Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
File: SSqOSCqB2QxFxNkKxmij8iRcDW0.mft (raw, json)
Hash identifier: vzM24YqpVwP/pJ0YTSKe/7CxSaJqO58ULukg+EjeMcM=
Subject key identifier: B6:5D:0B:57:79:AA:49:3A:D0:7F:32:7F:D2:07:27:90:C9:48:9B:10
Authority key identifier: 49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D
Certificate issuer: /CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d
Certificate serial: 0199FC58AFAD2A5C0BD2E952190D7BEEC9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 12:01:34 +0000
Manifest this update: Sun 19 Oct 2025 12:01:34 +0000
Manifest next update: Mon 20 Oct 2025 12:01:34 +0000
Files and hashes: 1: QKjCAOKQJMjqOOmayga7OQ2UBwc.roa (hash: jA/gBvlqnMxkZ4Kz1oiT52kTp3obybgFm8vN9PxrrXM=)
2: SSqOSCqB2QxFxNkKxmij8iRcDW0.crl (hash: Rs0r33ZDTEzhVtkTae6p/DfTiGcmZb7dI24nD/N7gZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:af:ad:2a:5c:0b:d2:e9:52:19:0d:7b:ee:c9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d
Validity
Not Before: Oct 19 12:01:34 2025 GMT
Not After : Oct 20 12:01:34 2025 GMT
Subject: CN=b65d0b5779aa493ad07f327fd2072790c9489b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:28:c4:da:bd:43:fc:d6:d3:a3:46:3c:7a:ab:
86:fe:ec:68:72:6d:bb:37:c2:41:06:0f:3c:82:fc:
a2:cd:09:ac:ee:2e:c5:5f:b6:46:6d:a9:59:76:fd:
e7:9c:7b:93:fc:aa:41:7d:cb:03:0f:c5:58:1b:18:
de:1b:42:52:28:a1:10:05:8b:20:92:73:a2:57:b8:
b5:21:b7:9c:b8:83:72:9d:1d:e9:40:63:88:55:8c:
f6:08:9b:d5:43:12:34:4d:11:71:f0:69:c4:f4:69:
cf:cb:5f:78:40:62:56:d1:c3:9e:9c:d6:47:66:9e:
79:a4:0d:4c:ac:f5:82:81:3a:c1:ba:d1:7b:72:ef:
92:bf:74:7c:1d:60:95:23:e4:ed:ea:e2:25:a1:63:
52:02:f3:16:5f:32:37:b5:4e:b4:98:ec:c7:b8:74:
8a:2c:35:04:a0:55:5e:7b:9b:6d:26:d8:66:1f:34:
8a:8f:89:c8:a6:b6:58:dc:12:29:53:e6:41:88:09:
b0:43:47:18:a5:11:94:58:ec:c5:7b:7f:5c:6c:b5:
de:5c:32:f6:5a:a7:85:df:da:2f:0c:f2:ae:7d:80:
d7:40:53:b3:ae:6d:99:a4:e2:dd:e6:25:6c:7f:d0:
c9:df:ef:67:84:0b:6d:67:9e:5d:4a:cb:79:33:ff:
34:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5D:0B:57:79:AA:49:3A:D0:7F:32:7F:D2:07:27:90:C9:48:9B:10
X509v3 Authority Key Identifier:
keyid:49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c7:86:66:86:18:a2:22:24:ad:63:91:f5:99:7a:e0:9a:92:
0e:ef:a3:a9:97:b3:46:d9:31:01:27:78:5e:88:df:96:a2:75:
31:e3:14:98:c7:4b:03:3d:74:d4:8f:62:94:03:ac:6e:41:1f:
db:8b:8a:77:4f:23:d7:92:f4:cd:4e:fa:c4:22:0c:44:f4:ec:
f4:17:68:4d:c7:13:55:9a:fc:93:e0:b4:a4:9e:86:f6:e0:a8:
8b:60:34:e1:c4:fd:f5:92:df:7e:bd:ff:fd:17:0e:6a:91:09:
9f:6e:dd:6d:55:5e:e5:58:28:36:94:24:a5:95:47:3f:4c:47:
0d:c0:8b:1e:c5:1a:7a:4e:5b:81:31:59:72:77:7d:3a:b6:86:
cb:e5:9d:04:5e:be:40:9a:2c:71:c3:93:18:1d:bf:3b:b7:49:
47:b2:aa:c3:b5:be:89:9b:65:b6:fc:1d:f0:16:10:8f:cc:90:
a6:67:4f:71:84:b8:85:67:a1:72:6a:13:8e:50:21:fc:0b:3d:
e9:4b:1d:c5:e5:cc:23:87:30:d2:1e:ed:0e:1a:a4:24:fe:89:
84:64:23:9e:99:fc:96:5c:3b:68:a4:7d:97:1e:3d:95:d9:74:
8b:97:75:51:e6:a9:8f:b7:bf:0a:9d:06:48:d6:a2:bd:8b:db:
14:21:4c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:33 2025 by rpki-client