Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
File: sK0iZDwtl71x-LY0-40dT58B9Kc.mft (raw, json)
Hash identifier: 7E2A5op6VIK6/bFYSu7dT7ObZwqU8QXSHNjS46N1TlU=
Subject key identifier: E7:03:8E:E3:56:A3:DB:BF:93:F0:36:7B:1E:12:C0:4D:51:2C:D0:5F
Authority key identifier: B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
Certificate issuer: /CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Certificate serial: 0199FD6AF3B09C696658968EA26D11909F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
Manifest number: 1141
Signing time: Sun 19 Oct 2025 17:01:08 +0000
Manifest this update: Sun 19 Oct 2025 17:01:08 +0000
Manifest next update: Mon 20 Oct 2025 17:01:08 +0000
Files and hashes: 1: 89qbXuP3JJGKzWaNZO3dqnt1pdw.roa (hash: obr33L2CB/OVnTXprqPZCOQ9LeK6vQA821ilRu8qFT0=)
2: sK0iZDwtl71x-LY0-40dT58B9Kc.crl (hash: lo64Rz8NP1Y39lFBef1cs/snmTPvyYTNr8XQwkZeT5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f3:b0:9c:69:66:58:96:8e:a2:6d:11:90:9f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Validity
Not Before: Oct 19 17:01:08 2025 GMT
Not After : Oct 20 17:01:08 2025 GMT
Subject: CN=e7038ee356a3dbbf93f0367b1e12c04d512cd05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f3:66:1c:1e:99:e9:45:84:b6:96:28:26:2f:
db:62:74:8b:a5:81:a3:08:56:40:af:24:ff:7f:45:
cf:d3:e5:ad:e0:aa:55:d5:39:6f:11:18:1a:57:72:
41:2d:08:cc:cd:4f:df:a1:31:5f:1e:e6:50:49:92:
95:98:b5:a8:30:b1:ad:94:26:6b:98:c9:3c:4c:df:
c7:f7:ec:1e:d5:da:47:1e:88:a3:2b:6c:20:5b:56:
51:83:e6:90:33:61:16:f5:ac:26:ad:6a:f1:e6:6a:
62:bb:94:57:ea:8f:2d:da:5a:6f:ee:e3:d7:82:82:
2b:18:c5:8f:d4:5d:30:58:47:1d:27:c2:b0:a2:bf:
10:22:9e:5f:4c:60:13:a0:2b:b4:bd:0d:8c:da:36:
1a:02:da:7c:22:16:76:77:82:fd:2d:55:e6:69:d3:
b6:35:cc:22:aa:3a:af:1f:55:85:fc:a1:c8:10:e9:
30:c0:76:ff:60:a8:a5:46:ae:ba:9b:ae:12:4f:98:
0a:5c:82:5c:ed:7e:57:85:83:a2:18:69:49:71:25:
67:36:9f:90:8c:2a:f7:6c:ce:a4:5c:2d:f0:fe:73:
86:94:b1:47:f4:72:17:a5:25:05:5f:ec:fc:c8:d6:
ab:80:a3:a1:dd:57:1f:b1:75:e6:da:9c:37:d7:7a:
02:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:03:8E:E3:56:A3:DB:BF:93:F0:36:7B:1E:12:C0:4D:51:2C:D0:5F
X509v3 Authority Key Identifier:
keyid:B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3c:54:85:10:e6:4e:db:21:26:7a:16:87:a8:f2:d5:61:b7:
95:5a:65:25:1a:eb:d6:5f:09:9d:00:63:bd:fe:35:91:31:a4:
9c:60:2d:25:61:09:ee:a5:dc:02:ff:34:16:72:46:7f:a1:38:
ea:b7:c6:d6:56:e9:bc:bd:97:35:65:68:94:be:64:4b:6e:1e:
06:b2:2a:a4:31:59:eb:df:96:ab:1e:8b:ea:b4:d8:46:08:89:
06:27:f1:24:96:18:9f:4e:95:67:14:60:8c:82:47:de:ed:7f:
b0:72:22:e3:50:19:55:cb:7d:72:65:67:fd:9b:c3:20:51:c6:
13:b2:05:b1:c7:12:d6:14:36:cb:e8:35:16:0e:0b:08:26:87:
74:2b:28:10:a7:34:6a:09:fb:ec:a3:93:f8:ee:6c:ec:0a:78:
fb:76:ca:a6:66:28:aa:4c:9d:bf:4b:83:7d:be:ae:8e:5a:7e:
8c:10:14:03:7d:f6:70:45:0e:82:61:31:9f:e1:74:e2:91:1b:
75:08:f3:95:7b:11:65:40:a1:8f:2a:76:5b:c8:df:17:11:2a:
82:c8:c4:fc:39:02:ba:ab:a2:f3:57:d1:7f:69:17:dd:6f:c2:
78:b8:c5:35:41:88:49:3c:35:93:42:84:09:4e:3f:8e:bc:d7:
00:6b:89:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:22 2025 by rpki-client