Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
File: sWrUSceuS9Isau5fvcCCMEL_-Pw.mft (raw, json)
Hash identifier: brHwdJvb/Mk5e7uxrwYI0j71GEa+lyYRVqWJwSOGA/0=
Subject key identifier: 09:5D:20:F4:31:EB:FF:F7:54:D0:62:05:45:42:B7:F3:11:16:07:E2
Authority key identifier: B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
Certificate issuer: /CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Certificate serial: 0199FFC7791874BC48C32208FA03129BB506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
Manifest number: 0A63
Signing time: Mon 20 Oct 2025 04:01:26 +0000
Manifest this update: Mon 20 Oct 2025 04:01:26 +0000
Manifest next update: Tue 21 Oct 2025 04:01:26 +0000
Files and hashes: 1: _KRug4UjC_BJD-8BnustHPPdTrM.roa (hash: 9gRSSq2OhYrBQVFH3hvus35c9k0k20JUe3qcgY8xpt0=)
2: sWrUSceuS9Isau5fvcCCMEL_-Pw.crl (hash: GceGdFEapOu+jwDclcDa0vah7SRKxFY0DDkXIevOIlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:79:18:74:bc:48:c3:22:08:fa:03:12:9b:b5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Validity
Not Before: Oct 20 04:01:26 2025 GMT
Not After : Oct 21 04:01:26 2025 GMT
Subject: CN=095d20f431ebfff754d062054542b7f3111607e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:7e:20:f0:0b:6d:0b:7f:b3:50:f5:23:6c:
ef:69:ca:11:47:ed:ce:a1:c7:a9:b4:e4:51:5d:38:
48:26:f6:8f:db:ac:28:db:ef:db:a3:23:94:3b:a6:
b0:30:5c:7c:59:d0:b8:7a:42:fa:0e:7e:e7:23:4b:
8d:4c:32:ab:61:8d:5b:8f:85:dc:4b:a6:26:89:76:
c3:eb:c3:40:b5:2f:08:89:77:2f:9c:4d:c5:ee:0f:
7f:83:6f:57:15:a6:18:eb:d2:b5:3d:15:ea:67:c5:
3c:a0:50:4b:39:5a:ef:ee:9a:e6:50:6a:c3:a3:44:
8d:89:0a:50:e6:4a:d7:82:a0:7d:19:af:c2:9d:4e:
0a:75:da:81:97:02:bf:7a:27:8e:76:64:4f:60:f7:
98:bc:6e:8b:0c:55:f2:04:31:29:9f:f0:95:08:1e:
18:1e:00:9d:d8:08:fe:66:36:88:92:b4:7f:76:e6:
f3:eb:76:5b:20:d7:e0:1e:b8:36:a3:b3:e4:6e:93:
56:47:70:50:ea:1b:37:77:5a:5f:ab:b1:5a:a7:de:
03:fd:74:8e:bc:f4:c5:54:bd:75:7d:eb:81:9b:35:
49:eb:f1:4d:ea:17:83:2a:07:71:88:32:7b:df:5f:
61:73:d9:86:d8:c6:4c:3e:2c:50:b4:b7:e4:78:b7:
cf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5D:20:F4:31:EB:FF:F7:54:D0:62:05:45:42:B7:F3:11:16:07:E2
X509v3 Authority Key Identifier:
keyid:B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fb:af:88:60:5b:3b:99:96:70:dc:42:fb:23:b4:07:59:47:
16:e6:7a:7a:d3:5f:ad:51:44:2d:2a:78:6e:01:3f:48:48:60:
