Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
File: SdA41NOnW7-ev-owZGh7Xjs0b-M.mft (raw, json)
Hash identifier: eTRtk68iFh17o4kHUa1K0q1snW7CPe7OO7qN+17kOzc=
Subject key identifier: A6:89:D4:77:15:50:53:22:C0:6A:16:FE:10:00:2A:EB:4B:28:66:D1
Authority key identifier: 49:D0:38:D4:D3:A7:5B:BF:9E:BF:EA:30:64:68:7B:5E:3B:34:6F:E3
Certificate issuer: /CN=49d038d4d3a75bbf9ebfea3064687b5e3b346fe3
Certificate serial: 0199FDD8E74E8136B26D23934CE667AA3AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
Manifest number: 0D04
Signing time: Sun 19 Oct 2025 19:01:14 +0000
Manifest this update: Sun 19 Oct 2025 19:01:14 +0000
Manifest next update: Mon 20 Oct 2025 19:01:14 +0000
Files and hashes: 1: SdA41NOnW7-ev-owZGh7Xjs0b-M.crl (hash: XBOhyE7ypT9Yv1NG6YoX4ggL7WAoHIJ77atFt/E9XhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:e7:4e:81:36:b2:6d:23:93:4c:e6:67:aa:3a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d038d4d3a75bbf9ebfea3064687b5e3b346fe3
Validity
Not Before: Oct 19 19:01:14 2025 GMT
Not After : Oct 20 19:01:14 2025 GMT
Subject: CN=a689d47715505322c06a16fe10002aeb4b2866d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:ff:b9:c4:59:25:85:aa:34:93:25:ab:4c:
16:ab:16:b9:3e:04:76:1a:e9:7c:c4:07:31:b7:d6:
40:ec:63:85:6f:7c:83:4d:78:c6:f5:7b:f0:04:59:
9e:58:50:61:21:4a:b8:c6:3e:ad:03:53:74:8e:77:
bb:bb:d6:8c:68:46:3c:0b:f5:c0:f3:82:c1:ab:6b:
da:99:61:1c:86:0e:f4:fa:a4:41:25:46:35:d7:c2:
16:db:40:62:8d:07:c5:1a:eb:0b:bb:83:ee:12:e5:
b0:ac:55:3d:8c:97:46:49:2b:84:68:db:e3:e5:5e:
4e:2b:47:d3:ac:d5:45:f1:12:45:11:e5:4e:66:86:
55:42:61:f2:a2:1f:e8:e6:90:f5:1a:f4:ce:58:95:
3d:c3:97:09:4f:0e:12:ec:1f:ae:70:84:45:5b:38:
52:c5:84:59:3e:eb:80:de:fa:3d:cc:65:02:15:6b:
d1:3f:4e:85:d0:c8:ef:48:a2:81:c1:6b:c1:35:e4:
8c:73:b5:06:4e:2d:00:c3:18:c1:8f:ce:27:b2:ac:
a7:5b:a8:bc:9f:a5:08:16:c1:61:93:a9:d1:16:90:
27:25:73:ea:db:67:3e:cf:19:e3:dd:e8:4a:6c:b7:
77:79:38:7a:e4:e4:2f:87:30:bd:7e:49:08:00:72:
98:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:89:D4:77:15:50:53:22:C0:6A:16:FE:10:00:2A:EB:4B:28:66:D1
X509v3 Authority Key Identifier:
keyid:49:D0:38:D4:D3:A7:5B:BF:9E:BF:EA:30:64:68:7B:5E:3B:34:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:06:b1:f9:25:8f:46:b1:4d:89:b3:8b:91:9f:c2:c1:50:8c:
34:e8:52:aa:14:f5:46:72:46:c0:7b:72:6d:4d:e1:e0:72:3f:
