Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
File: sEsc31Bs5emTfnf4Jj7PbdslWwU.mft (raw, json)
Hash identifier: 1t873x5q3eV7qSnhJGAH3jRvfX1KISx+Omhc5/9oR1U=
Subject key identifier: 9C:6A:98:BA:31:51:A8:2F:08:CC:EA:F4:FF:3F:12:4D:D3:35:B7:AE
Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
Certificate issuer: /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Certificate serial: 0199FBEC146714A0181E8077C05552C64C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
Manifest number: 153E
Signing time: Sun 19 Oct 2025 10:02:56 +0000
Manifest this update: Sun 19 Oct 2025 10:02:56 +0000
Manifest next update: Mon 20 Oct 2025 10:02:56 +0000
Files and hashes: 1: sEsc31Bs5emTfnf4Jj7PbdslWwU.crl (hash: fH/WPvHOjvCk5xt48LmCVF0EPVU9Fq5CjrUlqKtMpEI=)
2: tUy7VKDDVboY2Qo-sNWljYmxPOI.roa (hash: nOufD9VcAARAPXFJN7YbCFA3vo77wDsfl0JVajaSTdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:14:67:14:a0:18:1e:80:77:c0:55:52:c6:4c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Validity
Not Before: Oct 19 10:02:56 2025 GMT
Not After : Oct 20 10:02:56 2025 GMT
Subject: CN=9c6a98ba3151a82f08cceaf4ff3f124dd335b7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:fd:7d:b1:9f:52:0c:28:75:0d:a0:cd:50:
d7:4e:92:6a:35:0d:fa:df:59:34:f4:fe:03:9d:5c:
f8:a5:25:3e:0c:3d:e8:14:03:70:72:8f:b9:94:03:
d0:24:90:84:15:35:39:a4:90:96:07:9d:cb:c1:d9:
37:dd:cf:68:e2:65:05:e3:a0:cd:0d:12:e2:d1:54:
1e:98:cd:6d:25:4f:75:ae:1e:b8:d8:0e:29:dd:54:
0d:0a:15:1d:45:55:23:10:ee:33:7f:32:83:28:d1:
e6:0f:9a:90:c4:db:c5:13:0b:3e:c1:77:e6:a0:1c:
dc:01:ba:04:b4:cd:f1:ad:f3:a0:6c:56:cb:43:12:
8d:15:d3:72:4a:04:81:6b:cb:ec:f7:88:e5:4c:c0:
5a:b5:7a:5f:21:d9:1a:cc:24:f0:8e:6d:0d:dc:1d:
01:9a:6d:7a:b0:ba:4d:9d:1d:03:7f:2a:3a:b1:03:
f3:97:00:d3:15:44:92:90:28:b3:2e:50:27:fa:1d:
af:d3:06:b8:28:43:46:7d:1c:aa:b6:7f:43:19:cb:
16:b0:5e:f2:77:45:73:94:1f:a0:b7:7f:8a:d7:6f:
02:cd:a0:cc:d8:cd:51:08:9d:70:db:72:ea:8c:68:
5c:f9:31:59:ba:8d:e6:d0:67:0a:7f:bf:cf:9a:60:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6A:98:BA:31:51:A8:2F:08:CC:EA:F4:FF:3F:12:4D:D3:35:B7:AE
X509v3 Authority Key Identifier:
keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ae:c9:54:ac:3f:f3:49:f3:c6:60:e5:f1:4c:3c:a4:49:1d:
e7:75:3b:08:7d:d5:61:42:34:a2:aa:ff:67:97:3c:44:40:0b:
b5:e7:d3:a3:6f:a5:67:d7:42:fe:b9:16:54:0e:4e:01:1c:40:
e8:94:76:17:3e:8d:56:a8:fb:e6:79:39:80:e7:d7:d6:28:a7:
2b:a0:da:bf:1f:b4:58:0d:25:ca:0e:d1:19:63:64:94:56:be:
93:d9:ea:9d:5e:9b:ad:2f:6c:06:fa:46:37:61:94:65:ea:d4:
d1:35:46:3f:78:5b:77:8c:8e:d7:5f:18:b4:c9:14:19:b0:7e:
e6:1e:b9:1d:03:58:c6:63:98:e4:54:3f:8e:c0:19:48:20:fe:
cf:07:c9:c4:2f:0c:f5:8c:8f:6c:a6:97:73:a7:5c:03:0f:cb:
72:a0:02:39:80:7b:87:fd:52:fd:b6:cb:54:e7:b1:d2:69:12:
87:8e:8d:4e:55:77:b3:75:44:15:41:95:f0:a7:0c:ca:ee:7d:
58:b9:9b:2e:21:b7:6a:97:22:e8:66:cd:86:9e:ee:26:c9:fc:
ac:65:c2:cb:9a:ef:0c:36:67:e0:3a:6c:b7:03:c1:d8:51:06:
f1:e6:c9:33:01:60:ad:09:ca:85:e2:00:89:c3:75:51:f2:d3:
9b:e4:d4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:43 2025 by rpki-client