Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
File: SAa55i8bAPLPmNDcxYMpKvrLUi8.mft (raw, json)
Hash identifier: cI5Zzz2pl0EjuKvIGexI3IIfkzzGa3VgVcePaOVpqmc=
Subject key identifier: 1A:59:41:29:B0:12:86:63:F7:A0:ED:54:3A:FD:30:93:9A:F7:44:3C
Authority key identifier: 48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
Certificate issuer: /CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Certificate serial: 0199FD33E614296C97B83E5BC6B17512C65F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
Manifest number: 11A6
Signing time: Sun 19 Oct 2025 16:01:00 +0000
Manifest this update: Sun 19 Oct 2025 16:01:00 +0000
Manifest next update: Mon 20 Oct 2025 16:01:00 +0000
Files and hashes: 1: SAa55i8bAPLPmNDcxYMpKvrLUi8.crl (hash: 64HuGL4JQ1GHJQxwBfIl8etiWBBs0Q/xatEeUf2clXk=)
2: bOFB3LalOSOdSrbz-a4cUkkG03M.roa (hash: SZa6u36skxx1rALcmnxtRi0278XWZ89tCnch5FRpzoM=)
3: ipcAqlbQdh9QjilJG8UTA6cw-zw.roa (hash: RUMHng+Xlo2Ru6wmJaBAotc3mLSEqq30G4I26Jr98jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e6:14:29:6c:97:b8:3e:5b:c6:b1:75:12:c6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Validity
Not Before: Oct 19 16:01:00 2025 GMT
Not After : Oct 20 16:01:00 2025 GMT
Subject: CN=1a594129b0128663f7a0ed543afd30939af7443c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:a1:5a:c1:14:67:73:af:f4:d6:71:f6:05:
d8:c6:bf:36:77:8a:56:dd:f0:18:78:10:2c:36:e5:
ee:a8:0d:f1:64:f6:80:e1:9a:d7:e9:23:dd:0b:ca:
32:03:9d:86:20:c2:4a:0f:20:5f:d3:eb:4d:a7:3b:
23:f4:b5:37:b1:27:3c:7a:65:e9:46:bd:c1:1a:89:
d3:b2:af:59:fb:bf:e0:a2:4a:e6:8a:f7:db:c6:66:
32:48:b4:5b:7d:70:6d:18:6b:db:f3:a2:82:34:81:
dd:dc:0f:f0:c0:73:a8:2e:6e:f2:23:fb:7c:6a:86:
6d:c3:92:b5:0e:af:c1:11:ea:03:d1:37:fc:cc:18:
05:ee:11:88:d6:27:19:1c:a6:8a:17:e9:8e:a1:5c:
2d:66:a1:3c:de:e6:1f:1e:99:f8:57:30:9e:be:28:
e2:dd:67:27:ce:1f:21:86:c8:85:b8:57:69:32:c8:
1f:14:03:79:1d:1e:11:cd:b4:30:74:28:2b:bd:19:
a8:b0:c1:ca:44:ac:1c:06:7e:ea:22:69:4d:65:6f:
5a:06:7d:4b:6e:80:52:69:c2:6b:2a:87:24:1c:c4:
33:85:f4:ef:60:5a:2c:64:77:53:b6:3c:f0:4f:83:
09:22:12:9b:64:ce:f5:e9:50:7b:f4:15:b7:21:f8:
c5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:59:41:29:B0:12:86:63:F7:A0:ED:54:3A:FD:30:93:9A:F7:44:3C
X509v3 Authority Key Identifier:
keyid:48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e6:1b:d5:55:ae:d7:b3:38:d0:cd:02:18:3b:93:95:e3:77:
9e:af:54:6a:4f:c3:03:49:79:74:ac:82:32:f6:f2:a2:33:d5:
9b:ab:b6:bc:5c:ac:15:e5:d4:f3:e3:e3:fc:8c:8e:d2:70:ce:
67:a2:c0:70:62:b1:b2:19:ce:1d:26:59:8f:b9:ca:04:98:87:
00:7d:5e:c2:5b:94:92:25:5a:d5:7f:64:83:e2:9e:27:7a:62:
12:af:b5:ca:07:98:bf:11:5a:af:cc:41:ec:b0:3c:94:cc:b0:
4d:0a:47:7a:c7:65:bd:de:01:1b:bf:98:4e:b0:f3:75:39:66:
5e:03:ea:16:99:78:0e:2f:9b:f9:6a:10:ed:01:84:ae:a4:f2:
cd:b7:4f:04:e3:f4:43:36:79:70:62:8a:d9:e2:a0:0d:89:f8:
64:ce:9e:17:4c:dc:6a:04:38:21:44:d2:af:d1:c3:61:cb:79:
19:75:7a:9e:b5:8a:17:61:33:fc:eb:e2:1a:97:f0:78:28:2c:
de:87:03:95:78:3d:e2:08:c2:a0:6d:e8:6d:57:a2:66:36:82:
d6:d4:f3:9b:2c:22:62:a9:37:97:1d:dd:58:6a:a7:74:f4:64:
8b:e3:a8:a5:a1:c3:7a:e6:b9:a5:68:13:a2:58:bf:3b:7f:e8:
17:15:f9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:54 2025 by rpki-client