Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
File: SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft (raw, json)
Hash identifier: y1nS3Xf2IIDXRt5iCp3T882BNnUKEYbFIf0KbE61HPM=
Subject key identifier: C5:FF:1E:18:C1:2B:41:92:A0:72:4F:BB:11:77:52:9A:7F:BA:AD:5A
Authority key identifier: 4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
Certificate issuer: /CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Certificate serial: 0199FF227AD951C4DABCCB6F430346B0D4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 01:01:13 +0000
Manifest this update: Mon 20 Oct 2025 01:01:13 +0000
Manifest next update: Tue 21 Oct 2025 01:01:13 +0000
Files and hashes: 1: KUfFcY4n_r75t21wBTn8NHwpPWo.roa (hash: Vj4b0HHRAbzzjfGSfe71X4pK6wA9f27I+UmGi3mJNYI=)
2: SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl (hash: xLwlfc/EYw3MGOib55o4zzjVYSuhghx3wo+upmFYkwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:7a:d9:51:c4:da:bc:cb:6f:43:03:46:b0:d4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Validity
Not Before: Oct 20 01:01:13 2025 GMT
Not After : Oct 21 01:01:13 2025 GMT
Subject: CN=c5ff1e18c12b4192a0724fbb1177529a7fbaad5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:ed:62:c8:8e:14:dd:93:99:99:d8:ba:c0:
57:c0:70:4b:7e:3a:91:3f:1f:1d:81:28:c5:72:2f:
8d:88:4b:d7:86:ed:55:89:2b:09:bd:4d:5f:77:d4:
b5:41:fc:4d:9e:d8:ed:0e:47:da:b9:80:99:a5:6d:
d3:6c:83:25:91:0b:c5:37:77:93:41:4e:84:f3:08:
44:7c:76:3c:cd:8e:63:39:77:b7:68:3d:57:fe:e4:
a9:c2:b4:92:83:1b:f6:7f:9a:42:fc:0e:c2:8f:7f:
e9:f5:80:72:cd:51:d0:88:4d:05:a6:b5:70:5f:5d:
98:37:52:ef:1a:d2:9d:26:51:30:d9:ef:29:36:dc:
3d:81:f9:17:71:13:ba:de:54:4c:a1:88:7e:d3:e0:
03:e0:6e:8c:c2:c4:03:e8:5f:42:54:bf:3d:5d:de:
87:67:92:87:3e:2e:91:33:d9:42:69:4d:5e:a8:5e:
d6:3f:69:b8:01:78:5a:dc:e1:8a:75:0c:a0:b4:4e:
08:3c:17:5c:1a:70:fe:b9:cb:8c:54:1f:6e:2b:e8:
2b:7e:90:7c:48:ab:3e:d1:5f:31:02:9f:a5:d0:7d:
b0:c7:76:dd:0b:d9:12:91:cb:85:57:f3:ab:8b:a3:
a4:e2:e8:89:e8:9a:d2:9b:4c:28:bf:8d:d2:9d:19:
86:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FF:1E:18:C1:2B:41:92:A0:72:4F:BB:11:77:52:9A:7F:BA:AD:5A
X509v3 Authority Key Identifier:
keyid:4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a4:61:ad:b5:41:8c:51:8f:ce:95:a8:2f:98:9e:c3:1a:21:
15:c4:1c:68:2f:78:70:c0:c5:c6:63:d3:05:b5:ab:71:31:9d:
8e:9c:97:2f:55:7a:8e:39:e0:1e:a8:0d:de:29:0b:a2:2f:9e:
b8:7f:d3:5a:1a:12:5c:fe:68:f0:6b:18:c3:8c:24:88:17:62:
c7:e2:88:4c:c4:3f:37:09:5a:41:b0:1d:2f:7a:72:d3:4d:52:
08:df:3b:f7:65:54:20:73:16:1b:3b:18:c3:54:aa:77:44:7d:
38:71:70:bd:70:66:4c:60:7c:bc:82:50:fa:e4:de:f5:d9:ac:
a1:21:6f:c2:61:07:ad:87:0d:3b:a6:ab:c3:ed:d3:d6:f4:0b:
36:13:40:4b:36:4e:a0:5c:ad:4f:30:5f:7d:ce:68:e1:87:02:
90:fe:77:5e:4f:71:34:86:fe:8e:e6:5f:52:f9:4a:5d:42:f4:
5e:49:83:77:bb:a4:14:58:5c:94:2b:93:c7:d9:69:15:c0:43:
fb:b8:1a:88:86:07:d6:1c:4c:22:2f:de:c8:eb:36:60:81:bd:
8d:c0:5b:cf:75:f7:15:d9:47:a1:1e:a7:1f:57:8f:cd:0f:c7:
fb:5e:a9:54:e5:78:c0:93:4a:a9:5f:8e:e2:d8:9b:4c:36:f8:
5d:aa:fc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:50 2025 by rpki-client