Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
File: SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft (raw, json)
Hash identifier: r9a0OE1lUGDqPORBojN0ud6l6X3+DFlzwFCyyseuxHE=
Subject key identifier: C7:22:C1:0A:CF:BC:76:19:BD:4C:39:B8:3D:EA:C1:B0:EB:54:9B:98
Authority key identifier: 49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
Certificate issuer: /CN=4999010bbb1f48709aeac02e84338a49b7774611
Certificate serial: 0199FC588772BA86669755762552F9E93BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
Manifest number: 11A5
Signing time: Sun 19 Oct 2025 12:01:24 +0000
Manifest this update: Sun 19 Oct 2025 12:01:24 +0000
Manifest next update: Mon 20 Oct 2025 12:01:24 +0000
Files and hashes: 1: MfMkCUr7HQ6KxqyWEzQVmKSbin8.roa (hash: 15XIx+4E6jpmVYTgDMId5DLCY/biXmoyIZeEQt1OExE=)
2: SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl (hash: nhumT9ja6EnoJ7IvJiGThWTW2f4Uhni5hDEUMTDeA7M=)
3: V7TwuQchFJyj3FzgSo-quNHM3vk.roa (hash: hjNtsrFF5n1yKl43GjiftBGk4/SSn0HVl0kFwJ8ePwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:87:72:ba:86:66:97:55:76:25:52:f9:e9:3b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4999010bbb1f48709aeac02e84338a49b7774611
Validity
Not Before: Oct 19 12:01:24 2025 GMT
Not After : Oct 20 12:01:24 2025 GMT
Subject: CN=c722c10acfbc7619bd4c39b83deac1b0eb549b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2b:71:88:3e:94:c4:f9:b1:40:82:f2:03:51:
25:23:6e:c0:b2:66:58:a6:98:13:47:49:6a:a8:00:
64:0e:b2:c1:95:dc:fe:b7:4f:bb:b0:fc:cd:a0:76:
a2:2e:4d:7c:51:aa:b8:34:77:5f:c7:69:68:d6:6a:
c5:e1:04:37:74:ad:0c:7b:13:67:66:3c:1f:ed:c1:
bc:ec:d6:c2:57:af:a5:1b:0a:d7:ab:1e:9d:23:a0:
72:c2:95:56:a3:96:26:34:e0:22:e5:b0:dc:be:1d:
0c:33:11:d8:f6:7e:2f:1e:1a:fc:a7:ef:44:63:5a:
82:a7:f6:29:b4:1d:27:24:51:5e:d3:37:a7:b1:a6:
f7:3a:f2:17:f6:39:15:f1:e8:32:2a:24:2e:b1:32:
e7:e4:1d:47:19:3e:8f:d6:3d:3a:0f:95:43:ca:86:
07:ea:24:5b:c9:0a:8a:40:c7:c6:8a:67:b5:a2:04:
1b:53:a3:62:2f:32:93:02:aa:4b:dc:5c:62:06:80:
b1:43:4b:05:98:94:9c:d9:94:f3:16:4f:e5:1e:cb:
72:e9:e3:94:ae:ce:4e:40:6a:72:4f:7d:20:8d:ad:
71:d0:8c:66:60:e0:c8:45:7f:29:03:19:b8:f9:a7:
8b:ce:4e:57:ca:00:68:78:39:49:c7:f6:48:7b:d6:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:22:C1:0A:CF:BC:76:19:BD:4C:39:B8:3D:EA:C1:B0:EB:54:9B:98
X509v3 Authority Key Identifier:
keyid:49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8c:75:92:10:95:1d:19:05:27:20:23:62:30:9e:9a:9d:96:
e2:88:7d:60:44:6e:ff:43:3e:3f:c9:ee:fe:59:02:4b:d7:b2:
2d:6e:56:96:3e:37:3e:e2:7a:ee:b8:7e:b1:21:1d:9a:8d:67:
52:45:5c:6a:4f:03:f4:5a:86:59:77:2c:f9:70:9d:2d:62:42:
62:6e:0e:48:93:68:04:22:90:f3:83:ff:1e:5f:73:9c:c6:5f:
95:98:10:df:2b:2a:b3:a7:7c:7d:36:c1:1a:28:af:84:df:42:
d9:c9:56:7c:35:fc:2f:ea:5e:a1:13:b9:ed:cd:e5:58:c9:8c:
7e:df:cf:6c:af:70:a9:55:69:ce:65:fd:f0:37:ea:15:e6:b7:
e9:e9:e5:ad:bd:24:e1:63:6f:ec:9d:26:11:17:3b:ab:4d:8f:
71:54:54:3c:1f:b7:b2:f1:c6:f6:69:8e:fb:ed:2d:fd:b9:4a:
1d:b7:15:26:27:2c:e2:4f:57:50:bf:70:01:e9:a1:f8:67:2d:
c8:25:91:de:b1:d7:00:07:02:9f:8f:ea:08:a4:a0:10:ec:1c:
a8:0c:04:a1:23:3d:bc:c8:cd:4d:02:ac:95:1f:1d:78:e7:72:
76:59:70:e6:b2:f6:ce:a1:1b:0e:84:59:bb:7e:53:5e:31:75:
ae:42:f1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:27 2025 by rpki-client