d7:96:91:a3:c1:81:7a:16:28:fa:dc:76:a2:80:a2:ef:32:61:
27:07:96:b0:cc:9e:42:36:0a:fe:2a:3c:8a:fd:39:67:70:cd:
c6:fe:5d:4a:31:4f:78:49:b9:ce:af:42:91:ba:d1:e3:bc:5f:
da:9d:35:01:9a:e9:52:7d:c0:10:f9:3e:7d:6d:b9:a9:ac:c6:
2c:cf:e3:7c:12:5d:79:e4:be:e0:6d:58:9b:d7:60:65:8e:96:
20:ba:7b:e7:c3:9d:32:d3:8c:9d:be:0b:58:0f:14:a4:60:09:
ca:75:18:5a:13:44:4b:4b:30:1e:b5:bc:9b:a4:8b:8b:73:fc:
18:c4:61:37:e7:fb:a2:f3:dd:52:f0:02:2f:be:a0:bd:74:72:
5f:fa:e1:48:26:2e:bc:8c:db:92:ce:07:88:b3:c4:79:d2:17:
f1:64:59:31:37:de:f6:63:71:21:e1:4e:90:4b:3c:5c:7e:78:
67:8d:06:96:32:9d:49:99:da:94:9d:db:b1:13:3d:c7:1d:4b:
f5:17:8e:dc:77:d8:fb:79:a2:50:8c:35:0b:77:8d:5a:5b:8d:
e0:80:a1:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x3kYdLxIwyII+gMSm7UGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNmFkNDQ5YzdhZTRiZDIyYzZhZWU1ZmJkYzA4MjMwNDJm
ZmY4ZmMwHhcNMjUxMDIwMDQwMTI2WhcNMjUxMDIxMDQwMTI2WjAzMTEwLwYDVQQD
EygwOTVkMjBmNDMxZWJmZmY3NTRkMDYyMDU0NTQyYjdmMzExMTYwN2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXd+IPALbQt/s1D1I2zvacoRR+3O
oceptORRXThIJvaP26wo2+/boyOUO6awMFx8WdC4ekL6Dn7nI0uNTDKrYY1bj4Xc
S6YmiXbD68NAtS8IiXcvnE3F7g9/g29XFaYY69K1PRXqZ8U8oFBLOVrv7prmUGrD
o0SNiQpQ5krXgqB9Ga/CnU4KddqBlwK/eieOdmRPYPeYvG6LDFXyBDEpn/CVCB4Y
HgCd2Aj+ZjaIkrR/dubz63ZbINfgHrg2o7PkbpNWR3BQ6hs3d1pfq7Fap94D/XSO
vPTFVL11feuBmzVJ6/FN6heDKgdxiDJ7319hc9mG2MZMPixQtLfkeLfPMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAldIPQx6//3VNBiBUVCt/MRFgfiMB8GA1UdIwQY
MBaAFLFq1EnHrkvSLGruX73AgjBC//j8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1dyVVNjZXVTOUlzYXU1ZnZjQ0NNRUxfLVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wNTEyNmQtNGFiNy00Zjk5LWEwMTIt
MmI3ODgzMTIxNTFkLzEvc1dyVVNjZXVTOUlzYXU1ZnZjQ0NNRUxfLVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8wNTEyNmQtNGFiNy00Zjk5LWEwMTItMmI3ODgzMTIxNTFk
LzEvc1dyVVNjZXVTOUlzYXU1ZnZjQ0NNRUxfLVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavuviGBb
O5mWcNxC+yO0B1lHFuZ6etNfrVFELSp4bgE/SEhg15aRo8GBehYo+tx2ooCi7zJh
JweWsMyeQjYK/io8iv05Z3DNxv5dSjFPeEm5zq9CkbrR47xf2p01AZrpUn3AEPk+
fW25qazGLM/jfBJdeeS+4G1Ym9dgZY6WILp758OdMtOMnb4LWA8UpGAJynUYWhNE
S0swHrW8m6SLi3P8GMRhN+f7ovPdUvACL76gvXRyX/rhSCYuvIzbks4HiLPEedIX
8WRZMTfe9mNxIeFOkEs8XH54Z40GljKdSZnalJ3bsRM9xx1L9ReO3HfY+3miUIw1
C3eNWluN4IChRg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:13 2025 by rpki-client