Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
File: S-iWpBlThdS5S3KVmIzPv6ismcU.mft (raw, json)
Hash identifier: ODK9MDX3bIc99QDYXg3617m6gucslekwBcezkwgMoWM=
Subject key identifier: B0:2F:F4:62:5A:1B:6B:A3:79:74:2C:59:C1:58:F5:94:36:11:C4:BD
Authority key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
Certificate issuer: /CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Certificate serial: 019A4D3D016F63A8AE78CAFE0F05422618B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
Manifest number: 0DA0
Signing time: Tue 04 Nov 2025 05:00:34 +0000
Manifest this update: Tue 04 Nov 2025 05:00:34 +0000
Manifest next update: Wed 05 Nov 2025 05:00:34 +0000
Files and hashes: 1: 6KASjwCz7ilKa_zbYR8rA5RUBrc.roa (hash: T4+QVQXXLI7KFzCBe08m6pD6fADi9vWJFsV+O2tzwnA=)
2: S-iWpBlThdS5S3KVmIzPv6ismcU.crl (hash: 7dc+mcY4DBo7nwGzhQ/aBhHbgH6+vzsRtHoBBYkut24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:01:6f:63:a8:ae:78:ca:fe:0f:05:42:26:18:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Validity
Not Before: Nov 4 05:00:34 2025 GMT
Not After : Nov 5 05:00:34 2025 GMT
Subject: CN=b02ff4625a1b6ba379742c59c158f5943611c4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:1c:88:8f:a5:0f:fb:e1:c1:c2:6c:bc:f5:
e2:73:25:56:9c:c2:44:84:4a:d7:3e:91:bb:11:53:
87:e7:61:bd:2e:69:f9:0d:d1:05:78:1c:61:5d:0e:
34:d1:ae:43:05:69:44:8a:2e:ae:7a:80:b6:89:ba:
4f:7b:31:e0:65:33:1c:09:4c:37:cb:e9:c6:29:2c:
74:d8:95:b9:5b:ab:18:16:db:77:10:fb:b0:41:36:
7e:c8:9e:2c:7f:0f:be:3b:2e:c5:44:de:5d:74:68:
67:bb:24:83:9d:28:3c:3b:56:1c:1e:98:49:73:4f:
d3:05:36:a6:40:6f:30:d8:92:6e:e1:19:ca:74:94:
98:89:fd:05:55:fc:27:be:fa:8a:86:cf:49:b9:df:
72:3d:8c:d7:03:35:cf:df:ee:7b:dd:a9:66:f7:dc:
24:c1:78:b2:84:3e:71:08:eb:06:4d:e7:6a:76:c7:
4c:0f:0a:49:e2:ce:03:20:30:96:8d:00:17:d4:55:
d9:ce:96:be:d9:e9:51:63:69:db:54:a6:76:52:aa:
61:c7:ec:5e:ff:65:65:0f:4f:45:12:de:5f:93:c5:
d3:83:6b:35:62:e9:fb:6a:81:45:ba:65:cc:e3:2e:
8c:3c:9d:03:85:44:c8:da:51:4a:24:00:79:84:4a:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2F:F4:62:5A:1B:6B:A3:79:74:2C:59:C1:58:F5:94:36:11:C4:BD
X509v3 Authority Key Identifier:
keyid:4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ab:75:6f:2d:e1:3a:4d:8e:3b:1e:92:92:fe:4c:0b:66:11:
49:89:8e:7d:30:1b:0e:a9:ec:ac:ab:33:39:c5:5a:d5:ca:9e:
fe:68:89:df:24:7a:0c:d8:91:13:92:b9:8c:89:d2:f2:58:70:
67:a1:92:15:15:11:a7:b7:3e:6d:07:59:99:2d:fc:75:be:95:
96:43:71:7d:5d:c4:32:85:07:2e:d5:c7:97:6e:43:90:5c:c8:
9f:38:38:5b:37:a2:3a:a7:5f:58:a1:a7:0b:d4:b6:0f:d6:e6:
c7:8d:0b:8a:bb:ce:fe:d3:f8:ed:8c:b0:fc:8f:01:29:78:48:
c4:e0:c2:27:55:2c:8e:aa:fe:7f:ee:40:27:00:77:73:4f:87:
dd:ac:43:33:df:62:82:95:40:82:e9:09:c8:bd:55:e2:03:07:
09:b8:48:63:e4:41:51:86:e6:28:85:10:e5:f6:24:a9:ad:d3:
f3:a2:a4:13:ac:fa:3b:91:cc:aa:d2:de:06:f6:b7:e3:87:28:
01:0c:91:b2:55:6e:8b:d5:3e:ad:a7:74:0a:dc:c8:21:3e:a8:
8b:b9:7c:d6:27:cc:27:d6:ae:43:28:4d:3b:26:5c:2e:3d:45:
a9:f7:cf:6c:5d:28:a2:2a:61:04:4d:30:fa:e7:e9:c1:4c:5a:
f4:cf:21:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:04 2025 by rpki-client