Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
File: si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft (raw, json)
Hash identifier: LyIzZvbYPXikyHnrwuV18CHEPXD2tLcTInioZf/A4gI=
Subject key identifier: 93:C3:75:15:35:6E:17:46:91:D3:91:82:DC:EE:58:EE:D3:10:CB:FF
Authority key identifier: B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
Certificate issuer: /CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Certificate serial: 0199FC217B5AA9F3B488464D388106C77067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
Manifest number: 04B2
Signing time: Sun 19 Oct 2025 11:01:16 +0000
Manifest this update: Sun 19 Oct 2025 11:01:16 +0000
Manifest next update: Mon 20 Oct 2025 11:01:16 +0000
Files and hashes: 1: Ol4H0Ofe0seTJhjp23zwbv14mcA.roa (hash: h0M7hTbR8JXwLU22tU4Fw/p8crplmJ6JisUg1rjxv0k=)
2: si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl (hash: JJxn8RYUlkNrYtM+T18HJsjx/XL01Ov8xYPtPyhehmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7b:5a:a9:f3:b4:88:46:4d:38:81:06:c7:70:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Validity
Not Before: Oct 19 11:01:16 2025 GMT
Not After : Oct 20 11:01:16 2025 GMT
Subject: CN=93c37515356e174691d39182dcee58eed310cbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:74:59:cb:f2:52:b3:78:31:28:59:b7:ba:
c9:a4:32:9c:b9:2d:c1:a7:85:39:ba:98:d7:0e:7d:
b0:fe:5f:43:35:1c:ad:a7:c4:4f:76:6c:49:f3:7d:
59:11:30:a5:82:9e:8d:3d:15:40:5a:1d:c9:d4:5f:
ec:cc:c1:67:14:5d:eb:d2:4b:3e:78:fb:77:7d:c0:
a7:40:7e:08:82:6f:82:52:c3:42:b2:2e:95:2d:fa:
99:d6:68:a6:65:db:b7:82:20:e1:5e:ab:82:bc:93:
7d:e4:35:81:98:1a:43:47:12:9a:9e:7b:2b:d6:68:
47:ce:df:5c:c9:fa:cc:01:d2:a5:71:22:71:86:c2:
1e:b5:4d:24:a6:e6:b0:2d:58:7e:56:4e:6e:98:f7:
72:9b:92:b7:f3:34:04:1d:df:de:db:6d:f6:dd:2d:
a3:2f:b0:8c:92:e6:c7:a1:f6:38:ae:94:49:55:b7:
9c:b3:48:2e:5e:50:13:e4:4f:36:c6:cb:b1:f6:81:
25:f1:46:0e:4f:d1:13:10:72:1a:3c:97:66:b3:39:
bb:13:41:2b:88:3d:6b:86:e0:10:d2:1a:48:16:90:
e6:33:cb:c6:fa:64:f3:b2:71:fc:5c:d1:d3:cd:ea:
b4:17:d7:c4:39:a6:84:d2:c1:19:67:c7:1f:1b:89:
0a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C3:75:15:35:6E:17:46:91:D3:91:82:DC:EE:58:EE:D3:10:CB:FF
X509v3 Authority Key Identifier:
keyid:B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:60:5e:cf:9a:fe:e9:f5:6e:85:2a:a0:fd:f2:6a:d0:32:ae:
a5:6c:81:8c:b4:d6:04:50:0b:0c:6a:76:b6:3b:a4:d4:6e:88:
dc:74:5c:74:59:42:1b:8b:df:52:a5:79:ce:62:aa:ba:ff:1a:
47:08:13:81:2b:ab:5c:5c:f4:83:80:94:a9:7c:55:bd:2d:fd:
fe:b7:21:dc:e2:19:ec:5a:bf:0a:e9:b3:eb:57:e3:68:5c:43:
6a:df:26:f4:a6:0f:0d:5b:04:56:20:d5:93:1c:a9:da:83:cc:
97:54:ac:77:ee:83:29:c4:7c:73:32:1a:f0:47:91:9d:87:00:
fd:d0:db:81:84:a6:62:40:eb:1c:60:21:39:03:61:87:7b:39:
d7:03:60:e9:d1:89:28:86:02:20:43:37:ee:fa:c2:65:82:5e:
9f:69:04:4d:eb:a0:3b:68:f9:71:43:fb:23:b3:53:58:56:b8:
43:bf:9a:6f:fc:36:7a:22:d1:e6:7c:74:7e:40:e3:1f:79:f8:
c1:ed:02:08:67:05:2d:9a:65:7f:19:bb:ef:da:1b:8f:48:f0:
e8:7e:a1:2c:c3:71:c5:8f:0e:d4:ab:f7:b8:c5:c0:da:40:6f:
08:b7:b5:7e:e5:9a:a2:b0:7e:24:5a:8d:51:99:3a:97:6c:8f:
8e:38:7b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:53 2025 by rpki-client