Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
File: sFRCxP_pwddh58VpNg6tBCQ4-QM.mft (raw, json)
Hash identifier: CzBheer5Vwv+ZJLeNxXkMnRwK/W/Y1CmO+HznI9Urpg=
Subject key identifier: 83:37:64:82:2E:59:48:3F:D5:72:1F:2E:F0:B4:F4:62:42:00:C6:12
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial: 019A011157769B5DBBF50EA3E0A9889DDF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
Manifest number: 149D
Signing time: Mon 20 Oct 2025 10:01:44 +0000
Manifest this update: Mon 20 Oct 2025 10:01:44 +0000
Manifest next update: Tue 21 Oct 2025 10:01:44 +0000
Files and hashes: 1: 2eKsq5jA6VcPDqKfgIi0E91JruI.roa (hash: qGG/9s4LOddy+BisdFXc5EQ3ZhAY8xD4+uBXz/g3pwU=)
2: gEXvMQFDNz1aGEXTxBfhGOGVeNo.roa (hash: ajVAuxCTYl0Gl8xjRk/pbvxecOxPr7KE3CecnpOLH8Y=)
3: sFRCxP_pwddh58VpNg6tBCQ4-QM.crl (hash: K12oADf6zAaB2lZVGK05cWdYMUt7YPaCl6WqzKGQ4Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:57:76:9b:5d:bb:f5:0e:a3:e0:a9:88:9d:df:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
Validity
Not Before: Oct 20 10:01:44 2025 GMT
Not After : Oct 21 10:01:44 2025 GMT
Subject: CN=833764822e59483fd5721f2ef0b4f4624200c612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:34:02:42:7c:74:e3:63:e5:57:d7:b2:36:b2:
fa:90:c0:fc:3e:f7:6f:fc:f3:af:ee:1f:88:75:40:
5a:68:85:e1:7a:53:7b:9e:ed:79:c9:c8:a8:09:85:
ed:25:10:48:dd:14:e2:e6:55:25:d2:23:e7:73:2f:
cf:37:2c:bd:ba:a8:4d:2f:d2:f2:d5:cb:a0:1b:36:
e5:e0:b0:ca:6b:29:06:90:39:42:0c:bd:68:6f:e2:
76:64:25:c5:74:18:c5:ce:4a:9d:50:e2:8c:cf:09:
b7:1b:f5:0c:9e:2c:4a:85:e1:3e:a6:1c:cf:c8:29:
f4:9a:65:75:96:12:81:da:4f:e8:dc:53:ce:0a:75:
0a:01:33:b5:45:4d:a6:1d:5f:b1:96:31:69:b4:99:
ec:9b:bd:9f:f3:2d:a1:7a:85:2c:29:c2:f5:6c:f1:
08:e2:11:ba:aa:ac:81:5a:7b:f9:0c:7a:fa:bb:bf:
91:32:08:88:42:35:43:6e:6f:a6:fb:d1:06:c3:ac:
03:55:5c:44:62:72:20:d3:0a:c3:16:76:0b:7c:33:
b3:80:7e:c1:c2:98:9c:c5:26:89:f5:62:b6:c7:ad:
dc:fa:32:cc:1a:ac:08:f8:56:8e:8c:f4:b4:a2:a6:
98:01:8d:a5:1e:fb:66:93:0c:d6:3e:39:54:c5:77:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:37:64:82:2E:59:48:3F:D5:72:1F:2E:F0:B4:F4:62:42:00:C6:12
X509v3 Authority Key Identifier:
keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:08:c0:34:82:1b:51:8c:91:fe:47:82:70:48:61:82:7e:d8:
9a:82:1a:d7:f1:71:6f:d4:83:c2:09:fe:8d:ba:68:67:65:33:
3e:4a:be:dd:e7:43:88:54:83:3d:4c:77:2b:83:57:59:66:69:
1d:fe:a1:9b:1b:95:e0:99:1f:63:c1:aa:ca:cd:ce:9e:07:0a:
57:ff:d6:43:27:38:89:d0:3d:3b:22:2a:8e:71:81:f6:8e:e2:
05:94:d6:e1:28:b8:e2:98:2b:e9:28:9d:f5:c8:71:15:3d:f6:
89:11:17:6c:4e:1f:e1:36:fc:a5:85:f5:38:b9:8e:46:f3:43:
0c:3c:fa:a9:83:fc:f9:ff:e9:d4:b9:ed:6e:9c:68:19:71:2f:
eb:e7:26:d8:04:57:07:5b:81:93:4c:91:e4:ba:1d:5d:b8:4c:
64:af:70:3e:2a:90:66:24:e1:b4:39:c3:5b:fe:f1:0c:f0:60:
7b:98:7d:34:9a:e0:46:e9:8a:57:7e:a5:d1:eb:30:3b:7d:54:
eb:a6:bd:e1:a3:39:9f:7f:33:b7:c5:ff:d1:23:62:56:f9:24:
ad:a4:f8:ad:df:20:6b:8a:9c:c2:2a:b8:f0:eb:7c:9d:0e:b8:
79:2e:fc:c7:4c:26:fb:6f:c1:14:e5:1c:91:81:38:10:b9:86:
ed:38:3d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:13 2025 by rpki-client