
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
File: sP8nOo_iEgkLoct4xjMfgOeMMCU.mft (raw, json)
Hash identifier: EitPURehvcyFX3zI5u1c+2czwD7jlvLcA7JSxsdbQTg=
Subject key identifier: 18:90:01:73:73:59:F3:D7:4D:33:EF:B8:F3:56:29:EC:B9:73:10:F1
Authority key identifier: B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
Certificate issuer: /CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Certificate serial: 0199FDA1C3FA1C1AF04C39B8F89C53922FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
Manifest number: B4
Signing time: Sun 19 Oct 2025 18:01:01 +0000
Manifest this update: Sun 19 Oct 2025 18:01:01 +0000
Manifest next update: Mon 20 Oct 2025 18:01:01 +0000
Files and hashes: 1: p4n6DMVXRfxSNvujgZMUtP18wqQ.roa (hash: E3oRG9G+UtQqAk8G6rS3MWGj3sQbFqJ/BYIdf5UtbNU=)
2: sP8nOo_iEgkLoct4xjMfgOeMMCU.crl (hash: VZVs+eP3TdXYjVcqz8xKHua23JssqGJwXxhad/sRitA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:c3:fa:1c:1a:f0:4c:39:b8:f8:9c:53:92:2f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Validity
Not Before: Oct 19 18:01:01 2025 GMT
Not After : Oct 20 18:01:01 2025 GMT
Subject: CN=189001737359f3d74d33efb8f35629ecb97310f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:36:c0:5b:e9:1d:e6:59:5e:b1:48:a7:a9:d3:
39:d0:cd:47:a0:9d:75:55:08:16:4d:d9:6a:a1:84:
26:67:52:19:c1:6a:60:1b:d3:ca:72:e4:45:77:af:
f9:13:e6:9e:16:f3:93:3e:ba:d7:c1:3e:11:fe:90:
b9:69:28:c4:fd:c5:21:72:8a:b7:b5:4c:1d:83:40:
68:ee:ae:84:58:e4:29:b7:77:0a:a0:cb:8d:3c:e2:
f7:e6:e8:ad:fa:5b:60:b7:5a:80:81:a0:47:62:3d:
26:3c:31:53:5c:34:b7:7f:77:74:11:e0:b6:93:6a:
99:3c:e7:c2:76:b7:e2:59:fe:9a:aa:40:06:51:60:
36:21:a7:06:f5:66:c1:78:38:0e:80:57:83:de:11:
cb:7b:60:62:bb:23:cb:73:e2:79:09:00:fa:c9:18:
08:7c:bc:11:48:cd:2e:53:21:f9:f6:1a:07:02:90:
14:9d:ab:72:98:4f:02:14:87:5c:ff:1e:11:07:69:
93:12:0f:ef:8f:b5:6c:7a:97:c5:58:cb:70:75:2b:
b3:6f:e1:18:e2:e0:74:f9:41:01:e5:3c:93:c7:5c:
7b:f4:e8:ce:09:80:4d:42:8b:01:5a:40:92:09:64:
d1:47:6d:46:91:55:8e:d2:60:90:af:b0:6f:27:25:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:90:01:73:73:59:F3:D7:4D:33:EF:B8:F3:56:29:EC:B9:73:10:F1
X509v3 Authority Key Identifier:
keyid:B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ed:82:7b:38:67:3c:37:4b:e3:f5:66:ee:3d:39:fa:3f:ab:
80:85:89:e0:97:6f:2d:ff:f6:b5:46:2c:f4:15:17:d2:a4:5c:
cd:23:d7:bd:e8:4b:f9:d8:30:f9:0f:04:20:c2:e5:33:c9:fc:
97:cd:c9:20:58:72:a9:a4:8b:c0:46:73:55:00:75:64:11:f2:
68:74:a6:89:bd:14:1e:6f:fa:5f:bb:7a:21:7d:57:62:4d:e6:
67:ff:08:21:3c:6d:53:b4:2e:89:dd:e9:37:0c:79:07:f9:5c:
1e:4a:54:04:e2:3d:69:8e:85:97:11:28:6d:3d:80:c1:52:b9:
58:76:13:61:6f:57:1a:3f:da:db:7d:cd:f0:4b:7f:dd:c1:1e:
92:2d:7f:18:c4:48:f3:d8:e2:27:5c:58:31:d4:ec:c3:4a:44:
74:22:92:b1:d5:ce:16:b7:cf:41:67:01:2b:18:bd:6c:93:3c:
6e:e5:1f:1a:3b:1e:5b:32:08:16:53:01:5b:a3:c7:15:de:39:
a0:07:1e:75:b9:a6:f5:95:4f:cc:23:a8:8d:e6:a3:1d:87:c8:
58:12:8a:06:c5:b3:7c:0e:f7:ed:a6:f9:5b:d9:d2:a0:d9:95:
6d:89:bc:6a:58:37:90:9a:87:e4:2f:5a:4e:96:bc:c2:6a:33:
e5:1f:1a:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9ocP6HBrwTDm4+JxTki/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZmYyNzNhOGZlMjEyMDkwYmExY2I3OGM2MzMxZjgwZTc4
YzMwMjUwHhcNMjUxMDE5MTgwMTAxWhcNMjUxMDIwMTgwMTAxWjAzMTEwLwYDVQQD
EygxODkwMDE3MzczNTlmM2Q3NGQzM2VmYjhmMzU2MjllY2I5NzMxMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTbAW+kd5llesUinqdM50M1HoJ11
VQgWTdlqoYQmZ1IZwWpgG9PKcuRFd6/5E+aeFvOTPrrXwT4R/pC5aSjE/cUhcoq3
tUwdg0Bo7q6EWOQpt3cKoMuNPOL35uit+ltgt1qAgaBHYj0mPDFTXDS3f3d0EeC2
k2qZPOfCdrfiWf6aqkAGUWA2IacG9WbBeDgOgFeD3hHLe2BiuyPLc+J5CQD6yRgI
fLwRSM0uUyH59hoHApAUnatymE8CFIdc/x4RB2mTEg/vj7VsepfFWMtwdSuzb+EY
4uB0+UEB5TyTx1x79OjOCYBNQosBWkCSCWTRR21GkVWO0mCQr7BvJyUeiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiQAXNzWfPXTTPvuPNWKey5cxDxMB8GA1UdIwQY
MBaAFLD/JzqP4hIJC6HLeMYzH4DnjDAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83ZjEyNTUtZDNhZC00Y2IyLWFiZmQt
ODhkM2NhOTAwNmQ1LzEvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS83ZjEyNTUtZDNhZC00Y2IyLWFiZmQtODhkM2NhOTAwNmQ1
LzEvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+2Cezhn
PDdL4/Vm7j05+j+rgIWJ4JdvLf/2tUYs9BUX0qRczSPXvehL+dgw+Q8EIMLlM8n8
l83JIFhyqaSLwEZzVQB1ZBHyaHSmib0UHm/6X7t6IX1XYk3mZ/8IITxtU7Quid3p
Nwx5B/lcHkpUBOI9aY6FlxEobT2AwVK5WHYTYW9XGj/a233N8Et/3cEeki1/GMRI
89jiJ1xYMdTsw0pEdCKSsdXOFrfPQWcBKxi9bJM8buUfGjseWzIIFlMBW6PHFd45
oAcedbmm9ZVPzCOojeajHYfIWBKKBsWzfA737ab5W9nSoNmVbYm8alg3kJqH5C9a
Tpa8wmoz5R8a1g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:33 2025 by rpki-client