Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
File: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json)
Hash identifier: NkDoqWJxOUxDspW9ttU4L/I3vMaVN67+tQSy5McfuKI=
Subject key identifier: 6D:62:BE:29:CB:5F:6E:49:15:39:6D:58:E9:85:5D:44:80:97:F1:4E
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial: 019A54C0506DEAF9FBBA32084F5A91DCE29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
Manifest number: 1400
Signing time: Wed 05 Nov 2025 16:01:20 +0000
Manifest this update: Wed 05 Nov 2025 16:01:20 +0000
Manifest next update: Thu 06 Nov 2025 16:01:20 +0000
Files and hashes: 1: 4jKaVB-LfLQCzkTYjVHTGVrvLiU.roa (hash: Dbf5cUJDTFeC16IHWdH+FZOyuiR9fHmIqJ0f+7DT0tY=)
2: L-kwHWoDaZVHymZSVKLj2CDl5JE.roa (hash: RzZtH5fSY0TqGEBtyH9cKZhJPNebxYKoH4rxiHLyN4M=)
3: VanRC4jdlI0kqk4muFN6P2QYkkM.roa (hash: UwcKA2rVfnEdm7lIuYa2eDQEpkXJsNm7mizYt8PPLFk=)
4: ZJAl9ImjoPtFm7tGn32RwL0IJHQ.roa (hash: 9vVACgeehLJBLJEdL35dqakk6HDNA29yLh2EDLIP5+w=)
5: ZljRltRiIrsMECExv8F7r5rYKsw.roa (hash: nxmE/fGDsanE/RF9PJbTsPR18T1YycJHuh5uUceeEDM=)
6: kYqAky72P3pEnQEl7_H71_oXMrA.roa (hash: OI+pqrPoYdkxRhXaxBipc3lXLF5qKe9eg06gVgRqd68=)
7: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: 2d6BZV8KIc/d35V8DcHmyCb7uiN5guVBNld+h1s0c6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:50:6d:ea:f9:fb:ba:32:08:4f:5a:91:dc:e2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Validity
Not Before: Nov 5 16:01:20 2025 GMT
Not After : Nov 6 16:01:20 2025 GMT
Subject: CN=6d62be29cb5f6e4915396d58e9855d448097f14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:66:93:e3:0f:fe:de:96:fa:07:09:38:6a:b2:
8c:23:dd:c6:43:7e:f0:08:ee:82:b9:e7:74:e1:64:
71:d2:2b:b6:aa:8e:5f:80:11:5c:de:41:fc:9e:ac:
11:2b:a3:9d:eb:56:14:cb:3b:b5:93:78:d7:4c:15:
dc:4a:0d:23:33:87:c5:7d:b3:f7:22:d2:34:3c:f7:
0b:f7:84:b1:98:30:6c:78:79:53:f5:7c:19:46:46:
0c:45:30:3c:7f:87:61:e9:9e:40:13:41:6a:b8:f9:
b9:f5:dc:55:3e:e6:e4:43:cc:2c:d9:f6:7c:8c:a4:
58:d8:14:c8:fa:9d:0e:06:56:d2:14:f0:76:61:29:
56:39:74:b2:bd:ea:bd:c0:3c:7a:4d:32:21:db:2f:
9d:b9:b8:9c:e6:d9:1a:db:08:74:f8:23:0a:81:70:
b3:8c:e3:13:93:08:bb:46:70:7f:36:19:34:21:44:
a3:3d:d3:fe:46:e0:5a:ed:57:1a:dc:c8:cb:3b:18:
8d:fc:58:69:a2:14:32:8c:fe:1c:55:80:62:4a:e4:
bc:f8:b4:20:52:bb:a4:66:95:31:eb:81:78:32:ec:
40:f5:2b:85:d5:08:a6:f1:19:a2:26:f7:b0:01:0b:
34:24:3b:50:10:53:82:4e:44:d9:9d:b7:e4:50:2e:
25:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:62:BE:29:CB:5F:6E:49:15:39:6D:58:E9:85:5D:44:80:97:F1:4E
X509v3 Authority Key Identifier:
keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f4:c8:7c:63:78:a1:98:d4:78:fe:f8:72:c1:09:c5:5b:db:
cf:d4:b2:3b:b7:f1:e8:4b:75:58:4b:3d:d1:5e:cb:1c:5d:d2:
b4:67:84:7d:1f:60:d1:6e:b0:bf:c5:19:f3:e7:53:11:47:08:
a5:e0:d6:89:ca:83:16:10:f2:c7:d8:31:5b:2d:29:ea:4b:64:
88:da:74:f0:d7:47:05:e2:23:7e:ee:88:76:12:ee:c6:05:a6:
94:10:7a:13:4d:17:c9:af:65:3a:07:be:3c:11:bc:c9:57:3d:
ad:a1:cc:47:17:2f:59:8c:0e:ff:4b:be:e7:28:67:46:35:61:
f8:b5:00:bd:03:cf:64:57:d7:66:ff:bc:7c:4f:89:0e:53:7b:
31:74:b2:b9:43:95:dd:e0:34:6e:5c:6c:f5:7e:20:0d:39:b1:
90:01:c9:a5:dc:1e:ed:53:75:fc:8f:b5:ba:78:de:35:d7:5c:
46:87:b6:30:a8:28:47:ca:69:90:83:ec:13:92:57:b6:a5:2e:
c5:c6:d3:0c:2b:09:9b:7f:c2:f0:47:6d:5e:4b:8f:ac:75:0f:
b9:17:e3:90:70:f4:15:88:6e:f3:74:b1:dd:27:9d:e4:d3:02:
78:0f:f0:24:3d:63:c7:c0:fc:9d:01:4b:3f:2c:f4:bf:d3:47:
e9:54:0a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:15:57 2025 by rpki-client