Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json)
Hash identifier: 9LxwAerP/SGmU4Qf3Tg/1G/1WIjqlaJAnlDZcQR3St8=
Subject key identifier: 1D:3E:7D:96:13:BE:60:A0:57:D5:7B:B7:8E:86:A1:2C:F1:27:D0:FB
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 0199FCC693210848D5CFCED579251B2E2792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
Manifest number: 04D6
Signing time: Sun 19 Oct 2025 14:01:36 +0000
Manifest this update: Sun 19 Oct 2025 14:01:36 +0000
Manifest next update: Mon 20 Oct 2025 14:01:36 +0000
Files and hashes: 1: joUfA7wmiDy4bESPg0qWDrSmTss.roa (hash: 1QUrxZN7VrpsU9R2lfkft3ATlxKCm7MpFqrD8hOkNNA=)
2: mHdbhQxgyf7CV9jCGJvliFVilXc.roa (hash: 4CdqTf57TkDxaRHOcnXl2aFyjkgmNRswPmW9ZMUYxw8=)
3: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: yPdyH2fbXTYX1YbCQY3UXlafioHgDsmU7R0yd7zgRUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:93:21:08:48:d5:cf:ce:d5:79:25:1b:2e:27:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Oct 19 14:01:36 2025 GMT
Not After : Oct 20 14:01:36 2025 GMT
Subject: CN=1d3e7d9613be60a057d57bb78e86a12cf127d0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:df:e7:45:0d:0a:d5:47:20:4a:99:58:1c:
83:cb:a3:1d:33:39:9b:31:10:ba:77:ec:e0:35:8e:
91:96:6f:72:48:6c:5b:cc:a4:35:bf:41:9c:c5:9a:
21:2e:2d:e0:97:f1:36:a1:0a:d6:0f:0d:43:6c:43:
7e:1e:3c:df:5d:13:1d:0f:05:8e:50:23:1c:46:09:
21:ee:2d:bd:93:2c:ff:17:26:22:fc:7c:fd:ed:8c:
bf:45:cd:73:d2:13:48:59:d5:46:83:9c:f4:10:64:
24:7c:62:ff:e7:f1:8e:b6:48:62:1a:e9:a0:ce:4f:
b6:82:8b:1a:5d:c0:ff:7b:09:0d:de:1f:47:89:a9:
c6:5a:08:29:fe:77:ef:27:82:8b:02:ce:e4:1c:12:
a6:49:d3:cc:b0:a4:14:a2:6b:4a:35:ba:34:dd:9b:
8e:b7:a3:2f:bf:42:b4:03:76:dc:93:8d:99:91:3c:
9c:4a:e8:b3:65:44:88:b3:35:c2:d8:3f:b9:68:cd:
66:30:98:9b:da:19:de:c7:d3:52:05:46:26:f7:7e:
1a:0f:5a:5e:38:90:f1:1c:45:06:9b:0f:db:c7:69:
eb:1a:d9:ec:27:93:19:62:30:5a:e2:3b:58:e3:50:
d2:e1:14:4f:b7:32:2f:61:db:10:03:de:d9:36:d2:
a8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3E:7D:96:13:BE:60:A0:57:D5:7B:B7:8E:86:A1:2C:F1:27:D0:FB
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5c:62:cc:a5:da:76:86:71:a7:ab:c3:eb:e6:9a:50:38:59:
48:ec:37:05:27:69:db:e0:2e:ef:be:14:ac:51:8f:4f:c2:64:
91:09:9c:79:c2:e2:60:a8:42:15:72:e0:d3:5c:6a:e0:f9:b0:
d0:df:22:23:e7:91:f1:28:64:23:71:c3:70:07:1d:e8:7b:98:
41:42:4e:e2:b9:06:24:97:7f:35:b7:73:49:0f:14:7f:36:1e:
74:57:87:20:a8:45:be:59:c9:1c:07:89:f0:f8:3c:bd:55:73:
2a:0a:d3:79:b9:49:45:bc:ce:59:4c:94:0e:48:09:33:71:82:
5f:3a:9e:a9:bf:09:59:2c:d0:69:c5:23:3e:d1:c3:27:7d:ca:
39:2d:2d:8d:58:99:ab:e0:94:5a:77:57:a4:e7:67:97:e4:31:
04:28:a3:c8:8f:c2:a0:06:f9:18:4a:d1:f2:ad:0e:93:97:35:
b1:d5:9e:9f:c3:cc:48:37:8a:9e:60:60:df:04:bd:0b:af:f1:
55:12:75:34:0b:e0:28:ce:14:cd:5c:eb:71:c3:67:9a:5d:4c:
8f:ab:97:cc:2e:37:eb:3d:51:47:87:8a:1b:e7:40:d7:e2:ed:
3b:00:b6:18:11:1f:59:2b:77:51:bd:fe:66:62:89:15:2d:d6:
36:0d:60:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:08 2025 by rpki-client