Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
File: sA09NPYeSEaIv_-cxwN1WCN3WZg.mft (raw, json)
Hash identifier: tMegfzStp+jUQ3p2uSObe5V9C9NuUghN1AfhdesAtVY=
Subject key identifier: 8C:95:B5:A3:01:13:F7:A2:5A:E7:76:5E:CA:AC:86:06:EF:E8:53:11
Authority key identifier: B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
Certificate issuer: /CN=b00d3d34f61e484688bfff9cc703755823775998
Certificate serial: 0199FE472C9A7724B30252C4F52B9D59BF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
Manifest number: 1397
Signing time: Sun 19 Oct 2025 21:01:41 +0000
Manifest this update: Sun 19 Oct 2025 21:01:41 +0000
Manifest next update: Mon 20 Oct 2025 21:01:41 +0000
Files and hashes: 1: LKbJBE8NWEbtvlmwjvUv8EH6lzg.roa (hash: OvzM1ONuWDYGL3UTKmOuYTSxh3U96Ifed1WChkSuccI=)
2: sA09NPYeSEaIv_-cxwN1WCN3WZg.crl (hash: Ik18FP7SJD0J23nS9F12mHsvM0TppQpnub47tpw/3B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:2c:9a:77:24:b3:02:52:c4:f5:2b:9d:59:bf:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00d3d34f61e484688bfff9cc703755823775998
Validity
Not Before: Oct 19 21:01:41 2025 GMT
Not After : Oct 20 21:01:41 2025 GMT
Subject: CN=8c95b5a30113f7a25ae7765ecaac8606efe85311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:59:df:ce:de:9a:87:4e:38:65:f8:0c:62:f5:
93:43:ce:bf:82:29:03:83:a0:70:26:07:ef:4e:4d:
cd:f3:1b:93:a3:e4:7e:94:bb:9b:ce:fd:2f:62:19:
f6:c5:66:67:1d:da:21:36:9a:9f:50:03:df:eb:e2:
c2:09:4e:a5:31:10:df:76:d6:af:d4:d8:88:63:5b:
d2:a3:01:ec:40:ff:0e:53:be:2e:ac:43:d3:a3:af:
53:04:37:21:02:d4:65:a4:ab:ee:47:ac:37:d8:1a:
41:c7:22:70:ee:1d:10:1c:5b:65:83:99:1e:0d:ff:
66:97:dc:ee:ab:30:49:70:8b:d4:56:9e:af:e3:e1:
2d:0f:03:32:b0:8d:28:d2:46:53:4c:fa:d1:53:6c:
03:79:fa:96:69:79:07:f7:6f:2a:8a:a8:6d:37:1f:
cc:f2:79:6f:3c:11:2a:51:34:42:9b:fa:94:f9:aa:
b2:0e:e2:0e:68:d0:dd:f9:d3:1d:54:ca:c4:88:8a:
a6:31:5a:dc:29:b0:5b:96:d7:59:3a:74:ba:b5:10:
a5:ae:35:3d:b6:9e:7c:ef:67:4f:7e:18:71:8d:d5:
7f:af:b4:e4:c4:53:f8:e0:68:d9:66:65:89:79:d8:
c1:29:2c:ff:30:60:b2:a0:c0:4c:c2:89:9f:d4:85:
22:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:95:B5:A3:01:13:F7:A2:5A:E7:76:5E:CA:AC:86:06:EF:E8:53:11
X509v3 Authority Key Identifier:
keyid:B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:81:b5:bc:e6:c7:f6:2d:9b:e0:84:32:66:cb:5e:89:89:8a:
e1:2a:32:a2:0e:c3:5a:e3:97:ac:37:db:4f:b6:40:40:24:cb:
78:66:88:dc:af:4a:50:2d:0c:49:f4:76:9d:7e:e0:ff:39:ee:
9c:d4:35:94:bc:97:8e:8d:e4:28:1e:50:f3:59:7c:8b:1d:ef:
8c:4c:a3:02:20:71:1a:e4:6c:b3:b4:6b:26:4b:e0:6b:ba:f9:
66:35:ae:c6:34:af:a1:7f:e8:a1:5a:e3:54:40:f0:fe:af:d3:
3d:7a:a8:ad:13:25:dc:0a:62:f5:a4:c6:c7:2b:02:63:12:83:
18:4a:67:66:2a:58:cb:00:51:8e:9d:60:ba:42:d0:f5:94:3b:
3c:55:67:a0:fe:e9:04:6a:ba:51:b2:c7:c9:44:9c:c7:58:ee:
45:23:3c:9a:df:81:36:61:92:5a:36:db:f6:7a:74:cd:6d:01:
6c:d2:12:03:3f:a4:a3:e6:b2:1d:b1:6b:cc:3f:3c:0e:9a:14:
d0:6a:d8:ab:07:44:3c:00:6b:e5:5f:93:82:f8:47:18:d1:f3:
d2:1f:8f:12:6f:bd:69:c1:73:f8:81:89:30:b0:74:ee:a8:92:
7f:f6:74:5c:c1:be:50:40:e6:d6:ac:9a:96:1a:8d:fa:a6:bb:
70:65:02:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:08:03 2025 by rpki-client