Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier: pPmjEC8lyUd1JM7/ntwznx5uzGr7nfWU5xEN44WloPo=
Subject key identifier: EA:5C:6B:3D:79:8B:A1:44:14:5C:61:33:EA:8D:78:54:35:06:FF:54
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 019A4E4FAE065928A879A1A2214E97B099DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number: 0D14
Signing time: Tue 04 Nov 2025 10:00:35 +0000
Manifest this update: Tue 04 Nov 2025 10:00:35 +0000
Manifest next update: Wed 05 Nov 2025 10:00:35 +0000
Files and hashes: 1: 7fSgZ-LQDYvguJzdZ14V0z0FUCE.roa (hash: bUjKLDflZP/Ln3EKUyE+zKMongCT5xOF2uDWHet5S9I=)
2: DiRUXj-wMeKTJD3aUfG_fU2alsE.roa (hash: C8nsHrwSkn8Gd1JmzSYSfUzGZSwYITwrUGRtmf3pI4s=)
3: Ru-jgtHHtk22zU2Iz9obbyyNqtA.roa (hash: JK2Fg/eBJyup1fiSh8xdKaGSDAo/evkcOv83dZLvh1k=)
4: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: DPRRAjqB7ksArYCL258Tk8w4YU+KN2YvJpkQnsnz+cI=)
5: WzBH8kAZVhitfGs3LpWEVIaX2DU.roa (hash: yyE311L3mhjCKLl6ozIj/e45U2t4pgo+mFiZj5vWZ9E=)
6: vTYkTnZMEaqfhCdiY5ia6c9viZw.roa (hash: m5F7OL9Eo2LVurzs6A9iXzsVS70f86h9K1zL5V462Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:ae:06:59:28:a8:79:a1:a2:21:4e:97:b0:99:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Nov 4 10:00:35 2025 GMT
Not After : Nov 5 10:00:35 2025 GMT
Subject: CN=ea5c6b3d798ba144145c6133ea8d78543506ff54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:33:ec:00:fa:20:a2:8f:81:4b:8e:9d:1a:
2f:01:2e:d9:9b:a3:0b:73:f4:1a:e7:53:f4:7c:26:
e3:39:cb:aa:95:59:12:02:a0:36:80:70:07:1b:bc:
75:6c:05:a8:08:18:d0:f2:4b:98:0c:cf:58:4c:2b:
60:08:c3:e6:da:c2:d6:08:12:48:37:ba:57:5b:ee:
a9:c6:72:01:44:54:04:e1:db:e0:ea:4f:36:3a:13:
48:33:3b:ee:70:ef:ba:ad:0d:1c:4f:89:73:d4:e0:
5b:a7:8a:29:50:6a:cd:da:7b:48:70:da:f1:ca:57:
cc:a0:8e:c3:87:72:aa:86:54:e5:98:15:b0:22:f0:
de:da:4b:e0:0d:23:74:36:10:44:76:c2:0d:e7:a9:
e1:cf:77:46:2c:ee:1f:49:07:1d:05:e8:e9:ab:84:
2d:1b:5b:37:34:f8:93:0e:6f:9b:6a:37:d4:c9:9e:
7f:4b:d3:b4:64:d1:bb:70:ea:68:6b:ae:63:4e:d7:
5b:41:83:f8:d7:d1:35:b4:30:be:f3:fe:09:10:a7:
c5:ad:e7:f9:4f:d4:10:da:11:66:46:84:d2:3a:b5:
9f:7f:24:57:ae:14:26:b4:e4:db:b6:63:c4:e6:df:
86:97:36:ba:04:f5:bd:38:00:d7:5f:4e:05:6a:0c:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5C:6B:3D:79:8B:A1:44:14:5C:61:33:EA:8D:78:54:35:06:FF:54
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f9:27:6d:7b:21:53:e4:07:cf:49:0d:40:37:91:f3:db:be:
dc:8c:f1:91:d4:61:c0:1e:31:f8:72:5d:e1:70:60:c0:39:a4:
fc:8c:2d:0c:a4:c7:30:1e:1e:58:6b:0c:15:a7:dd:84:f5:f9:
84:b7:ce:5f:a8:0b:27:9a:be:7c:74:76:fc:a4:e7:a3:ee:ba:
14:92:11:90:fc:12:4d:ab:2e:d2:05:a3:64:91:e3:5e:36:73:
37:77:21:e4:98:a3:10:61:d3:8f:dd:86:e8:be:3c:1b:86:5c:
16:41:79:99:4a:83:41:ff:c0:88:63:92:0d:ef:3b:8c:c6:ec:
98:e4:f4:08:81:b0:27:61:52:f1:76:30:25:da:f0:76:40:6f:
5e:8e:9f:44:47:c1:d6:4a:f8:29:6f:b6:5d:ea:d7:f1:fd:87:
29:62:71:29:69:f3:6f:ed:c5:3e:f7:c2:7a:1e:94:61:f8:4f:
01:f4:fe:70:95:73:55:f9:7f:a6:0e:37:28:07:81:03:bc:b6:
9c:02:3a:33:da:9d:8a:e0:8e:b8:44:60:a8:99:e5:e7:a1:a9:
1c:87:65:72:82:e0:32:b5:36:37:46:4b:e8:b9:d5:c0:bf:52:
d4:08:d5:e0:e9:15:6f:27:98:48:c1:03:4c:bb:24:e4:92:4c:
a2:cd:fe:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:31 2025 by rpki-client