Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
File: sPiohfd3bSq5m7TyDoTTBuA5SqM.mft (raw, json)
Hash identifier: FNCxp96iirgbrnTvHI0+PMNF7RF9NGQFJS1za3QObjY=
Subject key identifier: 54:79:E6:1E:F8:15:6B:99:64:59:EF:1B:E1:54:B8:07:DA:77:3E:F8
Authority key identifier: B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
Certificate issuer: /CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Certificate serial: 0199FB7CA1CE553A0D25EF5FA70783BE3F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
Manifest number: 1475
Signing time: Sun 19 Oct 2025 08:01:13 +0000
Manifest this update: Sun 19 Oct 2025 08:01:13 +0000
Manifest next update: Mon 20 Oct 2025 08:01:13 +0000
Files and hashes: 1: SvV3htVhXEPI7wFXdPP_R5R2jOo.roa (hash: ADbpdowWW8HzIQ0XmIe2lqnPixhQxjU2ME36RexdQ8I=)
2: sPiohfd3bSq5m7TyDoTTBuA5SqM.crl (hash: iOOzBGf1ty3uY+HIp5SqFpppLXjPHwKb7D+AyXO6X+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a1:ce:55:3a:0d:25:ef:5f:a7:07:83:be:3f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Validity
Not Before: Oct 19 08:01:13 2025 GMT
Not After : Oct 20 08:01:13 2025 GMT
Subject: CN=5479e61ef8156b996459ef1be154b807da773ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a9:58:91:8f:1d:bd:25:fd:56:4f:7b:65:dc:
e1:07:54:e7:79:1f:bc:4e:3c:15:05:e2:93:2c:7c:
67:2a:d5:c5:75:3d:02:69:25:56:92:5d:07:5e:34:
1f:01:42:c7:ad:1f:b0:86:f3:ed:66:79:67:cf:80:
e3:13:09:f8:9d:7a:e9:44:e2:1b:4a:d7:59:6a:4e:
f0:94:10:ad:db:84:81:af:2b:84:71:48:7c:8c:99:
e6:e2:bc:19:36:9a:c0:2c:ed:99:61:58:b4:de:bd:
24:31:0d:b9:ce:d8:aa:70:92:90:0a:61:62:3a:ef:
d1:fd:15:78:4f:22:7b:0c:50:c3:e0:d9:c9:6d:3f:
c5:26:12:68:e9:55:5b:65:23:db:4c:75:fc:32:d0:
22:4f:01:7d:da:05:0d:1e:5b:d4:0c:f0:ae:02:3c:
b0:01:2c:13:17:d9:82:b1:72:cc:d8:be:00:d1:9f:
d3:7a:19:12:9a:0e:6c:08:d7:4c:a6:1b:d6:c0:1b:
76:de:ae:6d:2d:a5:de:42:47:63:31:91:88:6b:50:
af:29:33:59:6b:56:78:44:3b:22:e4:8c:29:b7:56:
3f:1c:05:cd:b0:92:94:57:e0:53:40:c3:c6:f9:bf:
42:be:25:20:4c:19:0b:64:41:65:16:cf:3d:a8:9b:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:79:E6:1E:F8:15:6B:99:64:59:EF:1B:E1:54:B8:07:DA:77:3E:F8
X509v3 Authority Key Identifier:
keyid:B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:24:b0:2a:7d:1d:3d:87:b7:ae:f5:bb:f9:e7:6e:95:60:1c:
6d:42:c1:e9:a5:4d:96:47:c8:81:6d:3c:62:e2:a3:42:a3:ac:
7f:3f:05:b5:da:aa:d2:89:dd:c4:0f:1a:73:5b:96:d4:30:50:
31:56:fd:1c:40:fc:af:f1:d6:56:dd:d4:3f:6d:a0:ed:d2:4b:
36:b2:cb:a7:39:55:32:a3:f6:a8:dd:7a:89:9f:d0:f7:b9:90:
e7:71:61:db:91:c0:8c:30:34:e5:21:2a:72:98:01:a2:c0:2a:
82:27:17:6e:14:f3:34:c4:87:ef:e2:55:2c:67:fa:1f:9d:39:
6c:9a:0d:77:e7:7c:76:82:63:71:08:3a:77:1e:3a:63:ef:20:
67:df:ec:5f:49:92:41:06:f6:97:7f:c8:b6:a5:97:16:e9:c1:
fa:de:76:95:86:43:82:45:4e:5f:96:e5:f1:22:b1:fc:a1:6b:
1f:35:8a:b7:02:db:f2:91:3e:4f:5b:b8:82:0d:b1:7c:ec:87:
dd:75:d4:de:73:0c:4c:72:28:aa:a2:a9:ba:3c:33:a2:4c:e2:
4b:5d:6f:26:1a:1c:74:1a:a0:63:57:0b:40:3f:c9:1b:aa:57:
b1:01:1e:d9:45:45:14:a9:ee:f1:25:d1:a6:6c:b4:58:07:20:
77:14:b7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:23 2025 by rpki-client