Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
File: sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft (raw, json)
Hash identifier: /X6VGMsUSw76v3LB0+MzNiwzhKmbB5UTs72srlEcs44=
Subject key identifier: 8D:55:84:D4:A0:75:13:7D:F6:58:6A:65:C7:CD:74:AE:DC:8E:FB:C2
Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
Certificate issuer: /CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Certificate serial: 0199FAD820A9B5F20A42DE11E592455EA2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
Manifest number: 1072
Signing time: Sun 19 Oct 2025 05:01:32 +0000
Manifest this update: Sun 19 Oct 2025 05:01:32 +0000
Manifest next update: Mon 20 Oct 2025 05:01:32 +0000
Files and hashes: 1: QsDa0zfP3CIFPzkr72ai7j2Kl6U.roa (hash: fn5rmy47Ww+aAsGYa2AAlXZt65JpDFqVguDudWu94lk=)
2: sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl (hash: EHs898UY037WKqnf8VBA7TsiO/iqe88BPCVCPQspQ/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:20:a9:b5:f2:0a:42:de:11:e5:92:45:5e:a2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Validity
Not Before: Oct 19 05:01:32 2025 GMT
Not After : Oct 20 05:01:32 2025 GMT
Subject: CN=8d5584d4a075137df6586a65c7cd74aedc8efbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:7e:ef:98:12:13:4b:a5:61:92:44:e3:42:
ba:aa:f9:6f:cd:2b:38:61:32:83:eb:b6:58:6e:9b:
01:c2:c4:40:4a:f0:ab:18:4e:00:1a:82:75:1c:aa:
f3:e3:f4:5f:99:52:aa:a8:92:1b:4f:74:df:36:10:
2d:69:29:84:fe:ef:f9:7e:04:aa:10:81:3c:47:d2:
02:13:cd:26:34:13:fe:21:f5:2d:f0:f4:54:be:6c:
c0:e0:b3:d3:26:e1:5e:17:d2:bf:55:c5:df:e4:e8:
05:23:e1:7d:3c:75:87:2d:85:e9:9f:d8:e9:d9:06:
f8:cf:13:35:24:ec:31:d7:a2:a5:56:7b:23:66:36:
f6:ac:be:77:4b:b8:fe:0c:83:ec:54:ed:c3:27:3c:
7b:3b:5b:26:17:4b:52:83:37:35:33:f1:27:9a:ff:
b7:a3:a7:45:93:b5:02:18:d2:1c:54:2b:57:a0:a6:
a9:eb:0e:31:3d:3e:cc:4d:fb:8c:7d:da:0f:a2:6f:
1b:45:a0:c5:e9:7d:e4:21:9f:35:12:4c:cc:a4:69:
68:ff:8e:15:fc:c7:05:36:7d:c0:f6:85:e8:c2:5e:
c3:52:8b:94:ed:9c:06:43:74:f8:35:17:bf:5c:76:
2d:6d:cf:d4:6c:4a:58:cf:cb:3e:19:c4:7d:b8:79:
3d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:55:84:D4:A0:75:13:7D:F6:58:6A:65:C7:CD:74:AE:DC:8E:FB:C2
X509v3 Authority Key Identifier:
keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:bc:ad:8d:8c:2c:85:0f:25:8c:96:04:5d:c2:74:a7:66:34:
88:10:6c:55:88:30:dc:2e:a2:52:23:f3:94:d4:0a:da:09:93:
65:50:f3:89:ed:36:0c:65:64:52:23:80:0f:7f:e2:dd:c8:61:
c7:85:6a:f6:1e:7b:2b:64:3e:78:b1:1a:bf:5d:d8:3c:02:f1:
de:66:7a:f9:08:4a:8a:c6:da:1d:d4:ff:7c:4c:e4:2d:f7:5b:
e5:dc:bf:aa:40:10:c1:a9:f9:5d:2c:85:22:c9:8f:08:5e:39:
1d:b4:29:de:aa:00:c4:d7:99:57:ec:98:be:1c:07:67:90:98:
e7:5d:99:91:82:4b:9a:ea:46:62:01:3b:d1:33:92:72:b8:66:
8c:e4:87:2c:42:28:b7:b3:09:58:3c:fc:40:dc:49:00:1c:71:
1d:0a:db:e5:e4:51:b6:5d:af:63:a0:2e:91:97:ba:5e:73:c3:
fe:b1:d7:ef:d7:38:40:91:eb:af:2b:13:0e:87:84:1f:15:f3:
ac:96:10:ed:cc:03:5b:92:0b:b9:3e:5b:35:3a:70:dd:e4:a9:
6f:5b:42:13:05:eb:95:d3:61:49:e7:72:e9:5a:4e:57:32:dc:
cf:a4:a0:2e:b2:65:a6:a4:38:b9:c1:2c:11:86:24:6e:e1:ce:
1a:34:ab:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62CCptfIKQt4R5ZJFXqKvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZjViYmFhMDUxOTgwYmQ0ODExYjY2NTVhMGY5NWRiMzYx
Mjc4MDkwHhcNMjUxMDE5MDUwMTMyWhcNMjUxMDIwMDUwMTMyWjAzMTEwLwYDVQQD
Eyg4ZDU1ODRkNGEwNzUxMzdkZjY1ODZhNjVjN2NkNzRhZWRjOGVmYmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoel+75gSE0ulYZJE40K6qvlvzSs4
YTKD67ZYbpsBwsRASvCrGE4AGoJ1HKrz4/RfmVKqqJIbT3TfNhAtaSmE/u/5fgSq
EIE8R9ICE80mNBP+IfUt8PRUvmzA4LPTJuFeF9K/VcXf5OgFI+F9PHWHLYXpn9jp
2Qb4zxM1JOwx16KlVnsjZjb2rL53S7j+DIPsVO3DJzx7O1smF0tSgzc1M/Enmv+3
o6dFk7UCGNIcVCtXoKap6w4xPT7MTfuMfdoPom8bRaDF6X3kIZ81EkzMpGlo/44V
/McFNn3A9oXowl7DUouU7ZwGQ3T4NRe/XHYtbc/UbEpYz8s+GcR9uHk9AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1VhNSgdRN99lhqZcfNdK7cjvvCMB8GA1UdIwQY
MBaAFLH1u6oFGYC9SBG2ZVoPlds2EngJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQt
MDUwOGEyYmI0N2FjLzEvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQtMDUwOGEyYmI0N2Fj
LzEvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbytjYws
hQ8ljJYEXcJ0p2Y0iBBsVYgw3C6iUiPzlNQK2gmTZVDzie02DGVkUiOAD3/i3chh
x4Vq9h57K2Q+eLEav13YPALx3mZ6+QhKisbaHdT/fEzkLfdb5dy/qkAQwan5XSyF
IsmPCF45HbQp3qoAxNeZV+yYvhwHZ5CY512ZkYJLmupGYgE70TOScrhmjOSHLEIo
t7MJWDz8QNxJABxxHQrb5eRRtl2vY6AukZe6XnPD/rHX79c4QJHrrysTDoeEHxXz
rJYQ7cwDW5ILuT5bNTpw3eSpb1tCEwXrldNhSedy6VpOVzLcz6SgLrJlpqQ4ucEs
EYYkbuHOGjSrKA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:56 2025 by rpki-client