Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier: m4ZdJ2TYEGzg+6iZrIPW8NdQddSZz5BKfhznUu10IEA=
Subject key identifier: FB:D4:0D:23:8C:2C:3C:20:F4:D1:26:43:16:AE:66:A7:51:21:92:4C
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 0199FB463965EF302A52F25C3059A15F8A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number: 0CE9
Signing time: Sun 19 Oct 2025 07:01:47 +0000
Manifest this update: Sun 19 Oct 2025 07:01:47 +0000
Manifest next update: Mon 20 Oct 2025 07:01:47 +0000
Files and hashes: 1: 7fSgZ-LQDYvguJzdZ14V0z0FUCE.roa (hash: bUjKLDflZP/Ln3EKUyE+zKMongCT5xOF2uDWHet5S9I=)
2: DiRUXj-wMeKTJD3aUfG_fU2alsE.roa (hash: C8nsHrwSkn8Gd1JmzSYSfUzGZSwYITwrUGRtmf3pI4s=)
3: Ru-jgtHHtk22zU2Iz9obbyyNqtA.roa (hash: JK2Fg/eBJyup1fiSh8xdKaGSDAo/evkcOv83dZLvh1k=)
4: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: uw0xcJUujRnjNJamdT8n27QKz/ddvlmb6T5q2DOmGes=)
5: WzBH8kAZVhitfGs3LpWEVIaX2DU.roa (hash: yyE311L3mhjCKLl6ozIj/e45U2t4pgo+mFiZj5vWZ9E=)
6: vTYkTnZMEaqfhCdiY5ia6c9viZw.roa (hash: m5F7OL9Eo2LVurzs6A9iXzsVS70f86h9K1zL5V462Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:39:65:ef:30:2a:52:f2:5c:30:59:a1:5f:8a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Oct 19 07:01:47 2025 GMT
Not After : Oct 20 07:01:47 2025 GMT
Subject: CN=fbd40d238c2c3c20f4d1264316ae66a75121924c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0b:8f:5f:c4:ae:bf:5c:de:c7:44:88:ef:33:
9f:d2:14:8d:b4:98:5a:b6:7a:99:ec:1f:91:10:60:
4c:68:8c:b9:66:12:f5:ec:25:7e:06:00:dc:ad:d3:
b9:c0:40:76:c0:42:e2:2f:5f:33:fc:76:96:18:41:
41:61:ac:67:8d:11:2b:39:9e:68:06:e8:6b:0d:2f:
1b:a2:27:7a:86:4c:5d:89:a4:1a:86:e2:44:4f:fd:
d5:3d:9a:14:ff:ca:59:0c:db:59:96:57:f9:80:d1:
cf:bd:6f:d4:8d:81:ad:47:0a:e0:17:b5:8d:9f:2f:
d8:cc:75:a3:16:f3:0f:e0:81:29:51:5a:0f:53:19:
1f:ca:39:db:38:56:8f:ac:79:51:f7:87:7c:e0:1f:
8a:ba:a0:11:72:05:4f:ac:8a:bd:f3:bb:a6:db:85:
6c:85:ae:f1:c0:76:85:e9:cf:ae:e4:7e:e2:2f:41:
e3:c2:5c:59:6e:bc:f7:a4:9c:ea:17:48:e2:a8:79:
1c:4f:f5:68:8b:ac:e8:b4:a7:ff:07:14:7a:d5:55:
14:a1:cc:04:18:32:0b:d2:d6:8f:b9:b7:44:c5:ef:
3a:0c:f2:58:c0:1d:c6:2a:d3:fe:0c:c2:13:76:3e:
08:ae:ff:21:c6:bf:82:8c:f5:80:b6:a3:7e:48:b9:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D4:0D:23:8C:2C:3C:20:F4:D1:26:43:16:AE:66:A7:51:21:92:4C
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:42:14:d1:79:93:51:b5:c4:9f:34:e0:8c:4f:6b:f2:93:80:
10:de:4a:96:93:75:5d:07:95:a7:96:74:73:be:a3:c0:7b:d1:
6e:2c:79:08:6e:a5:64:aa:6e:f7:c9:58:f2:30:6b:a1:aa:7c:
44:d7:16:c4:1b:7d:58:6b:cb:33:ff:ce:5c:97:f1:2b:45:03:
95:c9:99:12:0b:f3:2f:cf:58:8b:65:48:fd:b6:20:bc:de:9e:
38:79:c0:58:53:ef:67:1f:ec:92:e9:92:26:05:a2:22:94:aa:
93:b4:d2:61:76:fe:52:3b:f7:61:f5:da:cd:0b:ee:7d:c2:96:
25:91:29:89:4f:fb:dd:d2:f3:a9:84:64:4c:23:2f:a8:09:a2:
1d:19:e5:be:ba:7b:7f:5c:2c:a6:f8:9e:ad:a7:fc:88:5b:a2:
b2:46:71:e6:6f:41:eb:78:b7:fa:8c:12:84:e8:3d:b2:66:7c:
eb:73:b2:a6:ae:d7:f7:d1:9e:da:f5:b1:31:09:b8:0a:2c:b5:
a9:b9:a3:36:5a:e4:31:e9:19:e6:78:83:9c:b0:d2:8d:03:a8:
1f:ef:b1:4e:d7:70:85:5b:6f:59:31:d4:4b:7c:6f:73:1f:a6:
63:fa:71:87:fd:76:70:65:5b:b9:3b:4b:10:c7:fa:7a:5c:c3:
0e:37:34:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:35 2025 by rpki-client