Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
File: S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft (raw, json)
Hash identifier: 5vZqGfRcQQBZB7o3CSSEKtWFejwHmHMeHr99T/bFclU=
Subject key identifier: 8F:8C:96:0B:AD:31:16:6E:66:49:11:59:3B:41:53:D0:27:F0:53:A7
Authority key identifier: 4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F
Certificate issuer: /CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f
Certificate serial: 0199FB7CEBD3823103DDA6CE8A1C2C5245BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
Manifest number: 137C
Signing time: Sun 19 Oct 2025 08:01:32 +0000
Manifest this update: Sun 19 Oct 2025 08:01:32 +0000
Manifest next update: Mon 20 Oct 2025 08:01:32 +0000
Files and hashes: 1: 1D0kryG-hg5X4kNtLF0_L_6fbtc.roa (hash: Zop4UA3qvwcLs+PgF6ZAbdQWhdOq1xNbvhqjWudAWN0=)
2: S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl (hash: JabfoBIJKVKJJIjXukDjROBHUIthialfDpY8XP2sVzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:eb:d3:82:31:03:dd:a6:ce:8a:1c:2c:52:45:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f
Validity
Not Before: Oct 19 08:01:32 2025 GMT
Not After : Oct 20 08:01:32 2025 GMT
Subject: CN=8f8c960bad31166e664911593b4153d027f053a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:de:c4:da:7a:5f:eb:a8:5e:cb:de:f8:ae:49:
b6:b8:96:70:f5:f7:61:33:68:bf:df:17:1a:68:33:
d6:01:90:18:ff:28:41:99:e8:5a:62:64:c0:53:86:
86:64:2a:68:7f:0b:ed:b3:c7:00:0c:c6:29:89:2f:
68:af:82:e1:ea:84:aa:c0:7d:09:d7:18:3a:c5:74:
b3:90:89:04:fe:65:6a:67:cc:b2:7d:6c:af:87:f6:
45:81:de:46:43:67:df:bd:0c:e9:20:70:fd:3a:08:
0c:6c:b6:df:18:98:b1:ab:4e:a9:01:9a:ea:2d:a3:
c9:8b:d8:ca:67:6f:fa:a0:27:1b:18:74:88:a6:cf:
ac:1f:2f:a5:28:57:3b:a5:ac:29:c1:38:17:5d:f2:
19:ae:b0:a1:64:aa:e5:6b:dd:52:6a:bc:26:d8:60:
0e:b4:88:ec:61:04:f2:d4:aa:e1:f3:74:9a:a6:0e:
e5:50:92:f1:f8:1a:be:1a:d9:36:bd:67:40:d5:a1:
b0:bf:31:60:95:1f:78:11:96:fa:13:0f:b7:dc:96:
7a:08:0e:b6:ad:5b:fa:43:65:79:f2:bf:aa:b9:a3:
1b:c5:eb:a3:14:48:f1:99:9a:27:30:91:a0:d1:24:
6d:bb:28:8c:f1:99:0f:4e:25:ed:f4:c4:44:19:69:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8C:96:0B:AD:31:16:6E:66:49:11:59:3B:41:53:D0:27:F0:53:A7
X509v3 Authority Key Identifier:
keyid:4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:15:80:05:c4:1e:63:55:5a:8c:7b:1a:34:aa:10:04:3f:70:
1c:3a:55:f6:4f:2c:69:c9:62:34:84:61:f6:e5:de:cb:98:dc:
2f:23:90:ce:ca:c8:75:0c:f7:8f:e8:97:2c:96:62:47:66:b5:
02:32:ac:b4:d5:c2:0f:75:a2:3d:63:8f:85:46:8e:ac:fb:99:
12:1f:d9:21:36:d0:cc:65:34:87:94:db:a7:76:7d:cd:8c:18:
84:5f:89:45:1f:84:88:c8:e6:d3:3d:a1:55:b5:13:f9:f4:08:
ac:0c:84:50:82:7f:bf:03:87:e1:af:af:1a:90:35:be:af:00:
15:12:f0:45:d8:3f:3d:64:34:5f:c9:55:02:73:67:99:be:b6:
78:39:97:c5:dc:b9:a3:c3:9a:09:f1:46:9b:66:af:3e:30:b8:
2a:04:c2:4e:36:8d:4f:c6:44:0f:dc:52:2b:03:f7:19:a4:b7:
71:f4:67:e2:89:57:f2:37:e5:ea:c1:f8:ea:fc:98:8d:7c:9d:
6d:1c:a4:b5:b8:11:ba:8f:e5:0d:51:49:42:9f:58:5b:7c:7b:
52:87:8f:05:f9:34:b0:8b:b7:c3:7d:af:3e:72:c4:1e:59:bd:
8d:68:f2:f2:1c:78:07:bc:17:3e:a1:c6:d5:85:46:ee:b7:01:
5e:6a:67:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:07 2025 by rpki-client