Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
File: sSQfEp2_xKFlH-zboDEI_NLMHfI.mft (raw, json)
Hash identifier: LpcwYhJwPGx0IMSp1zyy1U2UfihQVeJgLOknxb7x1WE=
Subject key identifier: 6E:D5:18:8C:C3:62:D1:4C:68:19:54:D8:DD:41:AA:CC:5E:1B:D8:61
Authority key identifier: B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
Certificate issuer: /CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Certificate serial: 0199FDD8BDCB052CE78C459A9A0F52C000CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
Manifest number: 0A8D
Signing time: Sun 19 Oct 2025 19:01:03 +0000
Manifest this update: Sun 19 Oct 2025 19:01:03 +0000
Manifest next update: Mon 20 Oct 2025 19:01:03 +0000
Files and hashes: 1: 0YQNQfPH4Cu72DoID5FMdAcNaLI.roa (hash: spBps2jYr/x0LCQGlcWxdN+sgAztOxCYMMvfbn6x0Mw=)
2: 6h5fVqp2myypb-eBCHxV-qnglhk.roa (hash: ZaO1YIuZK1aJ4bq0FVDrgZWOhjGCW0XbzAeErXreqcU=)
3: sSQfEp2_xKFlH-zboDEI_NLMHfI.crl (hash: OEHz8eDt8Qr7NG0yZOUH4D0VpTZw3Vb+jk1qg6GBq0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:bd:cb:05:2c:e7:8c:45:9a:9a:0f:52:c0:00:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Validity
Not Before: Oct 19 19:01:03 2025 GMT
Not After : Oct 20 19:01:03 2025 GMT
Subject: CN=6ed5188cc362d14c681954d8dd41aacc5e1bd861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:37:71:2a:dc:c5:c9:9d:d6:7b:f8:b8:6b:
1d:fd:38:fb:31:f4:47:43:b1:8f:69:30:cc:36:27:
46:06:10:7a:0d:d5:a7:25:dd:fb:4f:88:90:58:34:
e2:45:7c:3b:2f:51:b4:5c:53:29:24:98:57:6b:41:
5f:73:e3:27:05:a6:29:f1:e0:5d:60:3c:cc:68:a5:
e0:4a:68:49:93:3c:04:fa:0f:94:37:0f:e0:b0:0b:
70:e5:78:f5:aa:f0:06:3e:88:5c:01:73:f0:16:ff:
b6:e9:08:7d:78:f4:ad:68:4c:7f:a0:3c:d3:09:e3:
f0:80:be:80:77:93:f2:f5:ad:7c:73:0b:b1:ee:4f:
f4:00:57:b1:d1:64:00:fa:f4:da:b3:12:32:64:b1:
55:f3:8f:48:d9:89:82:38:1f:ac:c3:cf:b5:29:67:
a5:d5:15:8b:22:10:32:01:db:cb:f0:17:4c:82:77:
19:eb:55:10:f9:bf:33:2d:a3:9e:88:b4:92:fd:6e:
c6:21:9d:94:46:17:fa:e1:06:bf:f5:80:6b:c0:cb:
58:2b:f2:4e:5d:93:ec:ea:22:41:7f:04:ea:b3:98:
88:33:c5:46:c6:bf:c2:3c:44:4d:98:b0:0a:3c:1c:
0c:65:65:6f:37:8f:85:c0:7b:77:45:6e:94:e5:97:
18:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D5:18:8C:C3:62:D1:4C:68:19:54:D8:DD:41:AA:CC:5E:1B:D8:61
X509v3 Authority Key Identifier:
keyid:B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:05:0e:b8:81:a7:b6:9a:2c:20:31:4e:5b:06:3d:c1:3d:c9:
cd:f9:4f:bc:b0:fe:2e:0d:04:c5:ec:d4:1a:d3:b7:3b:22:7e:
e3:73:27:9f:a4:4b:75:5d:7e:f3:f8:df:43:25:e3:f2:65:0c:
f0:5d:e5:b2:f5:ef:75:fd:3a:ce:bc:03:e6:3d:42:a2:4e:67:
71:82:b1:14:13:57:37:74:ca:c3:e1:59:5d:8d:ff:3a:99:4a:
9e:a3:e5:1c:25:ff:ba:a8:b3:a3:7e:17:b2:2b:d3:af:0a:81:
f4:39:fc:e5:f0:40:e6:9c:18:5c:0f:d2:61:6a:ce:ab:53:9f:
65:2a:b4:6b:f7:43:64:3b:34:31:ac:47:16:98:04:8b:a6:25:
1d:87:9f:a6:48:01:78:8f:ef:06:04:99:4e:99:49:5f:54:1d:
eb:25:16:cb:f8:76:d0:5c:76:7d:30:00:29:5f:23:3c:bd:b4:
29:8f:f4:7d:6d:90:65:d6:7f:50:85:cf:e3:f9:b1:cc:dc:37:
c4:4e:24:03:75:d5:50:50:b6:88:d7:18:73:9f:19:5b:fb:e6:
f7:6f:01:87:38:07:55:39:bc:fc:b7:35:11:9d:9a:a9:be:dd:
a4:b2:43:4d:39:d4:6c:4b:32:2c:f0:e7:a1:43:cd:6a:ce:30:
a2:ee:36:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:09:00 2025 by rpki-client