Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier: a+YuKHbMpPZyGXnw71wG8sHsbgLth6yVrkjahj/BTq8=
Subject key identifier: 66:3A:86:C6:3D:F2:EC:66:4A:94:D4:3E:79:BF:C2:7B:06:FD:54:C7
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 0199FF59A8165BF34C6E7BB5C4ACEDEC54C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number: 1052
Signing time: Mon 20 Oct 2025 02:01:29 +0000
Manifest this update: Mon 20 Oct 2025 02:01:29 +0000
Manifest next update: Tue 21 Oct 2025 02:01:29 +0000
Files and hashes: 1: O4DnjMJxaB_pFWQmCkxEqVmtSEE.roa (hash: Q4by4xiYnixZCX5hEAZAkvk6E0p484+oatGMnccjr6w=)
2: S17iBhkERDhZ8BQHX4CBUU31c6Y.roa (hash: KN0zRr09424pw0sdcVfcRSqozH46+PiFTvb656E5OJY=)
3: Yv-tOf_tITvZrh8RooAtxp7TK0o.roa (hash: 9Wq1a/wEw3a8Ph1i4BUMD94Q3lQzmejrav8oStD8sBc=)
4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: HiUKpksaYGZ8bO4tUP5ShZXg0aDzpkjMeQ28ZF16NTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:a8:16:5b:f3:4c:6e:7b:b5:c4:ac:ed:ec:54:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Oct 20 02:01:29 2025 GMT
Not After : Oct 21 02:01:29 2025 GMT
Subject: CN=663a86c63df2ec664a94d43e79bfc27b06fd54c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:49:0e:ef:5a:a8:68:a3:5e:77:a1:1e:ad:4f:
cd:f7:d5:c1:fb:36:e5:0d:36:4a:80:e9:e5:57:67:
4e:0f:94:06:9a:4c:4d:c0:88:64:bd:bb:d9:46:c6:
a3:f5:e1:8a:83:d4:76:ec:09:3a:95:f6:5b:08:40:
9e:99:3e:52:2d:b5:f7:50:f6:2d:cf:26:cf:b3:6e:
a4:a8:ac:8b:20:cc:78:3f:40:d0:c2:6a:be:2d:b4:
11:4a:a2:b3:92:31:4d:0b:5a:aa:36:dc:a3:b5:cb:
6d:57:fb:ab:c5:b8:8d:20:f8:85:95:6f:74:8e:fc:
cd:91:35:a8:14:e6:5b:b0:32:e5:e7:ce:c4:34:36:
dd:47:c0:75:be:5e:4c:7a:21:a9:5f:b9:8a:20:0b:
cd:d1:76:70:a3:33:a6:f3:a1:aa:21:36:e4:d6:c3:
2d:c0:36:14:04:69:e5:b8:06:45:eb:cb:5f:4d:2c:
58:83:53:76:71:52:37:13:39:59:55:24:4b:6e:bb:
8d:51:c4:69:01:83:71:22:10:6e:09:ed:5d:47:42:
cd:9d:dc:4e:6e:e8:ee:a5:49:95:94:dc:b6:1d:6a:
d2:95:1c:94:e5:9a:17:de:d3:1d:92:16:8b:e5:24:
ab:da:e4:4d:2f:57:46:e5:26:d8:d7:31:a9:f3:c1:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3A:86:C6:3D:F2:EC:66:4A:94:D4:3E:79:BF:C2:7B:06:FD:54:C7
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b7:42:fc:56:ef:8a:a0:13:79:ec:dd:20:c8:dc:42:30:b3:
36:79:54:12:e9:78:c5:a0:58:5a:d5:a6:fe:e0:fb:07:db:2d:
06:a1:6e:8f:a2:46:65:77:50:3c:95:3c:33:33:04:7b:59:ff:
e5:7b:1b:26:22:a6:34:43:24:d5:9a:b4:17:54:83:a4:38:da:
be:b9:1d:47:d2:77:f5:90:a9:da:60:1b:2b:8d:f5:08:a7:34:
7a:19:71:3f:f7:a1:8e:dc:b6:2c:85:4c:a4:03:85:1d:37:7c:
f4:94:0d:ca:6c:cb:16:3a:3a:8b:19:17:37:16:1e:9c:0b:d2:
64:04:ad:74:15:c3:09:b8:85:30:63:3d:bb:ca:c4:3c:cf:d9:
58:9d:0c:c2:2b:22:90:cb:c4:99:39:af:da:1f:bd:ed:96:7f:
fd:3a:28:08:35:1b:fc:9b:34:d1:cf:02:e0:d3:c8:a8:76:23:
2b:5a:08:30:4c:c1:4a:a8:d9:26:ea:85:ca:b5:0f:fc:a7:d0:
b6:72:38:3e:08:1e:94:94:56:44:ef:de:d2:9b:7a:07:da:be:
78:7e:36:31:e2:fa:17:d6:8b:dd:8c:6a:42:cd:11:43:d4:5e:
06:4c:8c:3a:00:94:26:12:14:5e:35:10:e6:72:2f:51:13:7f:
4b:75:20:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WagWW/NMbnu1xKzt7FTFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYzBiZGFmYWRlYTc4ZGNlMzEyZjg2MmRkZjQyYjFiZDRj
NGY2NDUwHhcNMjUxMDIwMDIwMTI5WhcNMjUxMDIxMDIwMTI5WjAzMTEwLwYDVQQD
Eyg2NjNhODZjNjNkZjJlYzY2NGE5NGQ0M2U3OWJmYzI3YjA2ZmQ1NGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUkO71qoaKNed6EerU/N99XB+zbl
DTZKgOnlV2dOD5QGmkxNwIhkvbvZRsaj9eGKg9R27Ak6lfZbCECemT5SLbX3UPYt
zybPs26kqKyLIMx4P0DQwmq+LbQRSqKzkjFNC1qqNtyjtcttV/urxbiNIPiFlW90
jvzNkTWoFOZbsDLl587ENDbdR8B1vl5MeiGpX7mKIAvN0XZwozOm86GqITbk1sMt
wDYUBGnluAZF68tfTSxYg1N2cVI3EzlZVSRLbruNUcRpAYNxIhBuCe1dR0LNndxO
bujupUmVlNy2HWrSlRyU5ZoX3tMdkhaL5SSr2uRNL1dG5SbY1zGp88G81wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGY6hsY98uxmSpTUPnm/wnsG/VTHMB8GA1UdIwQY
MBaAFLLAva+t6njc4xL4Yt30KxvUxPZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMt
ZmNjMzM2ZWVkOGQ3LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMtZmNjMzM2ZWVkOGQ3
LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLdC/Fbv
iqATeezdIMjcQjCzNnlUEul4xaBYWtWm/uD7B9stBqFuj6JGZXdQPJU8MzMEe1n/
5XsbJiKmNEMk1Zq0F1SDpDjavrkdR9J39ZCp2mAbK431CKc0ehlxP/ehjty2LIVM
pAOFHTd89JQNymzLFjo6ixkXNxYenAvSZAStdBXDCbiFMGM9u8rEPM/ZWJ0Mwisi
kMvEmTmv2h+97ZZ//TooCDUb/Js00c8C4NPIqHYjK1oIMEzBSqjZJuqFyrUP/KfQ
tnI4PggelJRWRO/e0pt6B9q+eH42MeL6F9aL3YxqQs0RQ9ReBkyMOgCUJhIUXjUQ
5nIvURN/S3UgXg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:46 2025 by rpki-client