Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
File: sszaHFSHy5ONV-phzC1i0xBw21E.mft (raw, json)
Hash identifier: aYyJDp5XuTO8Oe3unCN97oPGCV4a0GqJlfZhT8V0xAc=
Subject key identifier: 39:F0:6A:26:32:E5:4F:AA:03:73:C0:82:46:BA:0D:65:DA:6A:60:6D
Authority key identifier: B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51
Certificate issuer: /CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51
Certificate serial: 0199FDD9BEC7CB4822D4804382FC90B6A597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
Manifest number: 0CEA
Signing time: Sun 19 Oct 2025 19:02:09 +0000
Manifest this update: Sun 19 Oct 2025 19:02:09 +0000
Manifest next update: Mon 20 Oct 2025 19:02:09 +0000
Files and hashes: 1: 3_xmC1ho9_8ZqNCvSg_4Ci-eALc.roa (hash: F7LfywH9mxXY2KxRJjRgggVLiwyV5wwnZqXcnTIZ+/Y=)
2: sszaHFSHy5ONV-phzC1i0xBw21E.crl (hash: eWDacFpnQNiHNRH086LJWU3lmfzMMEGEVSdhpxGpjfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:be:c7:cb:48:22:d4:80:43:82:fc:90:b6:a5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51
Validity
Not Before: Oct 19 19:02:09 2025 GMT
Not After : Oct 20 19:02:09 2025 GMT
Subject: CN=39f06a2632e54faa0373c08246ba0d65da6a606d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:96:34:58:be:65:e9:98:05:57:72:6e:a2:
aa:59:60:60:87:44:76:5a:4b:4f:f2:d0:a7:2f:7d:
77:90:9a:1d:34:db:cf:ba:ed:64:15:46:27:a0:6b:
c1:1e:c1:44:4c:dd:cf:d3:44:56:fe:fd:0c:3c:39:
2a:19:8f:7a:6f:06:f4:a7:6b:ee:1e:79:96:ca:db:
d7:28:46:ec:7f:b6:63:80:cf:cc:fa:ac:fb:1c:8a:
8a:b9:2c:33:a4:b0:4a:eb:ce:ea:40:e7:f6:a4:0b:
d9:7e:da:09:4f:bd:50:2c:e6:5a:59:f7:1d:88:8c:
b4:bc:fa:e6:c5:60:8d:69:a7:8d:23:9c:a3:3c:bd:
1c:9f:37:b0:f4:83:a9:e8:51:4d:18:3d:95:06:e1:
ea:48:dd:2f:5c:6b:60:f7:10:ed:b7:da:05:bf:e7:
0f:12:26:84:39:fe:be:ff:6e:ec:f3:19:62:53:f7:
85:d3:7f:38:f8:23:e3:ae:65:57:c2:b6:0f:14:66:
01:2c:a4:52:77:f3:8a:11:ce:c1:6c:6a:42:c2:b5:
a9:05:b6:0e:92:79:52:6f:40:bc:16:c1:a6:e5:ea:
37:ce:92:16:bc:fd:5e:c2:a2:e4:38:70:55:05:2a:
26:f7:22:4e:84:24:98:f5:61:2e:c2:51:be:80:fe:
5c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F0:6A:26:32:E5:4F:AA:03:73:C0:82:46:BA:0D:65:DA:6A:60:6D
X509v3 Authority Key Identifier:
keyid:B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b6:5b:c7:7f:6a:aa:42:49:59:30:eb:48:ab:0d:19:58:05:
66:1c:b1:dc:94:fd:fa:ea:3d:4c:c5:30:7b:33:d5:ad:8f:36:
