Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
File: SVbzCE2TEO-hvAfvMfk0spQfED4.mft (raw, json)
Hash identifier: RwFHY5Ca0elN2FT5+h9Fya/urh2EnfAs6KNxDe4bzq8=
Subject key identifier: 6A:0F:9A:6A:A9:D4:C0:39:72:F9:37:26:A1:6B:40:0F:7F:E9:3A:79
Authority key identifier: 49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
Certificate issuer: /CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Certificate serial: 0199FFC8556AEB0EE9B802D95437FC3B18B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 04:02:23 +0000
Manifest this update: Mon 20 Oct 2025 04:02:23 +0000
Manifest next update: Tue 21 Oct 2025 04:02:23 +0000
Files and hashes: 1: QocjuYoGfozpr0QiTXkGPfsUrcg.roa (hash: Y8oC4kwoV9mXXZSXGd1lAHQDlPdz5kxQi4KnTi7EYOM=)
2: SVbzCE2TEO-hvAfvMfk0spQfED4.crl (hash: WJHsVgJ4QYgE8P8l6+Rb4FddVEOY4y7Z9mnGtdlOPRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:55:6a:eb:0e:e9:b8:02:d9:54:37:fc:3b:18:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Validity
Not Before: Oct 20 04:02:23 2025 GMT
Not After : Oct 21 04:02:23 2025 GMT
Subject: CN=6a0f9a6aa9d4c03972f93726a16b400f7fe93a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:72:6a:04:e3:54:2e:89:5a:7f:59:7c:8e:50:
47:3f:41:1b:5f:fe:9f:9c:f2:a0:db:fc:49:fa:82:
91:40:31:84:4d:65:38:70:0e:9e:e4:ee:c2:7c:03:
25:b3:f7:27:6a:0f:73:c7:ff:d9:55:a9:65:a2:7b:
30:16:80:ce:15:ac:0a:51:b2:e0:22:aa:ac:93:95:
2a:fc:ba:27:0d:72:68:8f:43:29:c8:eb:8b:e2:5b:
25:c5:69:a4:51:b6:32:d1:9c:48:b2:16:78:73:7b:
98:00:95:2f:99:72:9d:7b:37:34:3b:66:27:b8:8d:
6b:0b:26:04:55:29:e5:14:01:4b:bb:3e:b9:7d:a8:
a3:16:89:34:31:13:97:69:53:a3:e5:e9:1e:cc:d8:
e7:dd:15:71:f1:e1:ac:0f:ef:8c:d8:11:a5:93:f8:
0c:15:bd:c6:f8:c5:47:f0:b9:39:1a:21:59:a3:63:
95:32:6a:15:48:36:e4:2d:67:5f:2e:15:59:a1:4f:
fc:17:88:09:92:b4:95:85:f1:f9:b1:5a:1f:2f:c3:
75:48:ae:ad:b1:3f:f7:63:0d:4e:ec:4c:c2:dc:15:
88:17:dc:04:e1:6a:10:04:d3:78:ff:d1:41:93:5d:
50:29:b8:7a:b2:d8:f4:0e:d5:fa:ed:c8:c1:d0:d8:
41:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0F:9A:6A:A9:D4:C0:39:72:F9:37:26:A1:6B:40:0F:7F:E9:3A:79
X509v3 Authority Key Identifier:
keyid:49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2f:eb:6d:dd:01:a7:28:ec:ed:38:0e:ff:ae:52:38:a8:8b:
15:88:0b:43:6a:e5:65:5c:e2:c7:d0:ab:d6:b0:73:50:12:33:
f8:ac:69:08:12:30:59:b2:03:1a:b4:38:af:34:ab:49:e8:f8:
f4:ce:bf:e3:36:83:0e:f6:9e:66:d4:ca:28:d3:e1:b7:85:ac:
dc:73:0d:f4:c7:00:91:48:2a:68:e3:ca:76:9c:63:5d:8f:64:
c9:a7:bd:27:17:99:8b:d8:06:1a:37:50:e1:56:a4:35:91:9c:
31:2e:ac:36:ad:db:0a:13:8a:80:0b:d5:f4:6b:3b:a3:d2:77:
9a:82:40:79:ef:08:82:62:54:41:d0:40:91:2c:5c:f1:d9:19:
2e:50:02:53:ea:9b:2e:d8:90:a2:3c:39:a8:c0:4d:06:97:66:
5e:c7:2d:28:f0:f0:23:fd:5a:6b:39:8f:7b:35:a0:04:c7:52:
82:f0:ac:66:98:ab:ab:5a:cc:c8:20:0e:d2:5b:fd:d7:f0:09:
d1:6a:ef:da:63:a7:fd:49:12:39:90:d3:e2:2b:2d:2a:15:0e:
50:ab:71:f2:9d:77:09:4c:19:b6:b5:2a:50:b8:e0:e1:99:8d:
97:b7:8d:36:dd:30:a0:3a:d2:f0:d4:56:5b:a2:0b:85:5b:cb:
02:35:81:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:45:26 2025 by rpki-client