Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
File: sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json)
Hash identifier: bI9KF/tycxWWbvONDPa9zjkubVdAADA7Q1PPnt9LTck=
Subject key identifier: 8F:F6:50:68:C2:0C:F2:55:30:BC:17:68:A5:D3:F2:DB:A5:B0:37:3E
Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
Certificate issuer: /CN=b085804db153eb724c58557c79359c4408205550
Certificate serial: 019A00DA7B637C23D863AC9E27C9BDC9C7DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
Manifest number: 05C0
Signing time: Mon 20 Oct 2025 09:01:49 +0000
Manifest this update: Mon 20 Oct 2025 09:01:49 +0000
Manifest next update: Tue 21 Oct 2025 09:01:49 +0000
Files and hashes: 1: 18TNS4gBaAj1nBKZLGQyvBGXDAA.roa (hash: yG6kNp39rMwW08RfUJ3Cw47Eb4R/ZRHq/FbYcN4tnj0=)
2: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: H7G8Nu0EAQsAHO5C9qc/BsdWVeJRVhfchFKUPMgUQOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:7b:63:7c:23:d8:63:ac:9e:27:c9:bd:c9:c7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b085804db153eb724c58557c79359c4408205550
Validity
Not Before: Oct 20 09:01:49 2025 GMT
Not After : Oct 21 09:01:49 2025 GMT
Subject: CN=8ff65068c20cf25530bc1768a5d3f2dba5b0373e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:83:22:ac:b9:43:4a:94:d7:31:e5:4e:9a:
45:c7:92:d8:d3:aa:a9:3a:42:ac:ba:96:d5:8f:4e:
69:83:b6:36:d2:bf:ff:ef:67:fc:76:00:7b:65:a6:
9f:03:39:5d:f7:fd:c5:6b:c8:97:ba:2e:12:c9:3b:
1b:74:13:16:91:a5:70:d8:f0:61:12:17:aa:f2:86:
ef:8e:9a:9d:45:18:da:f9:4a:1c:50:b0:e4:12:d3:
4a:87:b4:54:8c:b6:88:32:9f:97:10:bb:7a:83:54:
ca:8b:33:d1:5f:58:4f:b6:a9:09:53:30:ac:9f:42:
cf:1a:f4:26:83:cb:38:fd:a0:ce:64:f2:0e:6f:bd:
85:dc:76:eb:a3:f2:a5:6c:a6:0e:8f:f6:bb:5b:a6:
8a:84:d3:12:7f:fc:4b:bc:62:b2:e7:1a:6f:fd:45:
e0:ce:04:32:c8:e9:dc:d3:ce:1a:f9:57:cd:1d:cc:
a8:23:1f:01:83:33:8d:9f:27:57:ce:09:88:af:5e:
df:e6:da:ef:02:8d:69:2f:f9:e6:cf:37:74:9a:21:
e5:6a:83:43:2d:0e:ec:d4:cb:46:26:a0:3e:83:cf:
64:46:5b:8e:60:6a:a8:d4:68:37:cb:6a:4b:84:75:
6b:b4:94:2a:7e:2b:0f:6d:57:e3:e0:ee:3f:44:7d:
9e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F6:50:68:C2:0C:F2:55:30:BC:17:68:A5:D3:F2:DB:A5:B0:37:3E
X509v3 Authority Key Identifier:
keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:80:b3:57:83:ae:bb:c4:73:8b:2e:53:f5:56:e4:5f:4d:8f:
c1:09:e6:b8:02:2e:42:2f:19:72:93:e5:a2:89:c8:f0:f5:18:
7b:00:39:6d:cf:24:3b:af:82:8c:a9:bb:11:68:5c:71:f5:bd:
07:b7:94:6c:08:7e:0a:84:fd:ce:09:a8:19:c7:fc:9c:88:fb:
58:e5:74:98:47:cc:33:ca:cb:4d:82:8a:d8:56:5c:db:8a:40:
41:99:28:43:36:5f:85:cc:5c:d6:a1:aa:9e:0c:a6:1f:b0:9b:
67:91:48:a9:cb:1f:92:8a:89:11:10:98:ce:c4:08:8a:ca:6a:
8f:c6:68:50:c4:5c:5d:13:ec:b4:92:45:57:bc:25:6a:ff:6b:
14:99:38:a6:83:0a:c0:b9:55:4b:a2:57:ab:86:06:d5:ac:de:
3c:60:11:28:9a:79:6f:3d:6a:0a:c1:6c:23:3a:3c:40:39:b7:
0f:cc:35:6e:f7:c3:7d:30:75:f9:45:95:65:c6:fe:2e:e9:f6:
2e:04:e9:10:cf:e2:27:98:ff:dd:a9:c0:10:b6:f2:99:00:66:
b9:f1:46:af:89:86:58:d3:85:c5:8d:f7:3c:1c:b8:d6:d8:25:
4e:a3:79:71:1e:77:c7:21:38:0b:33:ec:2d:84:f1:f3:02:cd:
5b:86:4b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:08 2025 by rpki-client