Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
File: sICdwHvAd1GY8vMVVBUvNWqD93A.mft (raw, json)
Hash identifier: 0U/MyfhG42osvU4fyOE3PaXk4kdKvxhSHQXUcAgvsZk=
Subject key identifier: AC:EE:9F:EF:42:09:0C:67:5C:9F:DA:94:00:A6:42:3A:93:83:B2:6D
Authority key identifier: B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70
Certificate issuer: /CN=b0809dc07bc0775198f2f31554152f356a83f770
Certificate serial: 019A02C79CAFFBC3E4DC8C0F76CF23787F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
Manifest number: 1679
Signing time: Mon 20 Oct 2025 18:00:27 +0000
Manifest this update: Mon 20 Oct 2025 18:00:27 +0000
Manifest next update: Tue 21 Oct 2025 18:00:27 +0000
Files and hashes: 1: _vqUTJBaKVA__-YzImtaOgUdlPc.roa (hash: WjwzW+i6IqptZA1G2R9oYtf2Xiry6o+GVW/+RmHCnfA=)
2: sICdwHvAd1GY8vMVVBUvNWqD93A.crl (hash: enj4WjHDR3q2GmbQDHpi0QZyd7Jl9+ZgulnoKVMUnQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:9c:af:fb:c3:e4:dc:8c:0f:76:cf:23:78:7f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0809dc07bc0775198f2f31554152f356a83f770
Validity
Not Before: Oct 20 18:00:27 2025 GMT
Not After : Oct 21 18:00:27 2025 GMT
Subject: CN=acee9fef42090c675c9fda9400a6423a9383b26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:54:bb:17:69:bd:fd:14:e6:a8:eb:03:1d:55:
34:0d:5c:c7:bf:9c:dd:9a:b6:fe:68:5c:6e:4f:f7:
3b:31:32:0e:b6:6e:05:09:c2:05:7f:74:55:ea:e2:
55:4c:c9:6f:eb:d7:0b:34:f8:c3:71:b3:e9:c9:c6:
66:cf:fd:10:47:8b:39:be:39:f1:80:49:17:26:80:
b9:ed:69:4b:e0:e0:7d:45:2b:0b:7d:31:2b:d7:c3:
b4:63:29:ec:9a:67:02:9a:ae:7f:25:e9:dc:b9:53:
c1:45:87:a1:bb:c3:04:57:fc:bf:1b:08:92:15:c6:
e8:3f:7e:15:20:6b:e4:9d:bc:1e:f7:bc:bd:f5:58:
e9:19:d6:96:1d:84:9e:e8:d2:ed:17:a3:8c:c2:b4:
4a:17:b3:cd:f4:af:4e:ab:29:71:a8:57:7c:2a:49:
36:3a:7d:79:a7:b2:1f:ab:ca:4d:d7:1e:90:e8:e0:
98:94:16:70:07:d8:48:73:5f:a0:c3:9e:b0:73:ad:
2b:ee:fa:2c:c7:f7:5f:1d:17:a0:bc:0b:98:fa:98:
e0:8f:e0:46:16:e2:21:dc:3d:7c:61:c8:6e:78:d3:
eb:d5:cd:fe:ee:66:69:a4:77:f9:9f:cc:cc:f2:ef:
35:ae:64:b4:26:27:6e:bf:fe:8b:89:db:83:36:be:
a3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EE:9F:EF:42:09:0C:67:5C:9F:DA:94:00:A6:42:3A:93:83:B2:6D
X509v3 Authority Key Identifier:
keyid:B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:bb:4c:21:18:ee:35:15:a4:75:7d:75:c6:f7:8f:c4:41:35:
4d:3f:c2:e5:de:07:99:0f:06:3f:16:84:4a:ab:9c:00:14:04:
ce:b8:34:47:af:9a:d3:34:1b:32:f2:28:0f:92:cb:a2:bd:4d:
59:2d:19:c5:aa:6d:46:31:34:ba:82:f9:a8:27:59:8e:e7:13:
ca:7d:3f:2a:d3:3d:03:0d:a6:22:35:19:6c:79:b8:57:21:b0:
54:61:fa:1f:3f:e7:d0:10:f2:29:77:52:d2:26:6a:6a:da:7f:
cd:a5:c5:d3:b7:9f:58:1c:8e:15:00:9b:5e:eb:8e:64:48:3e:
50:1d:75:63:3e:95:dc:09:e4:81:44:28:72:80:67:a1:63:39:
44:ef:4e:74:84:de:80:26:5c:5d:81:99:7c:dd:bd:21:d2:70:
a8:8e:e2:00:dd:3d:b9:9a:22:f6:bf:78:48:be:17:ed:c4:c8:
03:c2:a7:9f:f3:4b:55:ec:a3:10:29:36:cc:63:c7:24:98:8a:
96:dc:d7:2d:54:75:56:50:11:68:14:96:d2:af:37:d4:95:bf:
a5:d4:51:4a:4c:ce:94:71:b5:25:2a:43:51:b3:54:0a:51:19:
98:cc:22:71:ba:0a:eb:8a:aa:5d:79:23:ad:0b:59:e5:3a:46:
e9:f1:cc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:06:50 2025 by rpki-client