93:f2:7d:7b:49:20:41:4d:12:ac:d6:a5:ed:82:7d:ee:92:b0:
77:f2:d1:69:03:e2:f9:63:48:aa:22:50:9e:c4:7d:b6:f6:cb:
ea:63:84:e7:37:4d:a3:68:0e:f4:bb:4d:ce:20:c7:4c:55:e0:
93:3c:64:09:59:cb:26:8c:73:93:86:99:b8:d1:0c:28:b2:42:
b3:e0:b6:29:d7:54:06:10:2a:1f:12:c2:20:df:20:a2:de:63:
dc:96:51:20:47:f0:8c:c2:e2:de:eb:59:d5:ba:32:2e:17:4b:
69:fa:d4:63:41:71:d3:cc:5b:6e:a6:0f:41:d1:ef:e3:e4:a9:
e8:d9:ce:24:0c:7d:a0:0b:12:7e:d5:b9:d1:67:2d:4f:0c:bb:
f6:bd:43:3f:e9:19:b6:9b:bc:b6:3a:e2:1b:a8:69:b4:b0:2d:
20:28:d2:bd:04:65:f0:ad:e5:f0:fc:76:93:4f:1f:b2:bb:ef:
3a:d6:d9:fd:a7:13:75:f4:a8:96:fb:26:07:28:62:de:0f:04:
a1:b9:6f:7b:74:0a:e3:4a:52:48:fd:9d:04:0c:da:9b:80:4c:
63:97:7e:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92OdOgTaybSOTTOZnqjr8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZDAzOGQ0ZDNhNzViYmY5ZWJmZWEzMDY0Njg3YjVlM2Iz
NDZmZTMwHhcNMjUxMDE5MTkwMTE0WhcNMjUxMDIwMTkwMTE0WjAzMTEwLwYDVQQD
EyhhNjg5ZDQ3NzE1NTA1MzIyYzA2YTE2ZmUxMDAwMmFlYjRiMjg2NmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWr/ucRZJYWqNJMlq0wWqxa5PgR2
Gul8xAcxt9ZA7GOFb3yDTXjG9XvwBFmeWFBhIUq4xj6tA1N0jne7u9aMaEY8C/XA
84LBq2vamWEchg70+qRBJUY118IW20BijQfFGusLu4PuEuWwrFU9jJdGSSuEaNvj
5V5OK0fTrNVF8RJFEeVOZoZVQmHyoh/o5pD1GvTOWJU9w5cJTw4S7B+ucIRFWzhS
xYRZPuuA3vo9zGUCFWvRP06F0MjvSKKBwWvBNeSMc7UGTi0AwxjBj84nsqynW6i8
n6UIFsFhk6nRFpAnJXPq22c+zxnj3ehKbLd3eTh65OQvhzC9fkkIAHKYCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaJ1HcVUFMiwGoW/hAAKutLKGbRMB8GA1UdIwQY
MBaAFEnQONTTp1u/nr/qMGRoe147NG/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2RBNDFOT25XNy1ldi1vd1pHaDdYanMwYi1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC83MzU3NTYtODg1Ny00MjRkLTk1MjQt
MjBmNTMxMTIyYjU3LzEvU2RBNDFOT25XNy1ldi1vd1pHaDdYanMwYi1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC83MzU3NTYtODg1Ny00MjRkLTk1MjQtMjBmNTMxMTIyYjU3
LzEvU2RBNDFOT25XNy1ldi1vd1pHaDdYanMwYi1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwax+SWP
RrFNibOLkZ/CwVCMNOhSqhT1RnJGwHtybU3h4HI/k/J9e0kgQU0SrNal7YJ97pKw
d/LRaQPi+WNIqiJQnsR9tvbL6mOE5zdNo2gO9LtNziDHTFXgkzxkCVnLJoxzk4aZ
uNEMKLJCs+C2KddUBhAqHxLCIN8got5j3JZRIEfwjMLi3utZ1boyLhdLafrUY0Fx
08xbbqYPQdHv4+Sp6NnOJAx9oAsSftW50WctTwy79r1DP+kZtpu8tjriG6hptLAt
ICjSvQRl8K3l8Px2k08fsrvvOtbZ/acTdfSolvsmByhi3g8Eoblve3QK40pSSP2d
BAzam4BMY5d+zA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:19 2025 by rpki-client