFWCoCMzoaHnqrdjA.roa (hash: /ZXBf7GoIevwDbia6b3jjdIqB98IB5pgV+PKh4AI8CE=)
2: s4slrXyWWJ5KjKpfpIksxN_Me1M.crl (hash: uyjs8RG1WSIoEfpMbVdBPfNg/N2Gk3sAFbLPpEZtByM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:59:36:04:31:73:a1:71:ed:7b:b0:ce:cc:ec:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Validity
Not Before: Nov 11 14:01:03 2025 GMT
Not After : Nov 12 14:01:03 2025 GMT
Subject: CN=5ace773f90e34b020f342cb104ac77dac2eb4f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:f9:50:85:e6:95:9f:0a:96:a2:b8:6a:69:
ad:89:81:87:8a:27:f8:ec:4e:a9:73:95:33:84:0b:
3c:32:58:7c:09:7b:60:5f:87:5f:40:f1:ba:e7:c4:
cf:ac:b1:dc:e6:4a:18:d8:0b:8e:19:ca:b9:34:46:
7d:9f:d1:d6:94:af:5f:0a:0f:6d:65:03:d9:04:11:
94:0a:96:e0:a6:5d:32:03:27:12:2c:a5:b4:fd:80:
9d:e6:5f:11:df:00:f1:46:d4:d2:6c:a3:cf:6a:a0:
91:47:7d:1e:56:2a:75:bd:95:6c:c3:98:87:49:7c:
35:a6:8c:b3:3a:0a:b5:e0:9d:16:ca:ff:f3:84:26:
7d:b0:2f:c5:b7:ab:ea:1f:34:5b:5c:22:53:15:88:
cc:60:bf:6f:99:33:d7:33:fc:f3:ef:15:61:b3:de:
50:74:ca:01:77:7b:66:84:2d:94:08:ee:4b:af:69:
e7:02:46:08:ed:21:cc:76:83:be:9c:81:01:1c:d5:
e9:6e:d6:b3:d0:06:c7:75:9f:a0:bf:70:4e:e5:ea:
a6:10:48:46:74:7f:2a:f9:55:47:7c:df:76:0e:1f:
5a:d4:3f:43:4e:df:a7:07:eb:ff:4c:74:26:48:52:
72:5d:34:fa:f8:3a:51:88:e5:56:9d:b5:50:cb:15:
51:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CE:77:3F:90:E3:4B:02:0F:34:2C:B1:04:AC:77:DA:C2:EB:4F:47
X509v3 Authority Key Identifier:
keyid:B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b4:f7:22:fd:32:2d:82:33:49:9f:c4:2d:9f:e9:48:f1:a8:
93:52:b2:22:1e:ea:b5:e1:5e:3c:54:81:ad:ba:4f:db:fa:fd:
a9:bc:02:72:ab:0f:71:40:a4:d5:c0:a4:20:5c:44:77:f5:f1:
55:c4:64:43:38:00:19:4e:a5:4b:c6:da:1a:67:eb:74:e2:c2:
80:e9:db:67:16:fd:b4:b5:29:54:ac:f1:47:68:ed:d8:41:03:
be:ee:b8:35:1f:c9:ac:5d:5c:28:d2:c6:fe:19:f8:c9:73:4a:
be:ab:09:62:bc:3b:24:94:5d:4b:60:49:07:c6:d7:30:b4:c5:
02:10:b2:14:04:85:2d:73:87:d0:ba:0a:d3:0a:3c:73:15:6e:
c9:76:4e:0a:60:08:b9:d5:31:30:0e:e7:17:4c:f2:f9:1a:45:
2f:69:c4:4c:99:96:5c:38:7c:dc:e1:1b:23:c2:b1:de:1e:1a:
40:3e:78:4f:7b:42:fe:22:00:f8:48:dc:87:db:7c:45:23:9f:
73:e2:78:7e:9f:0f:35:07:a2:b3:ae:f5:4c:19:3b:e9:c7:f5:
c8:ba:22:63:23:aa:b0:70:ef:a4:aa:b5:7c:d2:7b:86:fa:de:
33:74:5e:08:f3:8e:e2:9c:f6:47:2c:87:68:5b:bc:ba:c7:4d:
b1:06:c2:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOFk2BDFzoXHte7DOzOz/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOGIyNWFkN2M5NjU4OWU0YThjYWE1ZmE0ODkyY2M0ZGZj
YzdiNTMwHhcNMjUxMTExMTQwMTAzWhcNMjUxMTEyMTQwMTAzWjAzMTEwLwYDVQQD
Eyg1YWNlNzczZjkwZTM0YjAyMGYzNDJjYjEwNGFjNzdkYWMyZWI0ZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jD5UIXmlZ8KlqK4ammtiYGHiif4
7E6pc5UzhAs8Mlh8CXtgX4dfQPG658TPrLHc5koY2AuOGcq5NEZ9n9HWlK9fCg9t
ZQPZBBGUCpbgpl0yAycSLKW0/YCd5l8R3wDxRtTSbKPPaqCRR30eVip1vZVsw5iH
SXw1poyzOgq14J0Wyv/zhCZ9sC/Ft6vqHzRbXCJTFYjMYL9vmTPXM/zz7xVhs95Q
dMoBd3tmhC2UCO5Lr2nnAkYI7SHMdoO+nIEBHNXpbtaz0AbHdZ+gv3BO5eqmEEhG
dH8q+VVHfN92Dh9a1D9DTt+nB+v/THQmSFJyXTT6+DpRiOVWnbVQyxVR6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrOdz+Q40sCDzQssQSsd9rC609HMB8GA1UdIwQY
MBaAFLOLJa18llieSoyqX6SJLMTfzHtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80MjkxYTItMDNhOS00MTk1LWIxYTct
M2Y0MDU0N2U1MmQxLzEvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80MjkxYTItMDNhOS00MTk1LWIxYTctM2Y0MDU0N2U1MmQx
LzEvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7T3Iv0y
LYIzSZ/ELZ/pSPGok1KyIh7qteFePFSBrbpP2/r9qbwCcqsPcUCk1cCkIFxEd/Xx
VcRkQzgAGU6lS8baGmfrdOLCgOnbZxb9tLUpVKzxR2jt2EEDvu64NR/JrF1cKNLG
/hn4yXNKvqsJYrw7JJRdS2BJB8bXMLTFAhCyFASFLXOH0LoK0wo8cxVuyXZOCmAI
udUxMA7nF0zy+RpFL2nETJmWXDh83OEbI8Kx3h4aQD54T3tC/iIA+Ejch9t8RSOf
c+J4fp8PNQeis671TBk76cf1yLoiYyOqsHDvpKq1fNJ7hvreM3ReCPOO4pz2RyyH
aFu8usdNsQbCuw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:44:50 2025 by rpki-client