Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File: s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier: q8N4GygDxYbQ5CUKR3j1xSgvyAqB3dqSERXAjwlBZUA=
Subject key identifier: 26:0C:B8:A1:0B:52:AA:4C:17:B9:86:D4:AD:73:3E:74:53:59:40:C2
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 0199FC2186C1B000990119147A813F62637C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number: 16F1
Signing time: Sun 19 Oct 2025 11:01:19 +0000
Manifest this update: Sun 19 Oct 2025 11:01:19 +0000
Manifest next update: Mon 20 Oct 2025 11:01:19 +0000
Files and hashes: 1: 9-NB3ppe0EfeL2Nj37oF8VJ41t8.roa (hash: ZMKYndtOmSHpSKO5kfkDg42yZItGmF3H5NrIrUVaQPk=)
2: W3ef7yk_8thOKV8fePQf_c3aBKs.roa (hash: q4TpxDQr4+wv6OyV3D6r4UE1e0P7/7+4PMrtZl4uXJc=)
3: YRU1Ojg5qyXEoXOhvO7oLvQPC8c.roa (hash: TDJgwlET1jOQj6C/tybMD3s4rcsYrcr30h1aS7JqjFc=)
4: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: +OZAByyyemOm3RFrb/AzIdOkPLFW6Hy2l1RPlYqwYOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:86:c1:b0:00:99:01:19:14:7a:81:3f:62:63:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Oct 19 11:01:19 2025 GMT
Not After : Oct 20 11:01:19 2025 GMT
Subject: CN=260cb8a10b52aa4c17b986d4ad733e74535940c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:5a:d9:9b:02:30:76:22:27:c4:df:ef:7a:
7b:31:1d:f5:db:6c:8a:0f:cc:de:2a:8f:41:e5:a1:
19:a8:ff:86:11:a1:24:5a:49:63:61:44:e2:ea:6a:
39:bf:5b:84:1e:7e:f8:69:9a:6c:70:e1:25:d9:7a:
ba:60:70:b4:d4:39:b6:75:1e:12:4c:f8:b9:8d:17:
fc:9a:41:c6:2a:d6:45:91:6e:6c:41:fa:42:69:ac:
43:a4:ef:58:72:f5:2a:d1:29:cc:c5:3d:00:eb:21:
03:e2:01:d7:3a:52:8e:c8:14:85:e6:7c:36:87:7d:
d5:17:ad:ca:20:47:b6:38:c4:ff:c3:ba:f3:4f:a7:
35:4e:17:5d:1e:a7:13:55:b5:c1:0c:6e:9f:c2:b0:
30:a8:80:46:b5:32:46:8f:b7:04:19:55:7a:60:7b:
da:eb:94:86:66:8b:be:c6:7e:ad:78:51:d8:f4:13:
6f:22:e5:f7:4a:30:67:7a:d3:85:2b:36:8f:15:2b:
26:49:81:60:da:ac:cf:7a:e0:f2:2e:d1:03:65:2d:
cb:b0:a2:c6:a3:76:c2:99:9e:ca:ba:b6:1d:9f:c6:
98:0f:44:da:98:f8:35:66:85:e1:17:d6:28:91:be:
b3:2f:2b:a9:7c:18:56:75:58:df:ea:11:5e:54:ad:
46:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0C:B8:A1:0B:52:AA:4C:17:B9:86:D4:AD:73:3E:74:53:59:40:C2
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a9:96:c5:d9:4b:be:3d:34:94:fe:a8:32:f6:5b:1d:56:8a:
1b:0f:59:d8:25:93:d8:95:ea:d8:1b:46:44:2a:cb:48:ef:95:
29:6a:69:d8:8f:57:55:94:5c:b9:d7:34:33:18:3d:18:d9:97:
ff:16:68:e3:57:3a:bd:1f:04:6a:d9:58:b1:c5:f1:5c:57:91:
6f:b8:26:26:6e:28:0b:60:5a:54:66:a7:bd:d5:f1:9c:c6:7b:
1b:4a:f1:00:fc:22:17:55:e1:76:25:37:70:d9:2e:e9:81:d8:
2e:30:df:7f:99:cc:64:83:9c:7b:7b:39:71:8f:7d:1c:d3:f3:
44:f1:7c:60:cc:91:ae:de:30:fe:f0:fc:e4:19:a2:58:4a:e6:
08:b1:2d:86:99:7c:f0:68:aa:ec:ec:9d:bc:b8:79:35:24:b5:
00:b5:71:a4:a9:8c:dd:ba:aa:c9:66:f2:89:aa:81:ab:f9:b6:
b2:a8:c5:78:a6:ec:7b:c9:0b:94:8e:61:09:dd:d1:9a:97:bb:
84:03:77:bd:32:9b:ec:80:67:ee:b3:8e:45:7d:95:38:89:e8:
48:7b:bf:bb:32:cf:72:f9:8e:c8:c8:d4:0e:fe:35:12:59:9e:
8c:9e:cc:46:94:75:1a:aa:85:7b:1c:14:e8:26:fe:f3:cf:a4:
6e:f1:11:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:51 2025 by rpki-client