a5:17:28:76:cb:43:2e:c9:6a:6c:cb:88:90:44:17:7b:7f:ad:
0f:81:0f:b2:27:82:1b:a5:f0:21:20:fd:cf:6d:34:9c:72:a9:
34:4e:76:70:58:81:dc:ca:68:f0:d6:a8:4e:77:b4:19:e9:88:
ce:92:07:3f:0b:95:96:c6:f1:8b:fa:45:5d:2a:f7:7d:81:5d:
fd:6a:ae:26:be:e5:22:5a:e9:d0:8c:bd:5e:21:10:ce:43:18:
56:9b:35:80:08:b2:40:4b:30:0e:a5:25:d6:8f:24:61:70:46:
70:d3:92:6c:90:0c:b8:be:d3:2e:5e:fe:e0:c9:25:98:4c:8d:
bc:84:98:36:79:4f:90:85:c1:9a:0c:42:94:f3:ae:0e:44:d5:
24:5b:fa:0a:a7:52:22:f5:ac:74:ea:b2:8c:3b:a1:4b:5b:28:
0a:85:d1:1f:c7:ad:ea:40:87:42:7a:84:1f:e4:b9:3c:18:0b:
57:d6:17:31:78:74:02:f4:e0:02:da:f7:bb:13:d5:fa:57:93:
fa:89:b6:46:1b:99:3b:19:42:83:b5:6f:e3:09:ca:69:52:90:
69:57:cc:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92b7Hy0gi1IBDgvyQtqWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyY2NkYTFjNTQ4N2NiOTM4ZDU3ZWE2MWNjMmQ2MmQzMTA3
MGRiNTEwHhcNMjUxMDE5MTkwMjA5WhcNMjUxMDIwMTkwMjA5WjAzMTEwLwYDVQQD
EygzOWYwNmEyNjMyZTU0ZmFhMDM3M2MwODI0NmJhMGQ2NWRhNmE2MDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoviWNFi+ZemYBVdybqKqWWBgh0R2
WktP8tCnL313kJodNNvPuu1kFUYnoGvBHsFETN3P00RW/v0MPDkqGY96bwb0p2vu
HnmWytvXKEbsf7ZjgM/M+qz7HIqKuSwzpLBK687qQOf2pAvZftoJT71QLOZaWfcd
iIy0vPrmxWCNaaeNI5yjPL0cnzew9IOp6FFNGD2VBuHqSN0vXGtg9xDtt9oFv+cP
EiaEOf6+/27s8xliU/eF0384+CPjrmVXwrYPFGYBLKRSd/OKEc7BbGpCwrWpBbYO
knlSb0C8FsGm5eo3zpIWvP1ewqLkOHBVBSom9yJOhCSY9WEuwlG+gP5cRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnwaiYy5U+qA3PAgka6DWXaamBtMB8GA1UdIwQY
MBaAFLLM2hxUh8uTjVfqYcwtYtMQcNtRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3N6YUhGU0h5NU9OVi1waHpDMWkweEJ3MjFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lNmI3N2YtNDBlNi00YzkzLWFjMzIt
M2RiOTYxNzAzZWE5LzEvc3N6YUhGU0h5NU9OVi1waHpDMWkweEJ3MjFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9lNmI3N2YtNDBlNi00YzkzLWFjMzItM2RiOTYxNzAzZWE5
LzEvc3N6YUhGU0h5NU9OVi1waHpDMWkweEJ3MjFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabZbx39q
qkJJWTDrSKsNGVgFZhyx3JT9+uo9TMUwezPVrY82pRcodstDLslqbMuIkEQXe3+t
D4EPsieCG6XwISD9z200nHKpNE52cFiB3Mpo8NaoTne0GemIzpIHPwuVlsbxi/pF
XSr3fYFd/WquJr7lIlrp0Iy9XiEQzkMYVps1gAiyQEswDqUl1o8kYXBGcNOSbJAM
uL7TLl7+4MklmEyNvISYNnlPkIXBmgxClPOuDkTVJFv6CqdSIvWsdOqyjDuhS1so
CoXRH8et6kCHQnqEH+S5PBgLV9YXMXh0AvTgAtr3uxPV+leT+om2RhuZOxlCg7Vv
4wnKaVKQaVfM+A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:26 2025 by rpki-client