Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
File: _sTvIAvJ0n6e1_O8a1wFKS2EMro.mft (raw, json)
Hash identifier: 6jFTedYRslNpzWr6k7oMVbnY3kqI5HrJHl2S/DzlcEA=
Subject key identifier: E4:D5:F3:2B:56:F8:16:BC:3C:30:74:73:65:69:6F:94:E5:E3:2E:07
Authority key identifier: FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
Certificate issuer: /CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Certificate serial: 0199FC8F60D7023EC43A6B7043069CB03101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
Manifest number: 0400
Signing time: Sun 19 Oct 2025 13:01:18 +0000
Manifest this update: Sun 19 Oct 2025 13:01:18 +0000
Manifest next update: Mon 20 Oct 2025 13:01:18 +0000
Files and hashes: 1: A-WEqq-qnquQ-k-HUeyR2Ta7Ai0.roa (hash: ulBE+6XQU+CVKwFHEP6pOstPObSTz9LyM8DJtWKzepw=)
2: _sTvIAvJ0n6e1_O8a1wFKS2EMro.crl (hash: UP8ZD5XlK/ds1o2KEzquG0/kuvGtyeBz4PxrlBI1Nfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:60:d7:02:3e:c4:3a:6b:70:43:06:9c:b0:31:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Validity
Not Before: Oct 19 13:01:18 2025 GMT
Not After : Oct 20 13:01:18 2025 GMT
Subject: CN=e4d5f32b56f816bc3c30747365696f94e5e32e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1b:97:a5:24:73:1d:61:a1:7c:dd:55:3e:15:
e9:ba:73:85:96:a1:8e:b6:2f:40:76:9c:5a:42:10:
04:d3:94:fb:4d:ca:3d:17:e3:33:e2:07:a2:7d:51:
66:ae:9d:ac:9d:7c:c5:71:f7:09:7a:c0:33:80:25:
c3:f3:a4:eb:b7:ca:a7:3e:7e:3d:bb:21:47:04:57:
52:b1:63:d5:d7:aa:91:31:5f:32:39:18:8a:27:3e:
35:96:dc:a2:b4:ec:99:3b:49:90:97:d9:08:15:e2:
73:19:75:04:0d:55:9f:a2:58:f2:6d:96:07:f0:fb:
45:88:ed:00:34:e2:42:65:3d:87:69:08:43:6e:07:
54:82:65:e0:ba:e3:0c:43:66:49:fb:c0:53:62:ba:
9b:5a:fa:f3:b3:7f:aa:12:12:01:19:81:6e:ee:95:
c9:ab:bd:69:4f:c8:f8:63:84:10:01:c9:59:dd:1c:
c5:54:79:1d:d8:3f:ee:93:41:eb:26:15:13:38:42:
5d:ef:6a:af:2e:d6:e1:e5:c1:a3:c5:70:bb:6e:a1:
b2:7b:0c:06:b2:3b:6f:05:61:64:38:f7:94:f0:63:
c5:67:63:06:ba:09:05:c7:55:cb:74:37:32:c6:b6:
a6:e1:85:d1:7c:d4:d6:1c:f3:1a:f0:1d:51:79:49:
9e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D5:F3:2B:56:F8:16:BC:3C:30:74:73:65:69:6F:94:E5:E3:2E:07
X509v3 Authority Key Identifier:
keyid:FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f1:b3:7e:39:2a:6c:ee:b5:d1:16:7b:4e:90:98:d2:14:04:
c0:ce:0c:e2:9e:ed:45:22:9e:cd:c6:81:94:16:dd:c9:2a:63:
64:58:3b:6f:27:8e:0c:da:30:20:db:53:98:70:26:7d:64:fd:
98:10:84:4f:c1:36:4e:c0:d2:3b:91:b3:4c:7f:78:b5:ef:a9:
d2:39:04:8c:93:e3:02:bc:53:cf:45:cf:0a:3e:74:68:59:4c:
74:53:ef:77:9c:c2:94:9c:4b:1b:d6:de:a5:57:63:20:bd:a6:
37:dd:fc:1d:a6:bf:4a:18:1e:c0:ee:04:46:bf:f0:92:df:5a:
0f:2c:70:9c:7a:a4:7b:fe:1f:b4:e0:8f:fb:80:5b:8f:84:7c:
f7:ae:67:06:14:f9:9c:df:c0:f5:e4:b4:b2:37:9b:97:10:3e:
30:c9:a5:a1:c9:43:04:2c:6b:e9:90:dd:de:90:64:06:c6:4b:
d8:60:d2:fc:bd:9f:88:40:89:3e:89:4e:ac:d9:cf:f3:db:19:
f6:51:76:65:6c:52:ec:62:0b:f6:20:32:26:b9:a3:c8:61:1c:
7b:cb:50:29:ef:50:43:da:0f:83:1c:f5:84:62:4e:d8:87:e2:
9e:83:56:ff:39:cc:7b:8c:c7:3c:cb:69:f3:16:f4:f7:5d:8d:
88:7f:95:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j2DXAj7EOmtwQwacsDEBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzRlZjIwMGJjOWQyN2U5ZWQ3ZjNiYzZiNWMwNTI5MmQ4
NDMyYmEwHhcNMjUxMDE5MTMwMTE4WhcNMjUxMDIwMTMwMTE4WjAzMTEwLwYDVQQD
EyhlNGQ1ZjMyYjU2ZjgxNmJjM2MzMDc0NzM2NTY5NmY5NGU1ZTMyZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhuXpSRzHWGhfN1VPhXpunOFlqGO
ti9AdpxaQhAE05T7Tco9F+Mz4geifVFmrp2snXzFcfcJesAzgCXD86Trt8qnPn49
uyFHBFdSsWPV16qRMV8yORiKJz41ltyitOyZO0mQl9kIFeJzGXUEDVWfoljybZYH
8PtFiO0ANOJCZT2HaQhDbgdUgmXguuMMQ2ZJ+8BTYrqbWvrzs3+qEhIBGYFu7pXJ
q71pT8j4Y4QQAclZ3RzFVHkd2D/uk0HrJhUTOEJd72qvLtbh5cGjxXC7bqGyewwG
sjtvBWFkOPeU8GPFZ2MGugkFx1XLdDcyxram4YXRfNTWHPMa8B1ReUmeVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTV8ytW+Ba8PDB0c2Vpb5Tl4y4HMB8GA1UdIwQY
MBaAFP7E7yALydJ+ntfzvGtcBSkthDK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMt
NWVjY2VjOGQ5M2I0LzEvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMtNWVjY2VjOGQ5M2I0
LzEvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPGzfjkq
bO610RZ7TpCY0hQEwM4M4p7tRSKezcaBlBbdySpjZFg7byeODNowINtTmHAmfWT9
mBCET8E2TsDSO5GzTH94te+p0jkEjJPjArxTz0XPCj50aFlMdFPvd5zClJxLG9be
pVdjIL2mN938Haa/ShgewO4ERr/wkt9aDyxwnHqke/4ftOCP+4Bbj4R8965nBhT5
nN/A9eS0sjeblxA+MMmloclDBCxr6ZDd3pBkBsZL2GDS/L2fiECJPolOrNnP89sZ
9lF2ZWxS7GIL9iAyJrmjyGEce8tQKe9QQ9oPgxz1hGJO2IfinoNW/znMe4zHPMtp
8xb0912NiH+VkQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:52 2025 by rpki-client