Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
File: SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft (raw, json)
Hash identifier: 5XTOc3qrmdmJ6KkseB1vPU7JhbJyk8j3RgzJkcY2zVo=
Subject key identifier: 41:1B:40:B7:B9:41:88:40:1B:20:FC:9F:D4:E3:9F:11:F1:9B:9A:5B
Authority key identifier: 49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
Certificate issuer: /CN=4978d328bcde5294f372765c11aeef28155b0f02
Certificate serial: 0199FBEC3E690C487FB6BB4B4E470B9C38F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 10:03:07 +0000
Manifest this update: Sun 19 Oct 2025 10:03:07 +0000
Manifest next update: Mon 20 Oct 2025 10:03:07 +0000
Files and hashes: 1: 2TabSpltHUMp_5ejqOpWZde5yuo.roa (hash: 3/hdPalq/aa4mw4O394+y1isU6rPiSjjsa/MhWeedzA=)
2: SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl (hash: IhLQ/gFEtbgc4HCxc4n2duqtzvIGocAtQSKKJF3x+G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:3e:69:0c:48:7f:b6:bb:4b:4e:47:0b:9c:38:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978d328bcde5294f372765c11aeef28155b0f02
Validity
Not Before: Oct 19 10:03:07 2025 GMT
Not After : Oct 20 10:03:07 2025 GMT
Subject: CN=411b40b7b94188401b20fc9fd4e39f11f19b9a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:db:5c:9d:30:54:54:08:e6:7a:71:e9:f9:fb:
56:50:11:d5:8e:41:78:4e:2c:6f:ef:5c:83:a8:e7:
bd:ce:25:5a:17:ae:69:b3:d4:1a:d7:96:68:b0:50:
ea:e1:77:b8:0d:92:99:4b:7a:7a:84:5e:62:8d:13:
2b:28:10:2e:84:41:df:4b:3a:57:57:ef:b4:c6:e5:
7d:28:58:d2:05:4a:dd:43:aa:35:8e:e1:31:24:ef:
08:d0:da:fd:d9:0a:90:e3:82:35:13:f9:aa:ea:bd:
f6:05:8e:42:b5:c0:f1:65:b3:fd:4f:88:3d:d7:2f:
68:58:d5:d8:7b:2e:bd:23:5f:37:c1:54:dc:dc:e0:
1f:b9:41:ea:0c:e5:5e:68:a2:be:21:13:2f:62:01:
1c:7d:75:d8:21:6b:f7:0b:c4:da:d8:ef:15:95:06:
69:89:d1:1c:2b:8b:02:ef:22:41:76:46:ee:d0:ad:
ba:ef:a7:4e:82:bb:b4:f5:e9:d9:aa:8e:2d:59:fe:
9a:6f:b9:bf:53:92:b9:ee:68:c9:25:51:20:4b:2b:
33:77:aa:45:2d:75:05:b7:4d:7a:8a:95:20:d7:e4:
2e:89:93:55:3c:4c:d6:a2:a8:1e:54:e7:a5:c5:d5:
f5:ec:44:17:8e:93:45:08:7c:d8:d3:40:51:50:9f:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1B:40:B7:B9:41:88:40:1B:20:FC:9F:D4:E3:9F:11:F1:9B:9A:5B
X509v3 Authority Key Identifier:
keyid:49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:70:81:cd:2f:bd:00:ba:a8:98:d9:ce:a2:8c:4b:36:49:91:
7b:76:c3:9d:7d:a0:d7:74:9c:de:b4:ea:43:58:09:af:1f:d7:
