Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
File: sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft (raw, json)
Hash identifier: vnVJ/cPZ06GoStsnzQ6hVlZXNzlUkWuSsamCiEL4D1s=
Subject key identifier: CB:05:37:B1:5D:D7:28:81:D5:8E:AD:50:18:6D:6C:58:EA:66:C7:7C
Authority key identifier: B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
Certificate issuer: /CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Certificate serial: 0199FD340845525771179549F295A2E30011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 16:01:09 +0000
Manifest this update: Sun 19 Oct 2025 16:01:09 +0000
Manifest next update: Mon 20 Oct 2025 16:01:09 +0000
Files and hashes: 1: IZAxEHA5n8YPukULkPEQv7owY4Y.roa (hash: vkfnMd+CZAW7CnrGWVozJx3AoLaV453dmGIo6rw9ME8=)
2: mA3rys3eEYCw0R5GwYAKoJlEh2w.roa (hash: Y+HfCJ1pTuTaQ4aj+4iQZxk3GQcy6uxEiMl5g7TwtZg=)
3: sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl (hash: wAa68citz+HMuGlwwnreafZY3JDh1OPF7m/bkFwXyXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:08:45:52:57:71:17:95:49:f2:95:a2:e3:00:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Validity
Not Before: Oct 19 16:01:09 2025 GMT
Not After : Oct 20 16:01:09 2025 GMT
Subject: CN=cb0537b15dd72881d58ead50186d6c58ea66c77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3d:4c:47:fc:c3:ea:74:f0:3c:c3:3d:a0:f9:
ac:63:3e:ae:3d:ea:24:9a:eb:50:86:c8:ae:5b:55:
76:d1:30:0f:2d:0e:e7:95:c4:4a:d7:ef:5e:7f:6f:
ef:28:d3:99:ad:d6:5c:bb:f9:a2:6a:fa:8a:33:66:
e6:ac:0a:6c:17:c8:c2:4f:9e:48:74:a6:76:77:98:
86:89:6a:bf:c0:a6:f9:d1:1d:74:e8:10:fa:12:85:
29:87:4f:20:08:f7:22:1f:f7:9e:b8:d6:b8:97:00:
9b:f9:f9:84:28:55:6a:63:2a:0b:5c:34:ed:59:76:
17:d8:38:a1:93:6b:9d:7f:40:71:11:55:2a:4f:b6:
a6:ec:99:61:f7:55:a1:0e:99:8e:43:b4:95:62:78:
1b:4f:f7:ae:71:5e:6d:bd:9a:e4:ae:bb:34:b0:ea:
5e:7c:86:5d:f0:40:5e:52:7a:8c:92:56:41:e2:41:
42:e1:8d:d7:bd:51:dd:82:ee:46:37:9a:2e:1d:3e:
8b:7a:9c:08:b3:f8:42:f4:44:8a:d1:92:a6:9e:85:
c3:57:56:42:f2:44:0e:f3:2f:0b:bf:6f:29:c8:d2:
59:81:19:e7:16:72:a8:1b:bd:49:04:05:dc:ec:3d:
cb:4d:5f:26:79:02:b2:b2:15:9e:49:b6:27:9c:37:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:05:37:B1:5D:D7:28:81:D5:8E:AD:50:18:6D:6C:58:EA:66:C7:7C
X509v3 Authority Key Identifier:
keyid:B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4b:75:eb:fc:05:ce:c2:6e:48:b0:19:12:43:d8:90:12:6d:
8e:36:12:7f:d5:83:22:85:3f:f2:86:ae:2c:c5:b1:d0:9a:2f:
c6:68:65:a3:aa:ef:09:75:9e:f9:00:da:31:4c:9b:88:4a:9e:
69:04:53:8b:23:d7:63:ab:cd:23:89:ab:dc:23:9e:00:83:e7:
46:85:a4:69:f3:70:60:4a:b8:64:9e:9b:78:e3:6a:fd:48:90:
e1:9c:29:7d:4e:a6:eb:2c:39:71:77:75:f7:96:92:4f:56:4e:
4c:17:ea:95:a6:78:38:02:3a:1e:f0:48:42:2a:26:91:16:c5:
87:e9:bb:5f:16:e0:1e:df:70:6c:e6:d0:6d:a5:df:3d:36:92:
7b:e0:00:22:e4:7a:9a:8b:5b:ca:ac:2d:63:3b:62:28:66:e0:
99:12:b3:ec:3c:ea:ef:a2:30:a0:6b:bc:1c:aa:83:50:1f:f7:
e1:32:52:9d:74:00:46:cb:6b:c1:25:98:f7:50:27:f7:d3:76:
15:7c:76:8c:e3:a9:0a:af:e6:d7:46:56:1f:28:4b:a0:41:6c:
fd:3f:c4:2b:fd:54:7a:b6:08:20:b2:31:50:2a:5f:41:6c:88:
5c:00:7f:2f:2d:22:f0:b0:be:58:79:d9:8a:9e:18:2c:fa:a4:
f0:85:a9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:32 2025 by rpki-client