Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
File: sWmklwDgw7jjmnkTDJh6UADM_-I.mft (raw, json)
Hash identifier: B9thBg4VF/Cey5WHnseTTthO99YX9pUFCNy1Lwb8qIY=
Subject key identifier: 6D:67:9D:4D:AE:ED:4B:D4:AC:62:6A:F1:29:61:C1:A6:68:74:E1:7D
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial: 0199FB459B84DC442781E302B0E5ACFF780A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
Manifest number: 126A
Signing time: Sun 19 Oct 2025 07:01:06 +0000
Manifest this update: Sun 19 Oct 2025 07:01:06 +0000
Manifest next update: Mon 20 Oct 2025 07:01:06 +0000
Files and hashes: 1: 1-ThtHy19ctjaQuYuBhqSQqIE9WU.roa (hash: V9qRoZ+PC8g7OlSlh2fBbc43/EN/zOPrb+QtN2UkltA=)
2: 30Dio0Gszjx6FTAe-4VlPrqwyTc.roa (hash: psw6/BxDCb7H27J6+J3WPOwk2OKgWYIKlnVQ23OKdwQ=)
3: sWmklwDgw7jjmnkTDJh6UADM_-I.crl (hash: GX5jwMY3FZurz2zw/eKMfZhywPsZt5iqrY+035NUN3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:9b:84:dc:44:27:81:e3:02:b0:e5:ac:ff:78:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Validity
Not Before: Oct 19 07:01:06 2025 GMT
Not After : Oct 20 07:01:06 2025 GMT
Subject: CN=6d679d4daeed4bd4ac626af12961c1a66874e17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:c5:27:b0:60:ce:32:8a:b8:87:db:9b:00:
ad:10:71:65:8d:e3:c4:3f:01:09:5f:09:c0:37:34:
79:36:45:cf:7a:63:cc:6b:75:0d:d2:62:c0:c6:d9:
ab:95:3e:2a:df:6e:92:73:f8:b7:32:fd:f8:61:92:
a0:d4:64:8f:fa:b2:62:56:c9:d9:9d:fb:40:aa:60:
37:4a:05:2d:4e:a8:a1:a3:f9:0f:4d:05:26:d6:23:
16:80:73:6b:d8:be:a4:88:a9:12:48:d9:1c:e1:7a:
41:fa:05:f2:c4:40:df:8a:ab:09:00:af:f8:55:c5:
d4:3f:78:9a:84:c5:08:f1:db:ca:e1:89:b8:03:38:
9a:85:36:2c:bf:e5:25:4a:5f:cd:b1:bc:6b:ef:24:
02:e1:46:d9:32:61:6a:e6:5a:1e:86:d1:36:ff:d1:
73:89:9a:aa:a1:48:55:64:94:27:b5:de:c3:ca:29:
c4:57:4b:5d:e6:59:10:99:e8:56:dc:fc:12:61:e7:
36:a2:53:29:da:03:49:77:d0:87:d3:5a:4e:d6:00:
76:c2:13:09:e7:10:a2:59:bb:2e:dd:f3:73:c2:a6:
a2:d4:13:f3:a6:52:5e:f6:5f:e5:81:db:83:53:ac:
63:df:8d:97:1b:25:0d:c7:4a:d7:b6:9f:22:2e:8f:
8c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:67:9D:4D:AE:ED:4B:D4:AC:62:6A:F1:29:61:C1:A6:68:74:E1:7D
X509v3 Authority Key Identifier:
keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c3:ae:fe:49:ba:a2:0f:3e:54:37:30:25:1a:24:19:f3:9d:
c9:5d:84:08:96:f7:bd:b6:98:57:83:0d:be:8f:a6:3c:0c:a4:
42:29:77:55:12:53:33:4c:c2:a0:08:6c:c2:df:c9:b7:13:63:
1e:06:0a:60:a9:7b:83:21:4d:4e:10:ba:f3:62:da:88:b8:e7:
6a:bc:8d:f6:40:61:05:26:61:02:04:11:0c:d5:10:e2:57:99:
f8:ce:56:57:ec:c0:8a:ab:43:af:ff:7d:0d:b6:f5:00:06:59:
2c:24:ef:43:48:e2:00:65:8f:9e:1a:11:c1:9d:62:c0:a1:63:
66:a6:11:22:d2:8c:4a:5f:9a:89:e9:69:c7:d4:0b:f0:59:fb:
91:15:eb:47:bb:83:4f:04:6d:1a:d8:6e:37:f3:bd:71:4e:f1:
64:a0:6d:99:ac:78:43:9d:c6:30:03:85:df:69:fc:88:07:60:
cf:c3:19:87:e6:4b:87:af:8e:86:4e:be:9a:63:1b:98:49:f4:
7e:57:c7:2d:52:c8:60:be:c5:2a:c1:56:46:91:73:92:ed:b1:
27:aa:77:33:b1:05:55:f9:3b:f5:96:2f:c6:8d:4e:ad:3b:a0:
b0:2e:95:46:ff:bc:f6:0e:e2:9f:ce:2d:e1:96:38:b6:51:de:
c3:30:b0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:49 2025 by rpki-client