Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
File: syu38vqMQUxnGIvau_t2IVaTuoc.mft (raw, json)
Hash identifier: T3KOqV8+uagudEMdM+5a+ucLKInDeXRW9E+hJiaUXs0=
Subject key identifier: C0:E3:D7:57:D2:C3:E1:54:A5:4E:60:D8:6D:26:D4:C4:DD:6F:11:76
Authority key identifier: B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87
Certificate issuer: /CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
Certificate serial: 0199FB7CC648B7A9C202405E582E7A49D392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
Manifest number: 04DD
Signing time: Sun 19 Oct 2025 08:01:22 +0000
Manifest this update: Sun 19 Oct 2025 08:01:22 +0000
Manifest next update: Mon 20 Oct 2025 08:01:22 +0000
Files and hashes: 1: dlFU-VFKr3DcjZAchl6XqyqKK5c.roa (hash: neVLf32lP2kuQND5P5wXOeNSgGn0qOcZGwTsUoY1fZs=)
2: syu38vqMQUxnGIvau_t2IVaTuoc.crl (hash: /bG5F5kHL21g2Nv/BNNW3PEI9zKz5E996ZbaHWSFKbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c6:48:b7:a9:c2:02:40:5e:58:2e:7a:49:d3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
Validity
Not Before: Oct 19 08:01:22 2025 GMT
Not After : Oct 20 08:01:22 2025 GMT
Subject: CN=c0e3d757d2c3e154a54e60d86d26d4c4dd6f1176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c6:81:3e:f0:96:0b:71:e6:b3:92:f4:20:dd:
ae:78:7c:69:c9:2e:7c:ea:84:21:07:64:c4:0e:40:
f0:32:2a:67:67:f3:2e:dc:f1:2e:d6:3b:74:70:b9:
f4:77:42:ec:6c:ae:c9:cc:41:f5:87:c1:05:bb:51:
33:fd:91:2f:62:c6:52:86:59:b7:ce:1b:68:06:18:
e5:bf:b0:be:5f:c0:5e:49:2f:3b:72:4f:46:9f:10:
10:4d:7a:bc:44:78:0f:4a:99:36:93:e5:46:57:f9:
e6:72:eb:69:bd:a2:84:60:63:ba:63:3f:e3:c4:d7:
8b:1a:e1:2b:7f:5c:13:b0:ee:ac:b2:b3:c9:1d:95:
3b:76:27:98:9e:e7:20:fe:d8:1c:9a:b6:a8:39:17:
73:70:44:27:b7:26:04:9b:55:87:14:b5:b2:74:01:
1b:30:69:fc:fc:86:38:7e:93:f5:6f:46:63:f9:95:
90:a7:85:86:6a:43:ce:3d:82:4e:f7:8d:32:77:d0:
c3:6a:93:5b:76:d3:58:b8:86:b0:33:87:01:bc:16:
c9:98:2e:40:20:a2:5b:df:69:b7:61:7c:e3:44:68:
74:65:13:48:b9:8d:26:b0:e3:26:0e:00:31:d3:c1:
65:18:09:45:fe:aa:4e:c8:79:5b:7f:97:f1:7b:71:
85:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E3:D7:57:D2:C3:E1:54:A5:4E:60:D8:6D:26:D4:C4:DD:6F:11:76
X509v3 Authority Key Identifier:
keyid:B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:92:be:25:e6:fe:34:30:6a:d1:62:6d:55:e7:84:49:99:33:
4f:9a:d0:55:80:8e:61:fe:8b:01:e7:e2:a0:c8:6e:27:e4:3b:
