Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
File: sj64SeC2lA5P9UfeC0GwA_nhEFw.mft (raw, json)
Hash identifier: R4fSKlks3Avc99xKf/pE+fQURC1+1xQJ6UpEP9fNpbw=
Subject key identifier: 4E:54:3E:D6:C1:8F:94:1C:C3:E4:FE:3C:76:6E:DD:E8:77:36:CF:2F
Authority key identifier: B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
Certificate issuer: /CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Certificate serial: 0199FC8FCEC43DD5395579085FB944A4DDEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
Manifest number: 0A4D
Signing time: Sun 19 Oct 2025 13:01:46 +0000
Manifest this update: Sun 19 Oct 2025 13:01:46 +0000
Manifest next update: Mon 20 Oct 2025 13:01:46 +0000
Files and hashes: 1: 9svgo4bGRBf8fMpSXvge7RoyrHM.roa (hash: teVQdkK97LTCrE/CLpJAuLsspKcnHRjqSI/rfD5Q6hA=)
2: fetFKuopmwnkmS4GdVahSkuSTYA.roa (hash: COKnfUPWTvK88/nI2sTAGQJZnRfr5E0q/yyW5/NYsSI=)
3: sj64SeC2lA5P9UfeC0GwA_nhEFw.crl (hash: F9DXXxE5xAZFweWPAuC/u118kzebg/2MRJJQ1gSpqKQ=)
4: tYCsQPIyFJmQyf9thG5Is7jI5NY.roa (hash: b/PwLfTfSmleVVur7ZKT8j1+gDLO4fZy6WoOsM743EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ce:c4:3d:d5:39:55:79:08:5f:b9:44:a4:dd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Validity
Not Before: Oct 19 13:01:46 2025 GMT
Not After : Oct 20 13:01:46 2025 GMT
Subject: CN=4e543ed6c18f941cc3e4fe3c766edde87736cf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:08:97:4d:4f:c7:30:35:fc:81:b9:c0:14:05:
7a:5b:b5:88:53:fb:da:1a:94:e9:fb:6d:96:85:40:
30:e4:9a:75:c3:91:7c:7e:6c:aa:d7:60:68:5a:9b:
53:b7:38:47:51:52:8e:04:fc:54:13:1d:c3:15:73:
ee:b6:ea:86:2a:06:89:f0:07:65:87:a9:a3:09:21:
32:ba:34:aa:d9:73:30:f0:2b:6a:5c:53:53:ef:d7:
a6:08:44:2e:41:6c:e7:21:6b:7e:52:6d:f2:5a:c3:
73:ab:6f:08:bb:c3:74:44:f9:e3:84:8b:73:b0:f7:
02:20:4b:6a:0e:0b:c5:8f:ac:ab:3f:3d:00:31:6c:
20:a0:f3:80:f9:7d:cb:ba:73:78:7b:d0:9c:22:63:
0a:b7:ea:26:8a:7f:fa:0c:18:c4:22:44:1a:7f:a4:
a2:2d:23:58:99:75:93:e7:29:50:29:f9:5d:66:4b:
7e:89:21:2a:e0:ee:75:e8:a3:04:9c:53:bd:b3:22:
59:6f:ae:76:58:ad:b3:2a:73:10:c8:5a:54:c4:ca:
ae:37:8c:bc:bf:4e:74:27:52:9d:d3:38:a1:e4:6a:
d6:a5:96:e5:ec:f1:34:e2:9b:df:e8:dd:6e:71:19:
35:46:42:05:dd:99:06:a7:b9:d6:84:f3:5e:80:f2:
de:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:54:3E:D6:C1:8F:94:1C:C3:E4:FE:3C:76:6E:DD:E8:77:36:CF:2F
X509v3 Authority Key Identifier:
keyid:B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:76:9a:f5:69:ca:67:82:87:48:69:6e:43:43:90:f9:af:d2:
94:8b:7c:1e:22:ae:1a:65:b2:81:da:73:b7:0d:e8:78:1d:5a:
7a:8e:29:70:14:73:85:d4:d3:4c:cf:78:ba:8a:77:4d:1a:b2:
84:0e:fa:9a:49:82:3c:6b:fd:98:c8:1f:c3:67:7a:b8:a4:20:
a6:0e:78:0c:7f:77:26:0b:3d:c0:24:55:bd:bb:19:6d:d5:97:
fc:b6:94:0c:fe:23:9b:1c:3c:97:1e:82:57:e1:bb:d4:e6:c1:
64:69:f3:87:43:14:c5:e0:c8:69:28:da:07:18:89:d3:a9:24:
e3:0e:7c:ee:2c:fc:86:0c:d9:90:68:14:50:9b:7d:9f:66:f9:
86:52:e9:f7:f0:28:cd:00:78:3b:a6:57:2b:86:81:9e:a2:88:
05:06:c6:3a:0d:45:4c:16:4c:d5:d3:bc:e2:2c:4c:eb:5b:fc:
54:6b:73:4a:53:b9:52:a0:db:10:66:63:28:68:e1:57:2e:e0:
d2:08:46:9c:a9:9e:09:41:66:9a:61:89:59:81:71:cd:12:76:
4d:28:69:4b:ba:7f:e1:41:9d:b4:d3:9b:e6:d7:14:16:51:30:
c5:67:cf:0c:67:ed:b3:17:af:70:db:79:28:0a:84:13:29:17:
48:85:55:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:13 2025 by rpki-client