Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
File: sffQCUrcmNmwMnIOgePbWqdYHHQ.mft (raw, json)
Hash identifier: IUmgMTXWAUixyNLQa5HxB5YLBchg36LcHb3l9gMquVg=
Subject key identifier: EC:61:9A:0C:D4:57:2A:05:4E:0A:E6:23:4D:48:77:33:FA:A1:FB:61
Authority key identifier: B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
Certificate issuer: /CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Certificate serial: 0199FD33FC0E096F577731C95940F5484D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
Manifest number: 0C6A
Signing time: Sun 19 Oct 2025 16:01:06 +0000
Manifest this update: Sun 19 Oct 2025 16:01:06 +0000
Manifest next update: Mon 20 Oct 2025 16:01:06 +0000
Files and hashes: 1: sffQCUrcmNmwMnIOgePbWqdYHHQ.crl (hash: T14EU5XI8N0bsxqKQZlm+YcZw+0jLP3k104OvFeGhJ8=)
2: tkngR5wwQ6qh3iGid8LqkeZO0Sg.roa (hash: XAoboSbFoG6N+OZ4mfDqaXa/N9sFsWbZUGbRzqL5oH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:fc:0e:09:6f:57:77:31:c9:59:40:f5:48:4d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Validity
Not Before: Oct 19 16:01:06 2025 GMT
Not After : Oct 20 16:01:06 2025 GMT
Subject: CN=ec619a0cd4572a054e0ae6234d487733faa1fb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:53:39:b5:5f:a4:3d:b7:ff:4a:7e:cf:46:
93:3c:65:64:4a:e5:ec:51:30:46:f9:7b:55:cb:87:
51:4b:c7:fe:32:1f:33:24:18:ca:97:0c:c5:0e:ac:
b0:34:4c:a5:c7:cd:3b:01:12:b3:24:fb:4d:5c:39:
21:08:87:b8:e5:99:d5:86:79:ab:5c:16:3d:2c:b9:
e7:68:42:e6:07:58:54:97:7f:bf:c4:91:e7:e0:34:
5e:26:53:a2:d2:2f:75:88:55:d5:c2:82:d0:64:d5:
26:45:49:21:27:7c:d2:27:3e:43:ae:a4:80:6d:1e:
75:92:96:b9:23:06:4f:37:62:3b:d7:b8:52:a6:77:
39:f6:6e:c0:47:17:c7:52:c0:d8:3e:54:a1:21:85:
8e:91:a4:01:dc:ea:c3:c7:2d:64:39:28:dc:f2:55:
8c:21:54:bc:ec:b3:64:45:c1:5d:5f:6b:78:50:4d:
6a:82:e1:2b:71:b3:7d:e7:e9:34:69:23:3c:9d:15:
b9:31:6b:5d:36:1c:30:cd:7f:25:7e:f7:4d:5d:ab:
55:46:3d:08:74:2b:05:ba:ff:e8:2c:fc:ae:0e:25:
65:03:8d:45:a7:38:1f:9e:86:f1:95:3e:80:6e:aa:
1c:5c:48:72:f6:02:50:7a:52:44:9f:58:48:4a:51:
3b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:61:9A:0C:D4:57:2A:05:4E:0A:E6:23:4D:48:77:33:FA:A1:FB:61
X509v3 Authority Key Identifier:
keyid:B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:34:f6:90:47:27:24:47:38:13:92:d2:43:93:fa:fa:53:70:
b8:8b:76:72:5d:ea:a7:9d:e0:55:6c:b6:34:64:73:b2:4f:c8:
7f:ed:7e:43:1d:62:da:85:b3:89:0e:95:c1:d8:b6:bd:3b:40:
e4:32:a3:0f:c5:92:6e:57:b1:af:7b:a7:17:96:59:39:cb:80:
89:5a:b2:0a:fa:f1:ad:1f:ad:fd:a3:81:13:6f:2a:57:15:1d:
63:04:69:b9:78:e8:1b:31:fe:f3:19:62:f6:ad:f8:1a:f9:12:
52:fd:7b:0a:ef:8e:25:5b:26:31:42:33:90:8a:da:3f:f7:0b:
65:bf:73:c9:c6:17:93:14:25:cd:01:fe:d3:78:a9:00:ce:62:
d4:03:08:ef:71:ab:e3:0f:3d:b3:03:bd:d3:15:a4:a3:eb:5b:
c1:87:80:de:5b:80:f1:f8:8d:36:fd:f9:c2:0f:ba:ca:b0:39:
5c:e5:40:f8:9c:f1:2f:a9:92:db:0b:1e:fc:50:fd:07:01:fc:
7b:19:7f:d3:2d:44:80:25:a2:7d:1c:d8:a0:e3:0e:c5:39:8b:
f9:3a:dd:47:10:ab:27:2e:8b:51:c5:9c:57:9c:ed:ee:49:9f:
f6:8e:4d:71:4b:b8:4d:6e:6e:4f:08:cb:1b:8b:87:a7:ff:b4:
97:76:19:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:17 2025 by rpki-client