Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
File: s5HsSXtk1hEkn95Zel7ofpM31e4.mft (raw, json)
Hash identifier: jWLOirgIYsJ8mZcYwD6RnIiWQazEcsJeo1JuyDpo3bY=
Subject key identifier: 3A:DE:62:B1:92:FC:42:45:12:85:39:40:39:42:15:87:38:80:5F:B4
Authority key identifier: B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
Certificate issuer: /CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Certificate serial: 0199FDD99EC93E4D00FEF6485CB7E9D906BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
Manifest number: 0685
Signing time: Sun 19 Oct 2025 19:02:01 +0000
Manifest this update: Sun 19 Oct 2025 19:02:01 +0000
Manifest next update: Mon 20 Oct 2025 19:02:01 +0000
Files and hashes: 1: 1SuRt4iJivWgTKWmk3XGm23S3is.roa (hash: QUGPW65YoJ5GDg5KCzuvySius0jxym8E1db1Hk83LWE=)
2: s5HsSXtk1hEkn95Zel7ofpM31e4.crl (hash: JLNpXILukLp++Ri8axp46H/UElxcxH7zxL79fHF7xl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:9e:c9:3e:4d:00:fe:f6:48:5c:b7:e9:d9:06:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Validity
Not Before: Oct 19 19:02:01 2025 GMT
Not After : Oct 20 19:02:01 2025 GMT
Subject: CN=3ade62b192fc4245128539403942158738805fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:65:1f:89:70:6f:d9:58:f2:4c:e1:dd:c4:2f:
67:71:d5:7f:c3:20:d4:e7:09:69:57:5e:ed:ca:f6:
74:e8:6d:aa:8c:4b:16:f7:c4:40:fc:a8:9a:96:c3:
7a:2c:11:ec:ff:13:d3:f1:c4:75:80:5c:f2:1c:3c:
1a:4a:20:42:9c:dd:7d:24:34:1a:3f:38:47:b2:2b:
76:ab:1a:3c:f8:6e:73:ee:70:d8:ba:8f:1d:f9:9e:
12:6e:c1:e0:87:8d:a6:2a:34:3a:c0:76:80:17:bd:
f7:a7:0f:e0:8e:71:89:e2:36:43:34:6e:fd:7d:ef:
70:ad:e9:85:21:bb:7d:b7:03:f3:fe:43:a2:23:8e:
a5:b5:5d:d9:59:bc:0b:d5:f1:88:eb:49:a2:66:b6:
1f:44:34:78:7e:1f:6d:50:cb:46:cb:bd:0a:10:2d:
83:7a:31:cf:3b:93:16:12:78:2c:0c:a6:27:28:26:
7f:ff:39:63:71:94:e2:30:48:30:bf:fc:fd:64:17:
d0:e9:1f:9a:ec:b0:50:27:d5:ca:48:f8:d7:68:4c:
26:6e:e2:3d:a4:93:67:fd:ce:9d:9f:d1:b8:f9:4f:
a9:34:46:cc:fa:e9:87:fb:1f:ec:eb:39:7c:68:40:
5d:73:33:39:de:95:43:03:56:d7:53:86:68:9f:61:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DE:62:B1:92:FC:42:45:12:85:39:40:39:42:15:87:38:80:5F:B4
X509v3 Authority Key Identifier:
keyid:B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:17:3d:ed:dd:84:d8:75:bc:be:3b:9e:bc:66:7e:f4:2c:27:
25:d8:c8:87:66:c5:d4:d0:a5:c8:ed:5e:6e:07:b4:25:16:f8:
58:36:be:32:a6:4b:d6:f9:21:00:12:50:ea:60:17:6a:7a:55:
6a:f6:09:d9:96:e9:3a:dd:76:01:78:74:e3:c0:28:83:95:97:
89:bc:e9:6f:b2:6a:87:d1:93:c4:bf:d5:19:65:9f:d9:17:fd:
9a:b5:c6:71:0a:46:f5:73:36:36:72:ce:63:99:21:81:9f:21:
2f:fe:2c:ca:80:7e:f3:71:00:4d:98:90:99:5b:aa:15:54:53:
24:ea:1e:d5:43:12:6d:16:fa:83:d0:c7:99:46:8b:a6:38:b5:
6b:a2:26:85:5c:3d:c8:d6:2c:36:4c:de:db:f6:75:9e:83:9b:
7c:af:d9:0a:d8:15:85:d8:a5:50:84:d2:6f:0c:39:e3:4e:39:
0d:52:74:b1:fc:c6:78:35:f9:fb:58:ca:8a:70:db:56:38:2e:
39:00:8b:ee:95:59:80:89:60:d2:02:94:1e:f7:7c:4e:0c:e6:
a9:2d:8e:dd:4b:e5:5f:b7:e5:3b:76:fb:e6:48:1d:c5:47:0c:
fd:50:a0:a7:e7:ba:cc:6b:65:f1:b3:81:bd:1a:01:ba:a6:f3:
d4:1b:ff:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:36 2025 by rpki-client