Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
File: sx9k3lYY91wZ31E5U_ZGmHngh3M.mft (raw, json)
Hash identifier: 8A8C035V+Xhfs93u8pHc9LK2ni/S16EgOwkKlUDeESA=
Subject key identifier: 2E:B6:88:F6:77:E2:FC:3D:A1:43:6F:93:AD:63:FB:8B:45:42:E9:DB
Authority key identifier: B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
Certificate issuer: /CN=b31f64de5618f75c19df513953f6469879e08773
Certificate serial: 0199FBEABF0F10E5EEB0F38F9C79F6AC74FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
Manifest number: 04CD
Signing time: Sun 19 Oct 2025 10:01:29 +0000
Manifest this update: Sun 19 Oct 2025 10:01:29 +0000
Manifest next update: Mon 20 Oct 2025 10:01:29 +0000
Files and hashes: 1: UakAn5yyBqPOSEIfTXfDNciKFEs.roa (hash: btkptULyCnT6MWQIHbySDipzPG0rdTy55cYQICbq99M=)
2: sx9k3lYY91wZ31E5U_ZGmHngh3M.crl (hash: wtoz0C8/FiFqyqMniSvgYLlu1XvuCxDBHKYGFTrNM+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:bf:0f:10:e5:ee:b0:f3:8f:9c:79:f6:ac:74:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f64de5618f75c19df513953f6469879e08773
Validity
Not Before: Oct 19 10:01:29 2025 GMT
Not After : Oct 20 10:01:29 2025 GMT
Subject: CN=2eb688f677e2fc3da1436f93ad63fb8b4542e9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:1f:bc:4e:30:c8:51:8a:20:fe:e7:e7:39:
4c:23:a2:ff:6e:11:35:4f:6f:0e:39:c0:78:53:f1:
ba:14:8f:75:69:22:aa:65:5d:d7:d4:f2:60:b2:5e:
c9:49:67:a3:04:a8:33:ab:41:62:81:fe:e6:de:02:
7a:5a:7c:90:a0:bb:d0:6d:cd:71:8d:3e:44:cf:bd:
c5:c1:17:cc:0d:ef:6e:c0:9c:1e:55:48:95:de:0b:
74:ef:13:60:35:04:d4:e9:4b:4d:7f:9c:98:39:cd:
b6:c4:0f:d6:2c:32:6c:f2:b0:f2:0c:5d:ba:47:6d:
d1:af:74:32:dc:e4:7f:b0:b4:ae:df:ed:e3:b1:b8:
2a:96:fd:bc:bb:74:0b:98:11:3d:5a:a6:df:49:63:
36:d4:1e:1a:7a:95:8e:a9:9f:e2:95:18:72:28:cc:
87:05:a7:d9:ca:d3:89:90:3b:0e:d2:1d:34:7b:5c:
eb:5c:fb:83:ea:ba:7b:94:0e:63:90:07:e1:b8:c1:
4d:02:0a:e7:72:6b:14:1d:6d:5a:1b:82:e1:b2:bc:
39:28:6b:4c:03:f7:c8:6e:de:6e:02:64:c2:21:f2:
d5:f9:17:b1:e3:27:2c:1c:e8:ce:3a:32:cf:16:56:
dd:87:9f:14:bc:9b:83:82:a6:fe:ec:40:1b:d9:60:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B6:88:F6:77:E2:FC:3D:A1:43:6F:93:AD:63:FB:8B:45:42:E9:DB
X509v3 Authority Key Identifier:
keyid:B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:60:51:08:06:ad:09:a7:0f:56:a4:0d:59:c5:5d:3e:71:e5:
84:38:44:81:8b:ad:3b:b6:ea:10:7c:74:b7:74:fc:58:0d:25:
32:08:af:97:fb:ed:f9:e5:49:ac:7a:9a:01:df:8b:aa:e5:c4:
a4:93:f1:cc:0b:ec:06:7b:d1:69:db:9d:2d:de:35:8a:68:12:
33:c8:9f:2a:c4:73:f5:18:c4:16:fd:cb:fe:a7:89:bb:63:44:
b5:00:e5:72:aa:03:d9:98:93:4f:32:3e:69:f8:03:18:bf:e9:
48:d6:ef:0d:96:ff:12:d1:61:0f:a5:c1:54:20:0a:64:f3:0d:
3b:29:bd:65:c9:b0:4f:38:a7:f3:46:f7:ef:84:b1:e8:36:cb:
89:88:f7:a6:cf:41:8c:7b:2e:7e:d3:c0:76:e7:fa:53:e9:ab:
2c:ca:6b:80:88:e7:fa:f9:1e:f1:13:ca:a6:94:38:ab:a4:ef:
42:e3:de:e0:d1:d1:90:f1:64:e4:c9:40:85:46:68:52:f1:3b:
ba:87:81:85:5e:bc:90:b7:d6:42:c5:1b:11:4a:48:a1:f3:d9:
5c:b1:7c:05:66:e9:c0:f6:c9:8d:b7:99:ea:b8:bd:61:28:f0:
bb:1a:95:a4:8c:f4:17:55:76:29:f7:e2:f7:d6:e2:50:5f:e4:
8b:26:c0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:16 2025 by rpki-client