Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
File: sXtEkEx2lKVAig0pcsOf8LGwPqU.mft (raw, json)
Hash identifier: cXtnmB3hoAbPoRpGSZxyNDdbm5QGMgmJBP7ar0lQbyw=
Subject key identifier: 7C:37:1F:53:0E:E2:05:21:43:F4:A2:7B:1E:46:FA:B5:30:FC:B6:33
Authority key identifier: B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
Certificate issuer: /CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Certificate serial: 0199FC5911B46D0E87473BC72C7E88B344A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
Manifest number: 0F2C
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: UDhX8BuvHOYMS5e9vYOFjWjGBYk.roa (hash: C1cyztzqKdd1lIZCQFArU9xrG3gU6hCt1VPEU5YkilM=)
2: sXtEkEx2lKVAig0pcsOf8LGwPqU.crl (hash: 7U7K5ONdgIvFVmrpzkhFvH/5LidEzzp1/LJreGiJLwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:11:b4:6d:0e:87:47:3b:c7:2c:7e:88:b3:44:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=7c371f530ee2052143f4a27b1e46fab530fcb633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:eb:48:29:c9:c9:52:5e:a7:c6:39:f9:3a:
dc:cc:95:40:70:06:89:96:40:95:fd:88:4b:41:d8:
87:4a:5a:3f:46:56:32:04:5e:fd:57:83:96:b9:14:
85:4d:0b:d7:b4:63:a2:d5:f8:f8:85:c0:7b:7e:7f:
fd:68:88:05:14:54:1d:55:8a:17:bb:03:6b:fc:cb:
b4:73:a5:6d:bc:8e:51:44:5c:86:cf:9c:46:47:8a:
1c:8f:d3:3c:3d:63:ac:cb:0a:4e:bf:c6:5e:f6:04:
28:b9:98:2a:c8:fa:02:76:ae:0d:a5:80:3c:4d:74:
71:01:15:21:e6:1d:06:5b:c9:70:9e:b2:6b:bb:f0:
c8:16:2e:e2:7f:93:1c:18:e3:48:32:fb:b8:83:83:
dd:7d:07:45:d8:26:75:2f:73:3f:a9:3a:93:b7:77:
0e:84:ef:a2:df:1f:12:af:5d:9e:46:72:ea:ac:1f:
f5:90:43:c3:a0:f8:66:ad:0e:1f:9a:2d:91:3c:52:
3e:34:07:3e:5b:25:b2:0e:79:f7:55:68:e4:87:eb:
a1:c7:c3:d4:81:f1:4b:f8:1e:d4:92:b7:6d:29:3d:
4c:0f:12:bc:e6:ea:c4:d6:c3:d3:8b:3c:46:ce:d3:
b8:d0:d4:ac:c4:49:cc:cb:4e:ae:57:02:4d:ac:f6:
a7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:37:1F:53:0E:E2:05:21:43:F4:A2:7B:1E:46:FA:B5:30:FC:B6:33
X509v3 Authority Key Identifier:
keyid:B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ca:c5:5d:9e:41:99:4b:c4:93:d6:d4:57:5e:dc:5c:f9:66:
02:b4:c7:ab:1b:89:7a:e7:ae:e9:8a:5e:83:9a:7a:43:25:56:
e5:41:6b:d0:77:5b:32:9d:39:cc:12:3e:d4:4f:0d:af:cf:fa:
ad:41:98:ef:c2:2b:e8:55:b6:8f:60:0c:76:e1:80:bd:e0:31:
ca:28:e0:5d:09:d9:ff:36:db:39:27:5c:2b:39:df:3a:72:c6:
cc:45:5e:49:a6:19:7e:91:a3:82:09:a6:31:ad:8c:1b:70:ad:
6c:16:5e:29:b8:dd:76:03:01:33:d8:8e:56:13:17:cf:17:61:
b6:f1:5a:60:5f:6c:c2:93:c2:92:3b:26:e4:56:3b:96:c8:88:
7b:a9:85:ee:5e:2e:a9:7a:15:01:78:25:19:c1:5e:c2:78:08:
a5:1b:89:ce:6c:6e:e9:9a:08:2d:c1:12:d0:49:29:1e:b9:6a:
8d:ad:56:c2:de:56:40:2e:bd:ff:7b:d3:26:94:6c:5a:4b:19:
7e:6e:56:9a:67:8d:54:c6:ec:26:7d:95:39:01:7d:13:9c:be:
68:d5:52:e3:12:26:81:a5:69:00:8e:83:33:fe:d2:40:47:d9:
dc:6e:3d:2b:c2:df:79:73:12:a4:ab:c1:da:ec:fe:2f:46:44:
ea:40:19:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:29 2025 by rpki-client