Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/SRodzN7JXOWDRq33ARJj1k6TtNE.mft
File: SRodzN7JXOWDRq33ARJj1k6TtNE.mft (raw, json)
Hash identifier: MdvGLzvzVhoDwZ+CKSwPJ9S9Wro82316HQ7ZlU7PWFY=
Subject key identifier: 70:06:62:75:4A:EF:B9:5B:47:E7:C8:29:80:21:0E:47:D0:14:F7:8D
Authority key identifier: 49:1A:1D:CC:DE:C9:5C:E5:83:46:AD:F7:01:12:63:D6:4E:93:B4:D1
Certificate issuer: /CN=491a1dccdec95ce58346adf7011263d64e93b4d1
Certificate serial: 0199FB7CB4B7256A4E31A91CBE233E896EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRodzN7JXOWDRq33ARJj1k6TtNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/SRodzN7JXOWDRq33ARJj1k6TtNE.mft
Manifest number: 55
Signing time: Sun 19 Oct 2025 08:01:17 +0000
Manifest this update: Sun 19 Oct 2025 08:01:17 +0000
Manifest next update: Mon 20 Oct 2025 08:01:17 +0000
Files and hashes: 1: SRodzN7JXOWDRq33ARJj1k6TtNE.crl (hash: Vxi2suja17Lu0UUA/lvHO0/0mw5YFvbTKUv6wp6eors=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/SRodzN7JXOWDRq33ARJj1k6TtNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/SRodzN7JXOWDRq33ARJj1k6TtNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRodzN7JXOWDRq33ARJj1k6TtNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b4:b7:25:6a:4e:31:a9:1c:be:23:3e:89:6e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491a1dccdec95ce58346adf7011263d64e93b4d1
Validity
Not Before: Oct 19 08:01:17 2025 GMT
Not After : Oct 20 08:01:17 2025 GMT
Subject: CN=700662754aefb95b47e7c82980210e47d014f78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:77:09:28:89:6e:ae:0f:bd:26:ac:19:4f:34:
1e:ed:92:49:29:2d:61:c5:2c:d9:74:ca:d4:5c:53:
d1:6a:a6:90:c6:13:dd:db:07:41:34:dc:81:d0:2a:
66:b8:b0:d4:f8:b8:eb:df:a8:13:82:75:7e:fc:a7:
e0:25:b9:96:21:bf:36:3e:4b:97:e8:92:a9:37:60:
a7:13:80:f3:52:fa:d0:65:5c:c9:4e:93:fe:ca:0e:
db:3c:11:85:b6:37:88:5d:0b:d3:17:ee:d4:c0:41:
93:95:0f:ff:c0:ff:57:f3:94:1d:8e:51:df:6a:af:
25:90:df:55:ab:7a:d9:af:4b:4b:c4:94:de:75:4e:
59:d2:24:49:c8:b8:e1:de:4e:8c:51:47:84:39:3f:
c1:4b:7e:ab:6c:d4:86:cd:2b:6b:8c:b7:67:e2:be:
c7:a8:fe:e2:61:a5:e4:c4:e5:52:90:64:ad:32:76:
6b:49:6c:af:1e:09:59:2e:c4:6e:3e:0f:b8:98:e5:
43:7c:54:33:b5:8d:8b:8a:b3:f6:21:b1:81:fa:29:
cc:f9:34:42:1d:e2:03:a2:dd:95:85:a4:db:67:11:
2a:ca:76:a1:1d:4e:2b:35:f0:f8:28:4d:0a:1f:29:
07:ac:57:ae:c5:2a:11:04:a8:36:88:75:ce:67:cf:
e7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:06:62:75:4A:EF:B9:5B:47:E7:C8:29:80:21:0E:47:D0:14:F7:8D
X509v3 Authority Key Identifier:
keyid:49:1A:1D:CC:DE:C9:5C:E5:83:46:AD:F7:01:12:63:D6:4E:93:B4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRodzN7JXOWDRq33ARJj1k6TtNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/SRodzN7JXOWDRq33ARJj1k6TtNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/SRodzN7JXOWDRq33ARJj1k6TtNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:db:f2:a1:ba:d0:fa:84:3c:a4:5d:39:56:ac:99:ad:f8:cf:
2f:7f:60:b9:3f:f3:ef:77:29:2a:10:05:fa:ba:7d:a3:db:94:
72:2d:49:b4:77:88:98:31:da:69:9a:cd:4a:18:b2:b3:c4:e1:
2e:c0:f7:30:7a:30:73:e7:0e:0b:8f:b1:e0:ce:ea:c8:d1:79:
53:8d:49:bd:a5:90:4d:08:7b:3e:ce:2a:18:0b:23:6d:78:45:
c4:a9:29:aa:d1:5c:6a:c8:00:4f:12:dd:78:af:0b:71:2e:c8:
bb:3d:17:ee:00:21:5e:07:dc:3c:b2:b3:ac:44:4e:13:4c:a4:
03:aa:c2:79:3d:48:49:63:64:85:c2:6a:40:b9:a9:d9:12:00:
a8:91:fe:3d:78:f0:b9:51:f7:b9:a1:b6:ad:0b:9f:2b:32:37:
bc:b6:17:7c:5c:f2:61:b1:1a:47:68:9b:ad:76:31:56:e6:a8:
14:4e:1b:da:7e:60:17:4a:b8:db:c2:16:94:de:01:31:d7:87:
b5:dc:9f:71:11:d8:e8:69:4f:a6:5b:15:44:c9:16:a0:38:dd:
3b:fc:58:dd:93:4d:9e:fc:63:0d:58:cc:99:ca:0b:09:4a:a1:
e0:cb:ab:3d:72:11:6e:45:e4:7e:39:67:cf:72:28:2d:6f:ce:
47:61:f6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:30 2025 by rpki-client