Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
File: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json)
Hash identifier: W5/SxdSWcn+WbuhZS+OBm9b0HMqNSMBVaTCuFhIdWRI=
Subject key identifier: 5D:80:E7:98:E5:0E:26:20:CA:9F:AF:C5:90:8C:EA:D3:9B:7C:CC:76
Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
Certificate issuer: /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Certificate serial: 0199FBEAAB1673BF895B5C38CED47C8F6C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 10:01:24 +0000
Manifest this update: Sun 19 Oct 2025 10:01:24 +0000
Manifest next update: Mon 20 Oct 2025 10:01:24 +0000
Files and hashes: 1: 1-OIAlKZkamjD55UMqzWQx8P8ujA.roa (hash: 60FXDRY9jVOvfNl6JHlrniUKuc6zQEI45l9Gv0k62G4=)
2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: 0+EZbTzM1ANBhwUH/1aN0p8eSj1WhJrlw2MzWcYjVXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ab:16:73:bf:89:5b:5c:38:ce:d4:7c:8f:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Validity
Not Before: Oct 19 10:01:24 2025 GMT
Not After : Oct 20 10:01:24 2025 GMT
Subject: CN=5d80e798e50e2620ca9fafc5908cead39b7ccc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6f:ce:b1:b2:8c:be:47:f0:44:4c:d8:ef:c8:
e3:dd:69:eb:c3:79:5c:fc:f8:fe:99:b8:e2:d9:d5:
99:17:65:9f:fb:c3:f5:2e:b3:bc:5c:a3:50:66:34:
88:00:9e:e2:57:fe:b6:f8:02:66:08:4a:f5:ad:92:
14:2b:b8:ad:5b:c7:d2:7c:03:02:63:d1:9a:22:d3:
77:7d:38:6d:86:02:be:b9:6d:f1:b1:a6:6c:3a:39:
3e:c9:f5:09:81:00:62:0c:66:4e:55:99:d7:da:81:
6e:4c:a3:8f:e6:c5:18:d9:c0:b2:86:93:46:a8:a7:
b1:d6:b6:f3:d7:73:df:a1:7c:6a:71:ad:3c:3c:81:
46:be:30:90:37:a3:22:a4:b3:08:3f:f1:08:97:fb:
66:b4:db:dd:ac:5b:5f:2b:21:22:1b:89:6e:37:7c:
e2:a8:9c:09:a1:36:73:83:ce:6d:c6:d8:33:1b:32:
bf:5b:dc:e7:c9:fb:95:d0:79:27:59:4f:8d:1e:ff:
8d:cd:b6:52:7b:d0:2c:82:54:8d:6d:1a:18:7d:1a:
f2:f9:47:b3:48:f1:28:dc:9e:ba:73:e8:92:16:ed:
17:1f:9e:c5:93:b8:b3:29:a9:c5:9c:16:f5:17:47:
ed:28:75:2a:60:67:91:c5:ad:29:7f:8d:18:d8:e0:
d5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:80:E7:98:E5:0E:26:20:CA:9F:AF:C5:90:8C:EA:D3:9B:7C:CC:76
X509v3 Authority Key Identifier:
keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:49:73:d8:3f:26:2e:52:91:04:1d:b7:9b:31:c2:d2:6e:0b:
d4:55:e3:06:9a:be:e6:9d:cf:cb:d5:e0:72:3f:43:21:b9:9c:
f9:95:c6:97:b2:88:25:21:7c:b5:c7:88:89:21:6b:6a:94:a2:
d0:b3:9c:8a:49:f9:bf:e3:a1:f3:58:58:dc:5b:31:41:ce:cd:
09:3e:95:d1:17:79:c8:9d:cc:1d:0d:9f:03:4c:95:ee:eb:2c:
4b:bb:b2:44:bd:6e:51:f7:9f:36:29:00:11:94:d5:44:80:45:
43:0f:fc:aa:97:d7:9c:a6:10:c9:de:a8:12:d8:c1:0f:67:0f:
b9:16:4f:8e:2e:fc:98:ef:b0:3b:1b:01:3e:59:86:0b:47:be:
4e:4f:7f:7c:76:80:4f:5a:55:c5:78:35:c0:4d:bd:aa:a7:35:
d7:7d:ab:11:57:1c:b8:f8:bd:9a:d4:b5:68:31:32:5f:f6:35:
87:95:4e:0c:14:68:64:af:a3:cf:9c:16:f7:69:62:b5:8b:98:
67:15:7c:b6:ac:cf:9c:ad:90:f8:df:76:3e:79:55:a8:34:b9:
f5:9e:69:4b:88:d3:f9:56:83:95:a2:d0:99:21:c5:e4:f7:63:
b9:86:08:f1:67:23:86:c6:4b:93:01:23:e1:e1:c7:ec:3c:1b:
ac:6b:1f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:37 2025 by rpki-client