Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
File: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft (raw, json)
Hash identifier: 2nJ8MWapTT92Ym0lEf1IsezI/2MEhKWb3lqsrrRKiAE=
Subject key identifier: 41:18:91:1F:A9:CC:A1:9B:46:2D:7B:75:B6:2B:1B:C8:ED:21:86:EF
Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
Certificate issuer: /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Certificate serial: 0199FCC62C5962BCDA0A9F5DB847DB0A02D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
Manifest number: 03BB
Signing time: Sun 19 Oct 2025 14:01:09 +0000
Manifest this update: Sun 19 Oct 2025 14:01:09 +0000
Manifest next update: Mon 20 Oct 2025 14:01:09 +0000
Files and hashes: 1: N2ivlz1wZCpdYYLO1Jxljykvn4c.roa (hash: qYmGGsXcI2a1eHN7AFVSkBu0axGqB7MkOzzu5zM+aAU=)
2: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl (hash: /WZTLXzpEZOWJilnQNkFzzYqhtJEbYfW54r0405Ka8Q=)
3: y-thR2-wOGxjUF2dmavWMwBsUm0.roa (hash: WQLO7IU5V5iq1uzzyryZYM1QGfm/WLluTpgcnyQ2D8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2c:59:62:bc:da:0a:9f:5d:b8:47:db:0a:02:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Validity
Not Before: Oct 19 14:01:09 2025 GMT
Not After : Oct 20 14:01:09 2025 GMT
Subject: CN=4118911fa9cca19b462d7b75b62b1bc8ed2186ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:e3:45:59:ad:31:f2:57:96:8b:e6:62:65:
cd:7c:e7:23:49:4d:5e:f1:31:d7:44:bb:06:8c:92:
78:7c:af:24:79:d2:d6:40:4a:42:ec:b9:72:6d:d4:
91:3c:29:bb:a2:65:0d:f8:dc:5c:6e:6d:81:99:8b:
5f:72:71:92:52:31:b0:0d:de:9b:87:cc:41:c1:21:
4b:5c:2e:b1:08:9d:13:74:d4:30:c7:54:81:a3:00:
1c:e6:3e:73:6f:fe:20:e4:da:6b:db:62:bc:84:c4:
a8:63:a1:8d:c2:d0:aa:68:f0:72:4b:1a:42:bb:bc:
13:77:4e:c1:ae:a6:52:76:55:87:db:1d:ba:17:cc:
7b:99:c5:d4:96:ce:14:f4:46:65:cc:9c:82:d9:1a:
1e:89:4d:a0:3c:97:75:5b:6a:3c:b6:a3:fe:08:72:
8a:81:23:52:22:c4:26:fc:de:3e:5d:73:fa:c3:f1:
cd:91:c0:57:f3:58:77:2e:00:13:fa:54:c5:14:21:
31:29:40:1b:e9:12:4f:3b:7f:57:2d:1d:73:3b:c0:
ce:2c:8e:e0:08:54:e1:63:31:c3:76:af:6c:fb:85:
2f:38:6b:21:87:90:2c:e6:d9:40:cf:3a:db:18:b7:
4f:d7:ac:1d:3d:b1:c2:ef:17:db:78:ba:a5:85:17:
0d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:18:91:1F:A9:CC:A1:9B:46:2D:7B:75:B6:2B:1B:C8:ED:21:86:EF
X509v3 Authority Key Identifier:
keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:14:1a:fd:05:bf:93:16:e7:76:6a:0c:25:c9:cc:18:09:36:
e3:eb:a7:73:9c:d8:97:59:b0:02:e6:68:f3:77:f2:a4:d2:49:
76:5c:47:07:4d:92:98:ea:68:c3:48:b1:97:14:fb:a3:59:5f:
56:08:eb:78:ec:5c:b4:3f:dc:5e:cc:1b:0c:7a:a4:8a:08:09:
18:33:ae:79:29:a7:9f:6d:29:b9:3d:f2:04:33:a3:d8:88:ec:
ce:05:16:2f:d3:8e:39:da:6c:cc:4b:06:f5:e1:93:21:b6:84:
17:2a:77:fc:92:d0:cc:63:65:15:52:25:e4:b6:eb:d8:90:4a:
70:23:eb:0b:7b:4e:f2:56:62:99:ed:9f:18:d1:40:78:d1:15:
9f:30:45:45:e6:bf:cf:1e:a8:0e:5f:44:17:3b:37:b1:eb:03:
b8:46:ef:9a:9c:4a:0a:f5:5b:aa:ff:44:4c:b5:67:b3:a6:a9:
f7:e6:bf:51:6a:d7:34:09:6e:a7:a6:da:ea:e7:eb:32:9d:1b:
05:b5:1e:d3:0d:41:0d:7f:35:46:a5:f7:11:d2:9c:59:64:75:
41:f5:ac:e3:4b:71:4d:62:9a:8b:f8:50:8b:7b:58:f5:51:4a:
41:05:c1:f8:af:fc:b6:49:16:c2:71:5d:aa:75:df:5e:5d:6c:
ad:5a:86:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:30 2025 by rpki-client