Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
File: sQeA3za1uUL2YOQDov5ginXk5X0.mft (raw, json)
Hash identifier: g+umOu5QXBvB7ox6mY3NgTskEcsS9jNTYM3o45Hxh3A=
Subject key identifier: 3C:B4:BD:DA:E0:10:55:5E:4A:C3:6A:0C:A5:21:FB:B8:A3:3E:98:78
Authority key identifier: B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
Certificate issuer: /CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Certificate serial: 0199FAD848548E4898F274D2F44F11D5B892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 05:01:42 +0000
Manifest this update: Sun 19 Oct 2025 05:01:42 +0000
Manifest next update: Mon 20 Oct 2025 05:01:42 +0000
Files and hashes: 1: dc2u-8bkbufd4cw_d9F3xDaopuc.roa (hash: Umyl5IxYyTMcYEGSrVHWEMRSVhNtzrLiUEYgvIObXig=)
2: sQeA3za1uUL2YOQDov5ginXk5X0.crl (hash: iHwUQXewV5R6YAbMbC1jCsrK65ynPyReMOTLQRYU9e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:48:54:8e:48:98:f2:74:d2:f4:4f:11:d5:b8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Validity
Not Before: Oct 19 05:01:42 2025 GMT
Not After : Oct 20 05:01:42 2025 GMT
Subject: CN=3cb4bddae010555e4ac36a0ca521fbb8a33e9878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:15:15:77:00:34:23:e1:19:69:57:46:5d:
08:f9:a6:7b:7b:60:45:71:5c:18:f7:94:3a:2a:2d:
d5:51:ef:52:89:34:61:67:e2:ff:52:d8:d2:e2:f6:
63:05:1f:f1:a1:fd:5b:ef:59:7c:40:03:79:66:6f:
56:31:c9:fd:68:b9:da:25:23:2f:8d:a5:a1:87:64:
9b:da:35:07:05:04:fc:63:26:5f:aa:17:e3:b5:e8:
fb:b0:a9:29:f6:8e:56:86:0b:fc:dd:2b:60:b1:e1:
3f:46:d7:36:84:99:de:eb:25:03:b0:fc:cf:48:49:
a5:36:e2:45:3d:c6:f6:e1:26:a6:9f:ad:4b:82:f0:
31:40:c1:cf:b5:00:ac:fd:75:b1:e3:b3:4b:ea:ff:
93:08:5a:a3:79:fc:9e:f0:ce:a7:81:51:2a:11:6b:
e1:0c:1a:68:20:64:cb:15:ec:15:cf:fb:45:a4:b4:
39:e5:18:d2:21:99:64:fd:69:ef:a1:27:b9:10:22:
86:ef:45:38:17:13:32:b7:08:36:14:ef:92:31:72:
f9:18:d9:42:d3:80:89:58:75:93:72:1f:77:91:8a:
e2:81:e8:69:3b:29:bf:45:db:fc:77:93:8b:50:59:
31:bd:df:0c:a4:03:ed:fb:cc:c0:52:97:db:41:ba:
9a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B4:BD:DA:E0:10:55:5E:4A:C3:6A:0C:A5:21:FB:B8:A3:3E:98:78
X509v3 Authority Key Identifier:
keyid:B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f9:c2:f3:8a:51:13:38:5f:77:74:9b:3e:31:6b:ad:d4:e7:
58:83:3e:5c:69:1d:86:e1:29:65:81:89:b9:57:ee:dc:47:63:
36:7d:7b:fb:98:17:7e:33:cf:af:2a:74:ef:0a:c7:de:6f:de:
2e:c3:d8:72:bf:c5:d6:05:61:02:27:dc:ae:df:be:a6:60:b1:
f7:6e:95:56:2e:bc:07:07:92:3c:4d:29:4f:92:47:9a:be:a9:
0d:f1:f2:25:4a:f8:f6:3a:72:26:8b:a2:7c:c5:11:f4:98:48:
81:c8:96:78:cc:76:03:6f:a2:98:74:63:d5:79:f9:cf:79:f6:
45:9c:8c:c1:5b:9a:4c:ab:24:ea:90:0a:64:d2:2c:af:d0:38:
38:f9:cb:a2:90:b9:b5:8d:a7:d0:72:12:39:7a:6e:7e:e1:06:
d7:18:47:a4:a1:53:56:bd:1c:2c:6c:39:9c:b4:cc:0f:91:fa:
27:b1:f8:ac:f4:cd:f1:67:e6:ca:8b:d4:8b:63:6c:bf:64:0f:
08:b6:de:bd:98:ef:8d:6e:f7:85:8c:6f:2d:b3:8f:87:6b:b7:
0f:e5:4a:3b:8e:dc:dd:56:09:2a:9b:19:ec:c4:c4:01:bb:51:
fa:8a:61:06:9a:95:2c:64:f3:08:12:d3:a1:f0:f0:ce:0d:94:
b1:b2:2a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:25 2025 by rpki-client