ee:8e:f9:c5:7f:eb:d1:62:ce:d4:bc:0d:0a:f8:6d:74:0f:54:
3c:88:42:f4:2b:95:de:dd:b2:1f:b8:b8:b3:de:e5:b4:ab:b9:
c3:7e:33:54:82:8a:3f:fa:ce:06:a7:8e:48:47:de:ba:09:fc:
0a:ff:2a:42:88:3e:c5:69:6d:40:62:53:c1:08:51:7d:92:11:
d7:07:f7:d8:35:ff:fd:15:2c:63:ef:ff:aa:6f:83:6d:59:20:
8c:ce:2f:46:23:5e:24:b9:8d:bf:88:11:f8:60:f8:28:37:f5:
56:0e:6e:c4:77:69:1e:ea:b9:b6:5e:e2:dc:de:87:3d:80:45:
3a:15:4d:9f:0e:ad:81:b1:8e:55:fc:bb:c0:6b:cb:0d:4e:70:
e5:b1:b5:1c:b1:cf:b3:42:39:15:f8:99:53:0c:ec:94:7f:d4:
d0:cd:b7:72:69:b7:4c:11:96:be:90:e8:74:c8:71:b4:bb:c8:
cd:e2:b0:8f:ed:16:38:7d:df:f5:67:47:b5:a9:cd:34:66:29:
93:5a:11:d5:68:f0:d7:0c:1a:8f:0e:2f:d5:aa:eb:c4:01:49:
24:ff:1d:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77D5pDEh/trtLTkcLnDjxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NzhkMzI4YmNkZTUyOTRmMzcyNzY1YzExYWVlZjI4MTU1
YjBmMDIwHhcNMjUxMDE5MTAwMzA3WhcNMjUxMDIwMTAwMzA3WjAzMTEwLwYDVQQD
Eyg0MTFiNDBiN2I5NDE4ODQwMWIyMGZjOWZkNGUzOWYxMWYxOWI5YTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49tcnTBUVAjmenHp+ftWUBHVjkF4
Tixv71yDqOe9ziVaF65ps9Qa15ZosFDq4Xe4DZKZS3p6hF5ijRMrKBAuhEHfSzpX
V++0xuV9KFjSBUrdQ6o1juExJO8I0Nr92QqQ44I1E/mq6r32BY5CtcDxZbP9T4g9
1y9oWNXYey69I183wVTc3OAfuUHqDOVeaKK+IRMvYgEcfXXYIWv3C8Ta2O8VlQZp
idEcK4sC7yJBdkbu0K2676dOgru09enZqo4tWf6ab7m/U5K57mjJJVEgSyszd6pF
LXUFt016ipUg1+QuiZNVPEzWoqgeVOelxdX17EQXjpNFCHzY00BRUJ98rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEbQLe5QYhAGyD8n9TjnxHxm5pbMB8GA1UdIwQY
MBaAFEl40yi83lKU83J2XBGu7ygVWw8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1hqVEtMemVVcFR6Y25aY0VhN3ZLQlZiRHdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mZTE3M2ItZjg3Zi00NjRmLWIxYjkt
OGM3ZDIwOTIzYjA4LzEvU1hqVEtMemVVcFR6Y25aY0VhN3ZLQlZiRHdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9mZTE3M2ItZjg3Zi00NjRmLWIxYjktOGM3ZDIwOTIzYjA4
LzEvU1hqVEtMemVVcFR6Y25aY0VhN3ZLQlZiRHdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3CBzS+9
ALqomNnOooxLNkmRe3bDnX2g13Sc3rTqQ1gJrx/X7o75xX/r0WLO1LwNCvhtdA9U
PIhC9CuV3t2yH7i4s97ltKu5w34zVIKKP/rOBqeOSEfeugn8Cv8qQog+xWltQGJT
wQhRfZIR1wf32DX//RUsY+//qm+DbVkgjM4vRiNeJLmNv4gR+GD4KDf1Vg5uxHdp
Huq5tl7i3N6HPYBFOhVNnw6tgbGOVfy7wGvLDU5w5bG1HLHPs0I5FfiZUwzslH/U
0M23cmm3TBGWvpDodMhxtLvIzeKwj+0WOH3f9WdHtanNNGYpk1oR1Wjw1wwajw4v
1arrxAFJJP8d6w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:53:59 2025 by rpki-client