Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: C8JfwOI4DFp8vrGt3XNz8eccI41f036/brEOOu1dQ1A=
Subject key identifier: B0:EA:38:65:8C:03:BF:8F:6B:5B:A2:43:D0:C0:43:CB:91:0D:AB:08
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 0199FEB49AFE8F7122350018F3FAAD98BBFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 1678
Signing time: Sun 19 Oct 2025 23:01:12 +0000
Manifest this update: Sun 19 Oct 2025 23:01:12 +0000
Manifest next update: Mon 20 Oct 2025 23:01:12 +0000
Files and hashes: 1: aXSOEWx3tVF7ynpp-Q3fBbDZg50.roa (hash: RSnTxORBukbARx6FRTZpYXAyjlGDaMBXkz61tBk9AhY=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: oXM2ihVSBiTLAem2LF0u4VP2xQbudGe/dVyQXVnHJPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:9a:fe:8f:71:22:35:00:18:f3:fa:ad:98:bb:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Oct 19 23:01:12 2025 GMT
Not After : Oct 20 23:01:12 2025 GMT
Subject: CN=b0ea38658c03bf8f6b5ba243d0c043cb910dab08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:60:ce:12:ea:42:61:ad:6e:ca:39:79:06:72:
d5:f9:c2:c5:9e:65:aa:75:aa:d0:4f:36:2b:b1:1a:
74:f2:72:a9:50:dd:bf:ea:83:eb:86:7e:4d:ec:2b:
dd:b4:c6:b0:7c:34:07:36:14:8a:1b:18:56:04:d6:
3e:87:1f:5b:70:ec:9c:64:bd:b4:07:2e:41:c7:a5:
be:15:32:7c:5b:1e:8d:06:f7:d8:f5:cd:94:bb:2f:
d9:b2:8b:8a:68:23:bc:98:da:5b:e8:38:fb:02:9c:
ed:f6:f7:f2:d3:85:92:2b:44:bd:49:0b:1e:25:54:
fe:df:80:bf:d5:e8:63:c7:c3:2d:68:b0:9a:f2:38:
fc:f8:e2:81:8f:b7:98:1d:25:0e:d0:b3:e2:63:59:
38:97:bb:70:1f:42:ee:48:4e:30:59:25:97:ae:d7:
28:12:6f:b8:9f:a3:4f:b4:64:17:b5:99:01:91:2c:
a4:ec:90:7c:79:b0:a9:ed:bf:a5:e5:6b:7d:51:c4:
22:d7:fc:6d:8e:3b:ab:49:c1:92:c4:6d:f4:1d:31:
85:3e:35:e3:dd:3d:2e:72:ea:e0:ef:f8:0a:62:4b:
03:56:25:9e:07:a3:50:ff:76:6a:50:8c:ae:31:69:
ca:72:eb:52:d9:f2:17:d3:63:e1:82:d0:9b:42:24:
ad:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EA:38:65:8C:03:BF:8F:6B:5B:A2:43:D0:C0:43:CB:91:0D:AB:08
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:58:d3:60:22:33:35:84:d1:ac:89:f7:da:ee:e9:73:48:cf:
99:fa:63:1f:06:d2:38:d3:a3:95:67:e3:93:f8:5f:58:1b:66:
00:74:a9:a1:4a:0e:c1:46:78:b0:77:9e:b8:2b:2f:11:0e:57:
37:99:e5:39:8e:fe:5e:3c:fe:0c:b8:e7:a1:a6:03:c1:af:c0:
db:94:65:68:a8:ab:61:9b:9a:83:2b:00:8b:a0:a9:6c:5b:a1:
e3:da:3f:7a:c6:0e:bd:07:f0:6a:95:8e:33:7f:9d:95:f4:f8:
47:8a:9e:66:00:7e:1d:54:f0:2f:9d:50:04:57:77:1a:ec:76:
5c:b2:b4:14:70:13:27:35:43:dd:38:08:76:8f:4b:a6:af:34:
57:64:da:3c:68:77:8c:52:78:c3:4b:b2:5a:2a:52:2b:16:f2:
7d:79:44:51:52:28:9b:06:36:dc:ed:df:3e:a4:dc:57:c5:4d:
88:f0:42:e3:9b:a9:c8:70:26:e4:bb:6d:b0:fb:ed:8d:5a:6b:
50:0e:0e:3a:69:44:0c:a5:50:67:51:af:9a:ff:be:87:05:ef:
30:14:b1:c4:d2:5f:b0:51:2b:ef:cf:b1:6d:f9:c0:20:f9:90:
37:24:57:1a:01:f3:93:46:06:60:1f:06:af:05:62:b1:bb:b2:
a4:3a:0f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:18 2025 by rpki-client