Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
File: svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json)
Hash identifier: zTqvy1oSKJyDAbr4RJq7fFWnGETSaj1A784ipQlaGwU=
Subject key identifier: 47:13:A1:C9:48:74:E8:E9:DA:B7:0D:2E:FE:E5:21:82:E5:6A:01:14
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial: 0199FC8F7AEB14462317462753945CFBCA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
Manifest number: 1072
Signing time: Sun 19 Oct 2025 13:01:25 +0000
Manifest this update: Sun 19 Oct 2025 13:01:25 +0000
Manifest next update: Mon 20 Oct 2025 13:01:25 +0000
Files and hashes: 1: bkaEgwUfFQuvU4deHKYEq645oxo.roa (hash: a6t899hSFrNnCxDeJsEHX7KWBkAwoAJJxMP3KbPkcsM=)
2: gM8Vs4rZduYc-FMusqbqCtswvSM.roa (hash: PdGvc2+s2b+cxeznU9E/uPp7OuLxD8n8FSf7bdTA3Io=)
3: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: W9EqrAcHpmJqaktEVzZ1KO15iCCg/UIgrOg2IUs7VQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7a:eb:14:46:23:17:46:27:53:94:5c:fb:ca:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Validity
Not Before: Oct 19 13:01:25 2025 GMT
Not After : Oct 20 13:01:25 2025 GMT
Subject: CN=4713a1c94874e8e9dab70d2efee52182e56a0114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:18:ee:f2:d4:80:c9:b4:d9:31:1f:3f:96:7e:
f9:58:5c:37:0f:23:a0:ba:6d:f8:4b:82:11:e2:ff:
29:dc:69:5e:5d:a9:07:42:66:51:05:9f:bc:6e:89:
39:27:5b:15:e9:87:35:43:ed:7d:61:7b:de:6d:00:
46:c7:e5:2a:4f:c9:6a:bb:17:18:76:75:13:44:e2:
70:74:d3:62:f3:9b:0a:75:75:f3:c0:7d:91:7a:ed:
b1:a9:de:4f:5c:a9:d9:b0:9f:45:81:6e:23:66:a7:
c4:35:4e:9b:6c:f5:dc:66:5c:2f:62:2b:ae:66:d7:
b0:a3:a1:a7:7f:2d:f5:fb:12:d9:86:db:d4:4e:af:
ce:bc:29:4d:13:22:a6:b6:88:8e:fa:f4:4c:b6:d0:
c2:2d:4c:36:eb:2e:21:dc:0b:82:32:2d:61:d0:f9:
45:f9:82:53:9f:21:96:8d:98:86:c3:77:c5:d7:99:
98:a1:fe:92:44:af:8d:e8:73:84:87:6d:bf:b3:a5:
2f:ed:3e:7f:26:a0:7a:2a:a1:55:10:2c:32:9b:6e:
5e:20:1d:f2:43:99:d7:44:7d:4a:44:a0:28:68:f6:
97:3d:b8:d9:cc:28:6a:4f:56:04:c6:c5:3c:38:70:
43:2d:0b:3b:fb:95:44:a4:2e:24:b1:f4:f2:ce:48:
3e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:13:A1:C9:48:74:E8:E9:DA:B7:0D:2E:FE:E5:21:82:E5:6A:01:14
X509v3 Authority Key Identifier:
keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f3:d5:2f:62:96:cb:5f:0f:de:91:a8:71:d6:8b:06:ed:83:
26:c0:f9:aa:a8:00:53:01:82:18:91:8c:de:d9:46:1a:bb:29:
03:a3:81:54:c0:30:a8:0f:39:f6:73:bb:80:9d:bb:d5:fe:19:
08:24:21:1f:ad:a5:ba:18:e3:7b:35:ad:f5:88:38:bd:25:b5:
34:a0:fe:76:df:49:a9:db:84:e3:a9:e9:71:63:ae:59:43:1b:
09:92:49:e7:47:69:a8:2a:98:61:e4:19:32:64:22:40:b1:be:
44:dd:5e:c0:c6:10:1d:62:7b:e4:51:50:30:c4:d0:3b:a0:59:
db:4b:06:2e:16:19:15:07:3c:4d:fb:0c:15:92:36:13:0f:ad:
34:83:09:af:75:a7:d3:98:0a:19:cb:9d:c7:90:34:eb:a6:33:
80:40:f9:a2:5f:64:87:98:ed:cb:6d:84:82:04:04:2a:37:7c:
0a:cd:71:01:3d:1a:b8:2e:8c:93:df:9c:65:01:bf:00:73:b5:
c2:0d:a5:2d:4c:d6:d7:19:b0:41:a0:45:81:78:35:24:a6:be:
2d:53:e1:d3:1a:d9:ed:39:c4:28:88:61:f7:d1:95:8b:fc:75:
ce:f2:fa:9b:ed:08:b7:9c:7e:3e:11:e8:fc:f9:cd:84:30:52:
bb:4c:0b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:26 2025 by rpki-client