Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
File: sXQMTAefLR3uhUOfgngbm651apU.mft (raw, json)
Hash identifier: /DtN8SC5k0psuvzuTRaESddGjKMJnI+NVoxAvKVbwzg=
Subject key identifier: C6:6A:B9:6D:7F:8B:33:E8:10:3C:09:CE:AC:37:5B:54:22:E5:E5:B7
Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
Certificate issuer: /CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Certificate serial: 0199FD6B2101DA98356262D0815ED5FF26C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
Manifest number: 132F
Signing time: Sun 19 Oct 2025 17:01:20 +0000
Manifest this update: Sun 19 Oct 2025 17:01:20 +0000
Manifest next update: Mon 20 Oct 2025 17:01:20 +0000
Files and hashes: 1: 0kGm7IS6foM84ApNB5wMBZmcs70.roa (hash: fsNAu7RVtrbBsKEN64Ou91zqn3ieSIW0lwlDv3luCl0=)
2: QHGLz4vDf8HU0PXuv58AHJKDNwE.roa (hash: zsAsJqx3Xlx/j+LLE8QbsIeKt4A9wuocERvf2nTmf7A=)
3: Sz2kPMld2S0NhbWe3VBXUQg4E_g.roa (hash: CgZe2V9k88f5ug37ai2G7ohUxSeYSwTeyOJXFySNdfc=)
4: sXQMTAefLR3uhUOfgngbm651apU.crl (hash: JtRdpjW7JM+vgq2kZzABhyDGz1qI3aZsAy+1XjOg+IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:21:01:da:98:35:62:62:d0:81:5e:d5:ff:26:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Validity
Not Before: Oct 19 17:01:20 2025 GMT
Not After : Oct 20 17:01:20 2025 GMT
Subject: CN=c66ab96d7f8b33e8103c09ceac375b5422e5e5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0a:51:97:2c:f8:3c:b9:fc:dd:8f:8e:b5:85:
8c:71:a5:25:8e:c2:d1:57:05:5f:8a:dd:1c:58:3b:
24:c7:ae:d0:1a:e2:cf:28:0c:84:e9:d5:b2:d3:85:
62:02:04:af:26:8f:99:e9:e7:6d:1a:6e:48:ae:13:
8f:b9:7e:37:c7:99:70:9c:cd:e2:6f:78:53:a5:0b:
5a:97:7b:82:2c:ef:93:71:61:6e:35:36:e5:39:47:
a8:f8:03:bb:1b:b5:55:67:78:41:ad:1d:49:9a:32:
b5:2e:91:96:2c:c8:ef:1d:81:72:af:06:3b:65:41:
6d:7a:c5:5e:14:c4:b5:bb:f5:1b:c6:1e:8c:7b:55:
03:4b:b3:60:67:92:82:05:7e:c7:fe:38:d5:cc:f0:
5c:39:f7:a0:7f:f2:22:4c:d2:15:f1:c3:67:e1:e4:
ef:fa:cc:dc:30:f6:c8:2c:93:70:c4:57:89:bd:06:
46:2b:eb:69:92:f9:c9:22:f8:26:5c:6b:3b:88:cb:
dd:6d:28:fe:02:9f:fc:69:c1:63:6b:73:b5:25:ba:
ff:2e:36:59:a9:dc:4f:75:a0:dd:3d:1f:d2:79:63:
86:05:51:84:0d:53:b1:2f:17:44:3d:c2:e3:1b:ad:
b4:e6:c9:66:06:f9:d7:7e:42:20:85:79:57:ae:d8:
23:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6A:B9:6D:7F:8B:33:E8:10:3C:09:CE:AC:37:5B:54:22:E5:E5:B7
X509v3 Authority Key Identifier:
keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:47:7b:95:8f:2e:b6:d8:a4:10:24:d6:8b:53:a7:77:7d:22:
2a:8f:84:9a:ff:39:a5:95:de:5d:4b:a2:c3:0d:6b:1a:ae:1d:
a5:14:dc:35:b7:ec:f0:27:51:e9:79:67:6c:b2:12:be:3f:af:
2c:5e:f8:91:66:4c:fe:49:a4:ad:4f:a9:3a:1b:32:b7:b6:ef:
12:18:0d:b7:7b:76:a8:0a:87:d1:cc:bf:db:a3:75:06:24:fe:
4c:02:92:97:dc:d6:d2:27:89:b0:2a:fb:5e:ea:16:76:8b:fc:
c5:3c:95:e1:b6:84:29:14:e6:3b:44:7a:4a:e5:4f:50:27:62:
d9:b2:04:4d:3a:bd:56:3d:7d:3c:56:05:ef:ef:4b:7c:cf:ce:
a5:6a:8a:da:25:9f:b4:ec:26:2e:7b:79:86:e6:d4:b8:0e:37:
27:61:7d:f8:b1:6e:17:c7:82:84:d3:71:73:13:99:d1:bd:f9:
2d:51:36:1c:64:82:47:1f:01:8d:5b:bc:26:d4:1f:35:e5:65:
21:61:42:ac:1b:e5:4d:19:a5:c8:1a:8d:cc:00:50:f6:00:65:
a2:10:c1:82:3a:31:b7:8a:5a:6d:f5:42:4f:af:52:20:64:67:
6a:eb:fb:28:71:de:7d:d9:e3:d1:1b:f7:08:16:b0:8d:8e:8f:
9e:8c:69:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:14 2025 by rpki-client