Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
File: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft (raw, json)
Hash identifier: 0S4bLq6WINGEQO25hrH5BzddUEEJE8EY+1Xdd6WGuiA=
Subject key identifier: C1:BA:AF:EC:C5:74:A5:EF:61:68:E7:89:E6:66:C4:0B:FA:78:7D:24
Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
Certificate issuer: /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Certificate serial: 0199FF230DC63C6FB7B2916A41005365BD03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
Manifest number: 127D
Signing time: Mon 20 Oct 2025 01:01:51 +0000
Manifest this update: Mon 20 Oct 2025 01:01:51 +0000
Manifest next update: Tue 21 Oct 2025 01:01:51 +0000
Files and hashes: 1: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl (hash: uKJpG6EWzvssveXCMdgPsRDlideWxRbyUcu3bhJcebM=)
2: VulQHWhzzPXQiRPOfzUk9fbQoJg.roa (hash: 1pq8LhNOVu3KfmYwRxokFt42T5gBAiGcBFnCuEB+z6M=)
3: mGb7BxKlXQ1k9CHjDWD7BMFZHSQ.roa (hash: tJF8uovUStWmO8f7TDEtjdEZUW2noIjEbpOLcO1y40s=)
4: nGPZ_NATggl_6nfv7Xs72s2omBg.roa (hash: Ctlvy2xSgma+HOqaqZwfMsyO5ZwXHLYT1LbAR4ndsm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:23:0d:c6:3c:6f:b7:b2:91:6a:41:00:53:65:bd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Validity
Not Before: Oct 20 01:01:51 2025 GMT
Not After : Oct 21 01:01:51 2025 GMT
Subject: CN=c1baafecc574a5ef6168e789e666c40bfa787d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:e3:ac:4a:a4:74:ba:b6:ca:e9:e7:9b:f1:
03:00:47:85:14:36:06:03:6d:b5:50:53:20:49:34:
ab:ad:a9:27:cd:05:e8:c3:52:8f:0c:c9:85:49:7b:
89:83:a5:63:09:a5:c3:af:75:11:b7:ef:46:61:33:
82:11:35:6a:6d:2a:20:18:96:94:d9:97:d6:32:74:
c1:76:d7:12:b0:3d:fe:bd:26:87:16:c9:c0:f4:7c:
fc:b4:77:4d:06:18:71:6d:5d:7c:b8:d5:d6:20:51:
66:0d:b9:56:db:f6:bd:3f:d5:54:cd:87:d2:b9:33:
a9:b1:54:82:3f:f2:a4:a2:61:ca:89:5b:19:31:a1:
b0:c7:0a:78:a7:ce:af:b9:8e:75:59:8f:7c:3e:3d:
54:ab:e1:80:1a:7f:39:35:ab:65:05:55:ef:ca:31:
0f:8d:69:49:9e:1e:6a:28:dd:81:6f:94:ad:cd:08:
78:d8:01:11:96:91:00:7f:a2:24:68:46:b2:e6:ba:
4f:fb:94:aa:86:85:57:ab:d8:ae:7c:a6:eb:88:e9:
9c:c4:9a:bc:6a:f2:9d:50:6d:52:fd:47:26:58:ce:
4a:1a:56:ac:e5:f1:08:92:6e:15:02:fe:02:2f:0f:
76:88:8b:36:84:6c:aa:11:24:2e:e2:f2:4d:e2:26:
d3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BA:AF:EC:C5:74:A5:EF:61:68:E7:89:E6:66:C4:0B:FA:78:7D:24
X509v3 Authority Key Identifier:
keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:2f:a4:6a:4a:9a:5f:e6:3e:6f:72:58:e1:5a:e6:f9:ef:2a:
7f:00:cc:8c:80:d9:32:7a:8d:8c:76:1c:67:39:b9:e5:89:dc:
73:6b:31:cb:f9:3b:0e:0c:c5:e0:4c:e3:8c:a0:d0:e2:ab:5d:
15:0e:14:57:27:48:74:e7:6f:f3:69:ef:2a:db:0c:1e:4d:50:
d7:c3:e3:71:2c:b5:63:6b:cf:b4:bf:39:31:1d:5c:f9:9e:88:
a3:84:44:b5:4b:5f:d5:1b:e7:2c:ca:a5:fe:96:56:96:32:c3:
c4:91:c0:bb:7b:5a:37:43:5e:c6:e5:02:f8:5d:24:60:37:66:
42:a2:b0:83:bd:2c:69:cb:5f:c5:26:17:82:00:29:a3:6b:6d:
49:90:13:96:7e:41:f7:3a:5b:20:d4:47:60:77:75:48:0d:18:
69:90:58:d5:67:39:b9:38:61:9c:86:ab:80:67:47:9d:0b:18:
c1:e1:61:5e:4b:81:61:ad:05:71:14:55:37:a3:78:84:69:6f:
46:c8:70:65:b2:70:90:66:ff:fd:3d:0a:45:e0:96:41:e0:57:
67:b3:58:25:c0:32:68:c8:f7:b4:34:e7:d0:cb:80:d7:4e:85:
42:ee:8e:67:11:a3:f2:a4:e9:c0:c9:9f:19:24:3d:e4:53:9a:
f0:2d:49:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:46:59 2025 by rpki-client