Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
File: s6RxSmlcY88unErephcYJ9hm4pg.mft (raw, json)
Hash identifier: lXuWL0gbyUAbanMQlezqBa+yShpMEz2Qh0S+uxuj/Qg=
Subject key identifier: 86:40:DD:2B:E0:27:1B:F2:68:8E:9C:36:11:A1:29:70:76:D0:66:6E
Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
Certificate issuer: /CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Certificate serial: 0199FD3449082A98535B06C12F22451A27B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
Manifest number: 144E
Signing time: Sun 19 Oct 2025 16:01:26 +0000
Manifest this update: Sun 19 Oct 2025 16:01:26 +0000
Manifest next update: Mon 20 Oct 2025 16:01:26 +0000
Files and hashes: 1: UIgf9ajrQrDmAPpLPV90kRuj32I.roa (hash: AlX36a6BnwjhKrdVjNHSqwcRq3yixFLnOubI+UNJ9cQ=)
2: cBeaN8r92MWoqfdvhQH_ewA_rkk.roa (hash: yNYMjmHLoWXkkp0dQFYuWRyyRjSNzH1ulJxUwxp290s=)
3: s6RxSmlcY88unErephcYJ9hm4pg.crl (hash: 9mFonKwZud93l1UU+DoGzmnuqc4kFEgrwtYzC0fl3Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:49:08:2a:98:53:5b:06:c1:2f:22:45:1a:27:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Validity
Not Before: Oct 19 16:01:26 2025 GMT
Not After : Oct 20 16:01:26 2025 GMT
Subject: CN=8640dd2be0271bf2688e9c3611a1297076d0666e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:89:2a:b8:e9:43:54:b6:be:38:a5:ae:63:46:
09:da:fe:8a:fc:b4:e6:c3:97:5a:d2:18:0f:99:ae:
4b:28:03:fd:70:3c:2c:83:a0:53:97:f5:d7:59:85:
50:67:8f:63:13:60:09:c2:9b:b7:ef:8f:d5:0c:ac:
cd:39:77:b9:2a:51:1e:4b:09:bb:75:4f:c1:f8:df:
3f:98:0f:84:47:2f:82:ce:2b:cf:b0:ae:cb:04:25:
a1:a6:7b:77:d0:70:1f:1f:24:53:40:a4:b4:81:e5:
4c:4a:59:5e:20:3c:b1:80:8f:37:e1:9a:d4:ff:66:
84:9f:83:b6:89:bd:57:5e:76:29:99:7a:73:99:15:
ee:45:98:24:ae:be:57:ba:57:68:9d:88:a7:36:64:
cb:fb:f8:b6:c3:4a:90:c8:ef:ce:22:e6:7d:67:02:
c0:ba:29:de:1d:06:3a:0a:cc:3f:08:e3:f4:b3:50:
06:a7:e7:00:0c:ec:30:e7:fe:ff:43:7e:32:1b:a4:
b5:0e:aa:0f:f8:bd:72:41:1f:13:1f:c5:68:de:ee:
76:b5:25:ad:4f:4c:c1:e4:44:39:06:d0:5a:81:15:
f2:d5:b0:44:2e:47:49:2c:7d:b0:2b:a5:1a:57:5f:
b8:b3:68:9d:b8:be:f3:76:2b:5a:d1:fe:16:a9:a2:
94:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:40:DD:2B:E0:27:1B:F2:68:8E:9C:36:11:A1:29:70:76:D0:66:6E
X509v3 Authority Key Identifier:
keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4b:e8:30:d0:d1:26:70:b2:1b:25:0e:5d:fc:9c:f6:46:5e:
f3:f5:dd:94:45:be:87:73:96:ed:04:96:18:71:37:08:27:c7:
d2:01:b6:9f:04:f3:07:2d:8c:47:69:8c:31:71:d6:68:b4:47:
8a:fe:fa:20:fc:b5:63:f7:c6:d4:aa:77:1c:98:2d:2e:a6:ff:
9c:bf:7b:17:9e:85:52:c3:10:49:0d:0d:41:0c:3a:34:3a:70:
13:3e:35:8b:2f:21:0c:c6:81:07:c9:5d:7c:a6:b6:a8:b0:56:
74:46:69:58:80:44:9d:2e:02:6c:7c:9a:f4:7e:be:cc:b0:b3:
33:5f:8a:ad:d2:6e:4b:5a:4f:80:43:eb:de:73:70:40:cc:5e:
cb:d4:fc:af:00:93:a9:e1:6f:52:57:da:cb:30:75:1c:c8:2c:
08:f0:27:8a:c7:b0:10:83:80:ac:9b:88:d3:a7:3f:0f:28:96:
5d:4b:ec:6a:76:6d:bf:1f:75:5a:0c:a0:fa:f5:b7:12:b3:ab:
d4:e5:31:03:02:17:3d:6c:45:f8:a2:ff:54:80:8d:de:91:42:
61:2f:93:6f:40:c4:01:39:77:2e:e7:ef:be:bb:24:3e:52:b3:
99:02:3a:aa:e8:c0:d1:56:69:9d:64:e5:58:c3:38:32:20:49:
75:c8:58:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:46 2025 by rpki-client