Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
File: SfA190v2NQvDef8uJTiC0kaO9Yg.mft (raw, json)
Hash identifier: dQWFC61HWe0FVlEPbkOY+E9lykSIMxhNX4HalaCBABY=
Subject key identifier: 4F:8A:F9:F8:06:0B:88:38:31:F2:33:E7:D3:DB:24:66:B1:74:91:1C
Authority key identifier: 49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
Certificate issuer: /CN=49f035f74bf6350bc379ff2e253882d2468ef588
Certificate serial: 019A02C7E89AD9C834F5379DE362AA7E4EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
Manifest number: 03FB
Signing time: Mon 20 Oct 2025 18:00:46 +0000
Manifest this update: Mon 20 Oct 2025 18:00:46 +0000
Manifest next update: Tue 21 Oct 2025 18:00:46 +0000
Files and hashes: 1: SfA190v2NQvDef8uJTiC0kaO9Yg.crl (hash: tnYsGE+TK32NfGaGftiLu7bw7E2FezsdXWuoCYPUk7w=)
2: wbmZO-HC2oZGGdDiSLm7Xy-yCzU.roa (hash: G5A8w6EKnJ7KNviXJvfO4lYZfTcipjXbs1g3Za2z4wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:e8:9a:d9:c8:34:f5:37:9d:e3:62:aa:7e:4e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f035f74bf6350bc379ff2e253882d2468ef588
Validity
Not Before: Oct 20 18:00:46 2025 GMT
Not After : Oct 21 18:00:46 2025 GMT
Subject: CN=4f8af9f8060b883831f233e7d3db2466b174911c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cd:ad:c5:7f:3b:01:2c:30:50:1c:b0:ac:26:
04:15:44:8e:ec:f8:59:a7:4f:7b:12:be:15:e6:d6:
c3:29:ca:96:16:43:4f:a4:28:ec:13:2d:5e:20:46:
c6:29:57:97:f2:33:87:47:b3:c0:9c:83:3f:c6:af:
af:b7:00:df:ec:34:55:93:4f:ef:14:cc:ee:96:5a:
92:e9:a9:31:aa:a4:5c:ef:51:0e:5b:09:18:71:ee:
9c:31:82:08:6c:62:8d:5b:00:69:07:91:2f:b1:03:
a2:c4:d8:38:cf:e1:4f:b3:77:38:ac:09:37:54:2e:
23:94:48:f4:c3:3a:08:b1:d7:c4:0e:05:b0:26:a4:
f4:64:c8:79:95:66:23:ff:f6:e2:b5:12:f6:22:4b:
06:6a:b7:2b:76:c0:19:eb:3d:c3:06:ac:a0:32:a6:
25:a7:74:2d:11:1b:83:21:22:76:0f:33:52:1a:c6:
60:f6:60:1e:a0:51:ea:e6:05:c7:e5:fa:55:3c:4a:
a1:70:43:cd:6f:50:0e:10:66:0d:63:50:1e:c2:9a:
a4:9f:30:50:3a:eb:8d:73:0c:21:df:ad:de:97:d3:
96:c8:da:ed:c6:72:95:e8:14:a3:05:0f:fa:28:32:
cf:7e:37:64:f3:d1:f7:86:dd:db:30:7c:59:3e:d2:
c6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8A:F9:F8:06:0B:88:38:31:F2:33:E7:D3:DB:24:66:B1:74:91:1C
X509v3 Authority Key Identifier:
keyid:49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:29:a1:af:4d:5e:69:46:79:24:3a:bf:23:11:b2:9b:09:56:
