Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json)
Hash identifier: mGjaCw+YZOHX6s+Suhkx+tfcMhXKMzEXZFU5ODs/j68=
Subject key identifier: 2E:68:E0:D8:05:A1:05:54:75:37:AB:EA:A0:8B:E3:2B:CA:2C:9B:A2
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 019A4EF56DA20BA0B642684CA31A82EAF12D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:01:38 +0000
Manifest this update: Tue 04 Nov 2025 13:01:38 +0000
Manifest next update: Wed 05 Nov 2025 13:01:38 +0000
Files and hashes: 1: kYc1gtOr0PTFQ2gYPT0GRKJOtNs.roa (hash: Jh3vTnZ3BASMX35rtVJIhlA72LY16bLBZs3GxE20F90=)
2: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: WofL6rAk8e1Ap6E8QcgxnXpN2JXqOuM8kdpKB8fcv7U=)
3: yYPs8r5YH3ZUhnb-tH8hNPFRP3k.roa (hash: oqr96EpWpl0SR82NHdTiNdunGc2ZUGnDoW9Ug/N3aIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:6d:a2:0b:a0:b6:42:68:4c:a3:1a:82:ea:f1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Nov 4 13:01:38 2025 GMT
Not After : Nov 5 13:01:38 2025 GMT
Subject: CN=2e68e0d805a105547537abeaa08be32bca2c9ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:80:2b:c0:e7:51:30:6b:82:4e:26:62:cd:a9:
5c:d9:ab:f4:f9:47:ec:96:30:57:a1:af:50:f9:a3:
2d:68:60:b3:70:af:57:ac:75:4c:49:5b:da:f6:25:
ad:e9:8c:a5:88:de:97:31:1d:7b:46:aa:0e:6d:a9:
55:9b:a4:0b:be:eb:8c:2c:a5:d0:5f:b0:cf:f0:0c:
29:e8:8f:1d:f4:79:68:f6:0c:62:e3:d5:a7:ec:cb:
c5:fe:89:f1:42:9d:36:93:41:d5:9f:25:7f:97:55:
af:75:7d:0b:45:a9:70:f4:b6:ea:8e:73:75:5f:aa:
0b:ef:da:14:41:96:02:15:5d:20:70:53:94:41:63:
55:2c:c7:91:2d:ef:91:8e:6d:3b:e0:51:0b:7a:98:
e3:8c:8f:bb:6a:92:68:c7:96:bf:06:03:7b:5c:76:
77:f4:65:d1:81:f5:11:f0:fb:00:4e:66:76:0e:59:
2e:26:31:8a:c8:b6:16:e0:5d:1c:ad:16:0d:c4:11:
49:bc:06:50:5a:a3:c3:3b:fe:01:72:b5:8d:fb:4c:
2d:00:6d:9a:b2:91:d4:c1:7c:1d:27:6f:a3:9a:92:
d9:a5:79:15:f3:dc:8e:b5:94:2a:d8:21:d6:12:8a:
c1:b9:6b:a8:07:bc:27:1d:0f:55:34:d3:e9:5a:67:
2c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:68:E0:D8:05:A1:05:54:75:37:AB:EA:A0:8B:E3:2B:CA:2C:9B:A2
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:70:f1:ba:22:d9:ba:66:a7:37:15:54:19:6c:c4:92:33:9d:
c4:18:aa:f0:2c:e4:db:07:8f:39:58:e1:7b:e9:d7:44:d2:18:
d2:63:56:c3:43:6a:94:74:a6:8f:15:a3:78:cb:05:32:57:3b:
8e:f2:58:db:75:31:e3:a8:0d:f6:e4:c1:8e:ff:f7:34:42:f8:
54:59:88:7b:16:63:5a:8f:e7:00:15:c4:bb:75:ad:5a:1e:92:
d2:d3:eb:d8:cf:e2:b6:f9:20:25:13:c7:45:2b:1a:37:4a:8e:
b5:77:77:19:8e:f6:31:96:42:e4:e5:50:10:f7:91:d6:32:dd:
d5:f3:9b:fd:8b:f8:ae:d1:19:ef:52:49:b7:ba:46:28:6b:27:
ac:0f:b2:a5:b2:cd:b1:ab:63:55:39:65:d2:d1:25:f5:51:2d:
fe:54:6e:e9:7e:ed:43:01:e6:aa:99:ef:b9:05:ec:6e:99:60:
db:c3:b2:84:08:df:17:63:97:dd:48:49:78:bc:51:61:7f:a5:
eb:b3:62:7a:6d:1b:7b:3a:6f:6f:ed:06:47:1e:e1:37:6d:6c:
75:66:8c:77:43:9f:f8:41:e8:22:dc:f1:b6:b1:06:22:49:c5:
4e:77:2f:d0:79:f4:df:7c:80:af:d5:8b:65:4d:f9:6f:4e:7a:
bc:7c:b1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:26 2025 by rpki-client