Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
File: S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json)
Hash identifier: jVxgxO71wXrKzwy+24DjNJCmqLZtyEkZ3KVg2RrbWvM=
Subject key identifier: AF:C2:4C:CF:67:AD:5C:56:79:3A:DA:1F:44:AB:32:4D:99:76:A3:CD
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial: 0199FBEA74C856EC2C8CD20FEBC0913EE68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
Manifest number: 0E7D
Signing time: Sun 19 Oct 2025 10:01:10 +0000
Manifest this update: Sun 19 Oct 2025 10:01:10 +0000
Manifest next update: Mon 20 Oct 2025 10:01:10 +0000
Files and hashes: 1: Fg5ya9jEENzzvmGwH2Ykprm5YIM.roa (hash: o09Ogu5nR2BkFMd5V+jfaqfvdxmKcg813astixFQ7Wo=)
2: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: 88aPPRmRiM1gsiZzSU7IqZBzoHgxEj8jb1qgzjCqxUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:74:c8:56:ec:2c:8c:d2:0f:eb:c0:91:3e:e6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Validity
Not Before: Oct 19 10:01:10 2025 GMT
Not After : Oct 20 10:01:10 2025 GMT
Subject: CN=afc24ccf67ad5c56793ada1f44ab324d9976a3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:89:45:ca:dd:4b:f9:72:b8:d6:13:26:a5:
65:0f:3e:42:64:e2:35:05:51:90:ff:d2:2b:87:ee:
89:90:4b:94:ce:3b:7e:17:37:25:fc:d6:6b:e6:29:
28:37:30:4c:2e:7f:79:cb:cd:54:b0:ef:56:00:0d:
1f:ba:08:9e:ae:df:0a:c9:8e:69:33:ab:d7:b2:c8:
be:07:85:bb:24:b9:b6:30:d2:3d:70:d0:62:5f:a0:
31:9f:2a:c3:76:d8:7b:03:46:7c:94:47:b9:b8:00:
b8:54:2c:ac:93:31:7b:85:dc:8b:f1:13:97:a0:a5:
a2:65:53:8f:84:3e:f7:c9:f0:61:a7:51:c3:0c:e4:
90:d7:12:37:ad:ba:b7:76:24:21:01:67:9f:62:69:
f0:c0:f1:c1:50:4c:a0:73:97:7f:e3:d5:51:35:e9:
a6:aa:4e:6e:dd:98:2a:98:7b:8e:55:99:b1:8e:bb:
c6:66:c2:39:e9:49:dd:a2:6c:36:b4:25:67:33:df:
89:35:13:b8:08:0b:dc:3b:22:bb:30:c5:b6:f8:2a:
7c:b4:34:dd:26:5d:a3:30:4a:ab:bb:6e:9f:6a:7a:
83:a9:bd:8d:41:8a:44:8f:f2:5e:9d:dd:5e:08:3e:
6e:42:33:6b:0b:41:6a:56:c0:55:f8:a1:be:81:cd:
2f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C2:4C:CF:67:AD:5C:56:79:3A:DA:1F:44:AB:32:4D:99:76:A3:CD
X509v3 Authority Key Identifier:
keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9a:c1:d0:70:ef:94:5f:6b:c9:21:74:11:ee:64:93:47:98:
af:a9:7f:44:8f:05:4c:e3:78:b7:ee:62:84:6e:ee:84:2c:d1:
28:86:3b:40:05:f9:04:a9:6e:3e:94:9e:31:b9:52:75:ae:b0:
c0:7f:72:64:83:5c:26:ff:70:b1:ef:b0:39:b3:38:7b:07:51:
4f:f1:9e:5a:ca:59:16:42:5d:c9:68:cb:0d:36:47:96:d2:3b:
44:e2:e6:12:61:ac:be:50:1d:cc:05:a5:16:d5:e2:6e:78:d4:
e2:08:44:0b:55:99:64:c2:cd:94:2a:9b:65:de:f6:20:84:22:
fd:f4:09:e2:3a:a0:d6:04:c1:f2:9f:ea:af:6c:b7:28:5e:77:
54:3b:3e:bf:c5:e8:ca:29:c0:13:c2:80:b6:a1:59:60:46:ee:
cf:bf:b7:af:ca:7b:3a:b0:6c:b0:56:71:f0:1c:55:4f:28:8e:
7d:db:e6:36:e7:06:17:ed:4f:25:36:99:ae:c0:7c:94:ce:e3:
e9:f7:f9:70:c1:4a:35:94:dc:d8:a1:81:3a:30:98:4f:5f:2b:
a6:97:b5:a6:8f:7d:93:b1:d6:b1:ce:46:8d:a0:42:79:8d:9a:
c2:d0:ac:3b:93:af:22:12:0d:29:08:8c:56:42:32:15:5d:95:
8b:9a:dd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:51 2025 by rpki-client