Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier: Bq9Z4OVWylWtq+cldOddFJJLk6Fg2vbqUkN88HD+OOs=
Subject key identifier: 2D:94:12:A1:44:6C:15:9B:03:B6:17:B2:C3:62:81:B3:36:74:9F:C8
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial: 0199FCFD7C22DE136F2BD94CDDEB2C06C4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number: 0543
Signing time: Sun 19 Oct 2025 15:01:34 +0000
Manifest this update: Sun 19 Oct 2025 15:01:34 +0000
Manifest next update: Mon 20 Oct 2025 15:01:34 +0000
Files and hashes: 1: mMP3R6Y_E5t6fees10l8AYe8F8o.roa (hash: GVxHnVRZ4k3nHcgJKtEX5VgjvPdVGaTcdXcLRvNp8IM=)
2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: fnGP9kNa3Hyhg6HKcoHqg0HxutqGY2cogOfD5B1MHPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:7c:22:de:13:6f:2b:d9:4c:dd:eb:2c:06:c4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
Validity
Not Before: Oct 19 15:01:34 2025 GMT
Not After : Oct 20 15:01:34 2025 GMT
Subject: CN=2d9412a1446c159b03b617b2c36281b336749fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:f6:e7:55:79:3c:34:ce:da:8a:73:df:ad:
c3:81:15:69:52:46:59:4d:58:20:d5:4d:66:6e:a2:
9d:aa:f4:0c:a5:32:03:05:88:24:19:b2:de:3c:21:
4e:65:a3:9c:d4:f9:71:91:7f:b9:ae:5d:d5:cf:ce:
ef:87:7f:b7:f9:ec:f6:cb:28:93:cd:de:ee:4a:a3:
25:6c:e5:b0:70:e2:6a:6c:73:2e:08:2a:96:2d:77:
71:3c:47:4d:21:39:ba:bb:b1:e6:f7:95:3c:d6:62:
70:76:ed:18:62:83:2c:ac:56:ce:25:94:89:7b:50:
db:c8:7b:a3:46:48:64:0a:96:85:6d:b4:74:ff:f4:
d9:bb:b0:52:09:a7:f0:19:dd:5d:b1:bd:78:99:73:
3d:da:43:6c:3f:75:bc:48:47:e7:42:2c:2a:7f:b8:
68:65:14:b6:2b:e8:f3:65:2d:ce:5c:7f:04:2b:f0:
83:51:e3:00:ec:66:5c:7e:80:da:34:bb:6b:23:be:
0f:82:c0:7b:5e:1b:c0:23:d8:24:e0:ad:ec:ac:44:
17:29:4b:57:7e:89:fc:ae:6c:4f:4c:1c:f9:66:08:
53:27:9d:09:a7:5b:ea:0e:23:fa:60:1c:3d:b9:7f:
34:4d:bc:b2:78:81:7c:f6:67:d1:72:9b:da:3b:3d:
dd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:94:12:A1:44:6C:15:9B:03:B6:17:B2:C3:62:81:B3:36:74:9F:C8
X509v3 Authority Key Identifier:
keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:03:9e:e1:9c:c5:3f:db:6e:1d:f0:8b:26:ef:ef:a1:73:f0:
e8:0f:0e:33:f4:e5:c8:94:4b:da:7c:83:54:f8:89:53:07:2c:
61:c0:e8:08:51:06:90:e0:16:69:84:7d:a1:2e:29:15:8b:8b:
c3:0c:15:c6:82:8f:70:1b:6d:20:f3:96:e7:8d:90:47:99:5b:
6c:47:d2:90:0e:80:2a:88:23:54:90:e1:fd:ab:62:25:52:fd:
4f:99:aa:6d:30:7f:5d:57:ca:73:bb:dc:5f:0a:2c:39:51:ec:
20:7e:75:e4:f1:e4:c0:39:c5:03:b8:4c:ea:6d:5f:29:56:98:
5b:bf:10:1f:77:3a:05:5a:76:50:13:17:b2:16:e0:13:18:b6:
a0:85:ab:74:9c:9b:22:3d:d7:59:fa:21:79:fa:19:8b:0c:61:
1e:28:7d:0b:35:02:d2:43:57:c6:11:34:7e:04:42:fa:33:d1:
76:6f:70:b1:5b:d4:2d:21:61:aa:91:dc:d4:5d:6e:3d:f5:7e:
9d:fe:c9:1f:e6:4d:ac:e0:db:b5:9b:9b:44:00:13:dd:00:28:
2e:63:c1:ff:af:87:0c:f0:cd:7f:5e:b5:41:34:02:ff:3f:bb:
23:2e:1b:1b:a4:4c:ce:a6:5e:9a:7c:fb:83:32:34:ab:8a:a7:
f8:74:56:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/Xwi3hNvK9lM3essBsS5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMzlhYjgyOThmYTM2M2FlODM3ZTUzMDAyODk2OWNjNWNi
ZjEwNGUwHhcNMjUxMDE5MTUwMTM0WhcNMjUxMDIwMTUwMTM0WjAzMTEwLwYDVQQD
EygyZDk0MTJhMTQ0NmMxNTliMDNiNjE3YjJjMzYyODFiMzM2NzQ5ZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucL251V5PDTO2opz363DgRVpUkZZ
TVgg1U1mbqKdqvQMpTIDBYgkGbLePCFOZaOc1PlxkX+5rl3Vz87vh3+3+ez2yyiT
zd7uSqMlbOWwcOJqbHMuCCqWLXdxPEdNITm6u7Hm95U81mJwdu0YYoMsrFbOJZSJ
e1DbyHujRkhkCpaFbbR0//TZu7BSCafwGd1dsb14mXM92kNsP3W8SEfnQiwqf7ho
ZRS2K+jzZS3OXH8EK/CDUeMA7GZcfoDaNLtrI74PgsB7XhvAI9gk4K3srEQXKUtX
fon8rmxPTBz5ZghTJ50Jp1vqDiP6YBw9uX80TbyyeIF89mfRcpvaOz3d3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2UEqFEbBWbA7YXssNigbM2dJ/IMB8GA1UdIwQY
MBaAFLA5q4KY+jY66DflMAKJacxcvxBOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZmQ3MmYtZWY3Ny00NTM3LTg5ZTkt
OWZiZDk2M2E1MTNjLzEvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS81ZmQ3MmYtZWY3Ny00NTM3LTg5ZTktOWZiZDk2M2E1MTNj
LzEvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQOe4ZzF
P9tuHfCLJu/voXPw6A8OM/TlyJRL2nyDVPiJUwcsYcDoCFEGkOAWaYR9oS4pFYuL
wwwVxoKPcBttIPOW542QR5lbbEfSkA6AKogjVJDh/atiJVL9T5mqbTB/XVfKc7vc
XwosOVHsIH515PHkwDnFA7hM6m1fKVaYW78QH3c6BVp2UBMXshbgExi2oIWrdJyb
Ij3XWfohefoZiwxhHih9CzUC0kNXxhE0fgRC+jPRdm9wsVvULSFhqpHc1F1uPfV+
nf7JH+ZNrODbtZubRAAT3QAoLmPB/6+HDPDNf161QTQC/z+7Iy4bG6RMzqZemnz7
gzI0q4qn+HRWMQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:23 2025 by rpki-client