Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft
File: sJLCwjUMWQpEg_1E8lCnf-6qspY.mft (raw, json)
Hash identifier: 22sdjn2PPlxuvw68bgASV9iHUJ4ELniePm/zZVrKquA=
Subject key identifier: EE:BB:47:F8:8B:B4:60:05:11:4C:EB:FF:EF:E5:9B:2A:EA:A5:8C:F0
Authority key identifier: B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96
Certificate issuer: /CN=b092c2c2350c590a4483fd44f250a77feeaab296
Certificate serial: 0199FD3411C8703953B4D4AFBD61C8C3CF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft
Manifest number: 0688
Signing time: Sun 19 Oct 2025 16:01:12 +0000
Manifest this update: Sun 19 Oct 2025 16:01:12 +0000
Manifest next update: Mon 20 Oct 2025 16:01:12 +0000
Files and hashes: 1: sJLCwjUMWQpEg_1E8lCnf-6qspY.crl (hash: RMyLUcPTykWKN17yKnIIQHWgBy+1AMSRNRIBQZvEmTs=)
2: xPs0nDJe3R7-T_MTjBUDCpVD-P0.roa (hash: +ghVSq1vvvNC/Tdx1esVzP21pV4gSI94aIDbxITlk7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:11:c8:70:39:53:b4:d4:af:bd:61:c8:c3:cf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b092c2c2350c590a4483fd44f250a77feeaab296
Validity
Not Before: Oct 19 16:01:12 2025 GMT
Not After : Oct 20 16:01:12 2025 GMT
Subject: CN=eebb47f88bb46005114cebffefe59b2aeaa58cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:33:b1:18:c7:f7:5d:ed:1d:b5:8e:dd:70:49:
21:de:70:36:80:ba:f5:28:ee:5f:03:12:a8:f9:26:
ef:26:6e:42:71:aa:ac:ec:7b:1f:c8:95:a7:35:02:
a8:a4:ee:65:8e:90:61:ad:0b:d3:14:21:08:97:38:
80:48:b0:c4:21:ac:40:25:a4:bd:5d:8e:92:a6:b9:
ae:9d:d1:d3:af:a2:ba:39:a3:8a:fa:62:56:ea:18:
88:39:20:04:05:e1:e9:e2:8e:c5:1c:c1:2a:7f:3c:
4e:98:48:a5:59:75:a6:86:bc:84:0a:37:09:57:ad:
4c:4a:53:bc:1a:8e:74:69:40:dc:ef:66:dd:e9:86:
93:ed:a3:cc:72:fa:16:dc:14:e0:41:e6:f4:09:f1:
5f:de:95:f3:f6:22:18:44:40:52:b8:2c:b1:69:92:
33:18:7a:13:7e:d0:83:27:ef:64:3a:0c:af:67:fa:
c6:25:de:a0:a7:e4:51:d5:25:58:fd:97:91:af:95:
60:00:a4:6e:de:61:24:57:57:00:5c:cf:5f:bc:ec:
1c:a1:ce:09:1b:0d:66:18:88:7c:31:5d:ec:71:c2:
75:b7:32:b8:61:43:97:50:58:ab:80:ba:2d:ab:04:
71:3f:0d:74:51:4b:6c:5f:5e:b7:1d:96:18:01:d6:
05:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BB:47:F8:8B:B4:60:05:11:4C:EB:FF:EF:E5:9B:2A:EA:A5:8C:F0
X509v3 Authority Key Identifier:
keyid:B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:30:d2:2e:51:20:d4:b6:86:29:51:ce:da:92:b2:6e:75:30:
38:39:da:1c:e2:c1:20:31:99:8b:e8:84:be:b8:be:0e:89:31:
46:78:d2:c4:7f:2f:bb:f3:e8:90:d2:c7:40:7f:cf:30:07:e2:
20:56:7b:07:16:a5:87:45:0f:50:f7:84:a4:09:ee:f2:b2:5b:
ad:40:4c:06:9b:05:24:e9:a9:a1:a2:7e:b1:ee:d8:1a:24:e9:
56:81:2f:43:4f:f0:55:3e:1e:ae:0c:b2:28:cb:f6:49:58:2e:
d1:df:b3:d7:04:fc:04:3d:97:26:31:cb:ff:51:6b:ab:09:6c:
9f:2e:89:ab:52:07:85:ff:7b:8f:39:21:47:d2:0c:be:e7:ac:
0a:8d:c2:55:47:28:05:a6:2e:80:34:d1:30:50:a2:d6:f4:a2:
76:6d:6a:c2:a3:70:01:1d:8b:6a:42:b4:d1:da:f3:86:c6:a6:
77:c6:3e:c2:2c:b8:da:ac:c7:23:60:a7:de:f0:14:d5:a5:38:
3a:6c:b5:4c:87:ae:e2:6d:63:0d:02:ab:5d:6d:57:23:de:3a:
c9:35:ea:ab:86:7c:9f:06:9d:2b:9e:46:e5:b9:20:64:8b:85:
d2:5c:f9:ba:28:b1:7d:cd:00:f6:88:d3:bd:ed:f3:1b:b6:ff:
0e:82:82:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:32 2025 by rpki-client