Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
File: SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json)
Hash identifier: F9aJ+0AtVjUb+skBdPAhk+MpmQgCbzUakjQReKZfVqQ=
Subject key identifier: 6A:E3:F6:1A:13:CB:21:2E:F9:30:6F:A0:26:52:20:4A:CE:E7:4D:74
Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Certificate serial: 0199FBEBD4C312172272D32C18BBF94946C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
Manifest number: 0A20
Signing time: Sun 19 Oct 2025 10:02:40 +0000
Manifest this update: Sun 19 Oct 2025 10:02:40 +0000
Manifest next update: Mon 20 Oct 2025 10:02:40 +0000
Files and hashes: 1: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: aWoJew6lGGdssZyD43hFxcd/ou1+09YFcVW0Q5fYJfI=)
2: sTQX2j9_L-RKxKJ-gpSAUcHW26c.roa (hash: SMZ74eYXgCBYRpcaMVOmXChoRcbWwRauRrg3+g+Vya0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d4:c3:12:17:22:72:d3:2c:18:bb:f9:49:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Validity
Not Before: Oct 19 10:02:40 2025 GMT
Not After : Oct 20 10:02:40 2025 GMT
Subject: CN=6ae3f61a13cb212ef9306fa02652204acee74d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:7a:11:24:9f:76:bd:32:62:ba:e8:ff:d3:
a7:98:72:3c:96:7c:c4:3b:83:49:40:e4:b5:64:c6:
61:95:61:41:61:3f:fb:22:dd:58:44:c4:7b:a1:ab:
49:35:74:7a:84:25:4f:74:b4:ad:88:9d:d2:c9:d7:
b0:cb:40:98:52:6c:13:db:5d:9c:2d:ef:44:e0:f2:
65:9a:a1:cc:93:9a:85:69:b9:bd:7e:d5:3c:60:f7:
a4:e2:bb:95:fb:92:e0:0c:33:c0:15:4a:22:83:08:
4f:5c:75:f2:20:de:77:a6:6c:91:b5:48:32:a2:93:
77:62:6f:65:1c:15:b4:d8:52:ab:89:c9:05:e4:96:
80:48:c7:93:b1:38:6f:84:fe:18:8b:e6:e8:80:72:
7c:38:53:7b:76:ac:f1:79:2b:0e:e7:6b:bd:06:a9:
e2:34:80:0f:8e:e7:5a:71:b0:2d:30:6e:6c:a0:2a:
f1:75:1a:ca:e1:31:00:6d:d8:bc:17:e4:23:ae:11:
f2:a3:0f:ca:df:a3:ed:4c:8e:7e:44:35:76:56:58:
9a:91:6d:0b:68:8b:54:3f:51:56:46:d5:f9:0b:9b:
f8:19:9c:e5:c3:d0:52:1f:6a:7a:61:c8:e6:8b:98:
57:50:64:73:06:58:de:0a:e8:a2:71:10:e4:e8:a2:
b7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E3:F6:1A:13:CB:21:2E:F9:30:6F:A0:26:52:20:4A:CE:E7:4D:74
X509v3 Authority Key Identifier:
keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d5:47:22:0c:31:c7:e4:0f:03:62:ec:25:1d:e4:c1:ca:16:
cb:6c:31:ea:50:d3:14:d3:f8:56:5f:c5:da:d4:05:01:d3:25:
57:eb:1d:58:c1:b9:0b:9c:7e:8c:d5:c8:3f:f6:52:d4:dd:fb:
a2:80:6a:83:0c:fd:42:54:62:24:1c:ff:16:dc:b8:ec:51:84:
9c:21:84:59:fe:7a:f3:e2:b3:42:00:b9:e7:db:32:6a:f1:10:
81:b9:42:ec:b5:04:7e:29:a6:61:47:4f:81:97:6b:62:a7:bf:
fb:e8:ce:3d:72:13:20:6b:40:8e:10:53:fd:0b:25:34:bb:03:
7e:95:22:eb:aa:66:31:8c:6c:86:80:1e:09:61:3b:de:9b:ee:
05:3b:ea:3a:16:e7:8e:55:ed:33:e3:8a:2b:17:56:89:77:0e:
80:37:c1:84:d1:14:7e:14:c5:85:06:73:56:15:ee:68:aa:83:
2b:44:59:23:a1:28:94:d9:1f:44:47:bc:54:db:71:a7:b8:e9:
c7:ef:f9:26:66:5d:c3:5e:4a:e1:7a:1c:7d:f2:40:f2:ca:73:
b8:af:90:b9:7a:95:b4:61:f9:95:04:b0:5e:c4:ca:7d:8f:39:
f5:9f:c3:20:5d:81:46:eb:37:31:a3:27:08:10:74:6a:98:f2:
49:d1:b3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:37 2025 by rpki-client