b9:30:d7:b5:da:23:dd:62:b6:37:36:95:5a:9d:a1:d2:4d:8d:
7e:7d:6c:6e:9c:78:e8:79:f3:3b:83:5a:c1:fc:c5:dd:c2:40:
37:74:4e:f1:e9:dc:5b:59:1a:14:7b:2e:0d:00:8e:66:ca:0d:
15:c8:90:14:cd:74:c9:32:df:9c:f5:61:42:01:49:cf:1b:7b:
9e:9d:38:68:71:79:23:07:f3:8b:1f:fb:e9:e3:60:e1:74:ee:
47:05:42:45:eb:6b:a8:42:fd:70:e7:54:27:51:d5:37:bc:a7:
22:0f:98:b1:5b:f7:c6:eb:fe:82:62:f3:42:7d:af:46:41:6c:
63:f8:1d:2c:05:d1:e4:d8:9a:6c:44:a4:9a:68:94:24:60:38:
4c:6a:4d:bf:d2:0b:6e:28:ec:60:7a:7c:99:da:c0:97:7f:d9:
df:bc:0f:74:0b:d6:57:2d:5c:ee:9f:e0:56:ad:1e:4c:ad:dd:
ae:f3:cb:49:26:99:66:48:32:00:d0:83:a9:52:50:1b:e5:e3:
39:40:34:ff:27:aa:31:51:74:87:fa:f2:8b:6b:11:c2:17:90:
bc:3c:c2:00:b8:de:f3:d0:e1:d6:c2:69:b1:7a:f5:9c:c9:56:
29:fa:e7:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCx+ia2cg09Ted42Kqfk64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjAzNWY3NGJmNjM1MGJjMzc5ZmYyZTI1Mzg4MmQyNDY4
ZWY1ODgwHhcNMjUxMDIwMTgwMDQ2WhcNMjUxMDIxMTgwMDQ2WjAzMTEwLwYDVQQD
Eyg0ZjhhZjlmODA2MGI4ODM4MzFmMjMzZTdkM2RiMjQ2NmIxNzQ5MTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs2txX87ASwwUBywrCYEFUSO7PhZ
p097Er4V5tbDKcqWFkNPpCjsEy1eIEbGKVeX8jOHR7PAnIM/xq+vtwDf7DRVk0/v
FMzullqS6akxqqRc71EOWwkYce6cMYIIbGKNWwBpB5EvsQOixNg4z+FPs3c4rAk3
VC4jlEj0wzoIsdfEDgWwJqT0ZMh5lWYj//bitRL2IksGarcrdsAZ6z3DBqygMqYl
p3QtERuDISJ2DzNSGsZg9mAeoFHq5gXH5fpVPEqhcEPNb1AOEGYNY1AewpqknzBQ
OuuNcwwh363el9OWyNrtxnKV6BSjBQ/6KDLPfjdk89H3ht3bMHxZPtLGOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+K+fgGC4g4MfIz59PbJGaxdJEcMB8GA1UdIwQY
MBaAFEnwNfdL9jULw3n/LiU4gtJGjvWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMmZkOGUtMmQzOC00YWIxLTg0YjUt
OWVmMTI5ZWFkZTc4LzEvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wMmZkOGUtMmQzOC00YWIxLTg0YjUtOWVmMTI5ZWFkZTc4
LzEvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCmhr01e
aUZ5JDq/IxGymwlWuTDXtdoj3WK2NzaVWp2h0k2Nfn1sbpx46HnzO4NawfzF3cJA
N3RO8encW1kaFHsuDQCOZsoNFciQFM10yTLfnPVhQgFJzxt7np04aHF5Iwfzix/7
6eNg4XTuRwVCRetrqEL9cOdUJ1HVN7ynIg+YsVv3xuv+gmLzQn2vRkFsY/gdLAXR
5NiabESkmmiUJGA4TGpNv9ILbijsYHp8mdrAl3/Z37wPdAvWVy1c7p/gVq0eTK3d
rvPLSSaZZkgyANCDqVJQG+XjOUA0/yeqMVF0h/ryi2sRwheQvDzCALje89Dh1sJp
sXr1nMlWKfrnxQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:41:21 2025 by rpki-client