2e:be:b2:6c:55:45:d6:24:0a:bb:1e:18:a3:45:94:91:9e:1f:
62:e2:9b:e1:a0:21:e8:2d:34:a3:87:2c:be:a5:a5:c2:7a:ae:
b9:79:5b:02:e2:a4:11:08:55:f3:c9:bb:89:61:93:97:ed:57:
16:e3:60:fc:78:f0:01:32:90:8d:bc:1a:59:02:cf:64:d1:75:
cc:7f:e8:9c:d9:ac:f5:49:a2:6d:44:57:3e:80:67:3f:26:52:
2d:13:d3:95:0a:f8:fa:b8:28:3e:51:bd:f3:a6:1d:75:19:2d:
19:d6:e5:f2:23:50:8e:72:44:d8:9d:41:ba:76:6e:ef:1d:67:
71:c5:46:08:51:69:28:98:64:ed:82:9a:2e:18:34:6a:fc:a3:
78:c5:1f:aa:5a:db:79:56:67:25:b2:0c:c0:94:af:6a:30:da:
35:3c:53:7e:9f:c6:c6:a0:71:9e:59:90:ab:59:d9:9a:6a:b7:
c4:72:8b:3a:23:b9:19:88:14:3a:91:6d:7c:01:04:b8:f4:12:
28:3a:ea:2a:87:fa:32:fa:11:74:86:f8:cf:f0:4b:d4:d3:87:
03:d1:8c:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fMZIt6nCAkBeWC56SdOSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMmJiN2YyZmE4YzQxNGM2NzE4OGJkYWJiZmI3NjIxNTY5
M2JhODcwHhcNMjUxMDE5MDgwMTIyWhcNMjUxMDIwMDgwMTIyWjAzMTEwLwYDVQQD
EyhjMGUzZDc1N2QyYzNlMTU0YTU0ZTYwZDg2ZDI2ZDRjNGRkNmYxMTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8aBPvCWC3Hms5L0IN2ueHxpyS58
6oQhB2TEDkDwMipnZ/Mu3PEu1jt0cLn0d0LsbK7JzEH1h8EFu1Ez/ZEvYsZShlm3
zhtoBhjlv7C+X8BeSS87ck9GnxAQTXq8RHgPSpk2k+VGV/nmcutpvaKEYGO6Yz/j
xNeLGuErf1wTsO6ssrPJHZU7dieYnucg/tgcmraoORdzcEQntyYEm1WHFLWydAEb
MGn8/IY4fpP1b0Zj+ZWQp4WGakPOPYJO940yd9DDapNbdtNYuIawM4cBvBbJmC5A
IKJb32m3YXzjRGh0ZRNIuY0msOMmDgAx08FlGAlF/qpOyHlbf5fxe3GFKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDj11fSw+FUpU5g2G0m1MTdbxF2MB8GA1UdIwQY
MBaAFLMrt/L6jEFMZxiL2rv7diFWk7qHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3l1Mzh2cU1RVXhuR0l2YXVfdDJJVmFUdW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZjMxYWItMmUzNC00N2ZiLTk2MTEt
MjIzYTRkOTQ3MDllLzEvc3l1Mzh2cU1RVXhuR0l2YXVfdDJJVmFUdW9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZjMxYWItMmUzNC00N2ZiLTk2MTEtMjIzYTRkOTQ3MDll
LzEvc3l1Mzh2cU1RVXhuR0l2YXVfdDJJVmFUdW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJK+Jeb+
NDBq0WJtVeeESZkzT5rQVYCOYf6LAefioMhuJ+Q7Lr6ybFVF1iQKux4Yo0WUkZ4f
YuKb4aAh6C00o4csvqWlwnquuXlbAuKkEQhV88m7iWGTl+1XFuNg/HjwATKQjbwa
WQLPZNF1zH/onNms9UmibURXPoBnPyZSLRPTlQr4+rgoPlG986YddRktGdbl8iNQ
jnJE2J1BunZu7x1nccVGCFFpKJhk7YKaLhg0avyjeMUfqlrbeVZnJbIMwJSvajDa
NTxTfp/GxqBxnlmQq1nZmmq3xHKLOiO5GYgUOpFtfAEEuPQSKDrqKof6MvoRdIb4
z/BL1NOHA9GM1A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:51 2025 by rpki-client