Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
File: sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json)
Hash identifier: 4Sht9VimvEFhvgz+msEV2205my2FqL5Gs7v8pj0OGeY=
Subject key identifier: B7:5E:3F:34:88:10:05:2F:1A:7F:28:73:CA:C8:8A:D0:61:4E:24:62
Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
Certificate issuer: /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Certificate serial: 0199FD6B3043D10D9A077254A0D5E75F960D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
Manifest number: 141F
Signing time: Sun 19 Oct 2025 17:01:24 +0000
Manifest this update: Sun 19 Oct 2025 17:01:24 +0000
Manifest next update: Mon 20 Oct 2025 17:01:24 +0000
Files and hashes: 1: SX7CKkNX5ke670AWCb1741Boh3c.roa (hash: /+lvUIY6Nj8pitkJ880DAygWMpOJMtNOHpSYINj0dno=)
2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: K8hROz2gfL+kSzMlQFByp1HZNa6JDkg3FI/IFgTFe3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:30:43:d1:0d:9a:07:72:54:a0:d5:e7:5f:96:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Validity
Not Before: Oct 19 17:01:24 2025 GMT
Not After : Oct 20 17:01:24 2025 GMT
Subject: CN=b75e3f348810052f1a7f2873cac88ad0614e2462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:83:d1:69:91:19:f6:90:02:6a:d4:37:d8:11:
fa:38:ee:58:1d:95:71:82:40:e2:f8:2d:d7:c0:e2:
f0:2c:03:65:3f:88:29:01:0c:a8:12:b6:28:fb:43:
67:00:b7:8b:1c:b8:da:e3:4f:18:4d:4c:41:50:3d:
71:32:27:bc:df:2a:91:3b:96:87:d8:c4:ec:52:75:
9f:53:18:31:78:5a:66:a1:2d:c2:7d:a0:ae:28:cc:
57:49:c2:81:24:23:20:bd:3f:3c:df:e4:2c:31:51:
d5:81:0f:2a:3a:24:0e:7b:f3:94:c3:5b:dc:52:d2:
66:02:79:ca:c6:12:f3:a5:36:40:b8:4c:48:83:13:
f7:e1:23:f6:e4:85:35:0f:4d:32:39:88:08:c6:7d:
4b:b7:f0:f9:20:ba:e7:94:1a:24:d0:56:f9:09:1a:
7f:b6:b3:43:09:35:3b:f5:ff:cd:bd:d9:18:01:11:
50:32:0f:c1:3c:d3:3f:f8:51:13:12:fd:c9:a2:bd:
45:55:62:1d:09:31:2c:53:07:0d:30:66:12:ce:b0:
ed:a2:82:84:5a:a0:f4:3a:72:de:2e:8f:d2:b5:69:
40:73:36:98:44:30:de:b2:31:f4:03:66:59:17:b9:
2a:57:da:f4:85:a7:3d:13:b3:c2:10:d3:4c:5f:01:
7d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5E:3F:34:88:10:05:2F:1A:7F:28:73:CA:C8:8A:D0:61:4E:24:62
X509v3 Authority Key Identifier:
keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:44:d5:c8:9a:e7:c7:03:e9:b0:7b:59:67:22:80:1b:f8:bc:
3b:1b:34:b0:cb:e3:60:30:71:ee:a3:b6:6f:cc:dc:d7:25:87:
a1:45:56:d5:b6:a9:e2:59:1c:92:3a:ff:a5:3d:1c:2e:db:f2:
84:4b:7a:3a:f9:a6:e8:69:23:28:fb:40:1e:f8:4f:9b:06:6a:
74:4a:91:3b:42:9d:23:07:3a:7c:e5:e1:cc:aa:9a:6b:7e:f5:
0a:b6:db:38:85:ce:c7:25:e6:e9:d3:bd:81:a4:9a:7a:71:3f:
d1:7a:1b:46:84:95:e7:5e:30:fa:ee:7d:ce:7a:fb:1e:22:a5:
0a:c1:07:0c:dd:a0:4e:dc:92:ae:16:98:21:fa:23:9e:06:96:
66:86:7f:c0:58:a3:f8:76:f9:49:47:69:31:60:08:c7:8a:1b:
46:37:06:2e:dd:0f:ff:f7:22:ee:4a:29:4e:86:64:92:3f:32:
21:92:01:fb:a9:ec:b1:e6:27:4d:87:86:90:c1:ab:86:53:b7:
b6:be:cb:2d:cd:a6:ad:c6:94:51:21:f2:8f:9d:9f:37:f9:4b:
0d:f7:62:1c:83:66:71:28:7f:2b:53:54:a5:b3:f8:63:cb:7a:
68:83:6f:c5:9d:0d:f3:7a:ab:3b:d8:47:e4:6c:1a:03:07:1e:
17:95:76:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:23 2025 by rpki-client