Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
File: sG9AQEkaZW_3Um0vF2EbDWisvQw.mft (raw, json)
Hash identifier: rWS2L2fbdx7CigKhoNjgx7WvnNjudw6H6oIAYWqQKKY=
Subject key identifier: 55:64:26:2E:A2:4E:4D:5F:CC:7A:4A:74:1A:67:68:94:38:F5:52:80
Authority key identifier: B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
Certificate issuer: /CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Certificate serial: 019A52632570C375B2A7AC596A0752449ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 05:00:20 +0000
Manifest this update: Wed 05 Nov 2025 05:00:20 +0000
Manifest next update: Thu 06 Nov 2025 05:00:20 +0000
Files and hashes: 1: Llrtrof0_CXG6g_18Oyw968ZWEI.roa (hash: X1zaGRl51EQ/u9kK0U1WmdFcDajifODFmk55LESlUmM=)
2: sG9AQEkaZW_3Um0vF2EbDWisvQw.crl (hash: lcQMEv+BUWC5adTPf+gox1OQ5Ql/zE1oTyCni4Id9LI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:25:70:c3:75:b2:a7:ac:59:6a:07:52:44:9a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Validity
Not Before: Nov 5 05:00:20 2025 GMT
Not After : Nov 6 05:00:20 2025 GMT
Subject: CN=5564262ea24e4d5fcc7a4a741a67689438f55280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:69:ea:93:31:2f:ec:f7:32:73:a0:36:a3:
7f:45:07:75:3d:a5:63:bb:fd:2e:c3:a9:cc:8c:ae:
6c:ab:86:84:90:ea:86:07:bb:47:d1:2f:ef:ad:c5:
4a:45:c0:f6:42:b8:e9:05:c0:13:f3:58:37:4a:d3:
b1:8b:7e:ce:74:18:85:6d:3a:78:fc:de:16:f0:5a:
68:49:8d:f1:68:8e:6a:c8:4d:34:ef:1f:f2:3c:94:
f7:fb:47:3c:7f:7e:57:bd:b2:70:03:39:e1:b3:5b:
f8:a3:dd:99:85:c1:4b:e1:c6:ad:08:b0:fb:5d:a2:
37:00:5a:9c:28:11:d6:82:3b:10:69:d7:57:3c:89:
5b:43:0e:a5:52:ec:90:9b:3a:86:3d:b8:7c:4f:ee:
af:87:04:fb:de:22:e8:3d:25:e8:03:a4:da:e5:1f:
82:c0:63:9e:f3:a8:b8:68:1a:ce:4b:aa:e1:8e:9b:
bf:e4:10:54:da:f4:25:02:59:35:68:47:a5:f3:23:
10:f3:34:ae:2b:e6:a9:e9:15:25:5b:6b:91:d1:72:
36:9a:38:f5:0f:2d:3a:08:7c:b2:6d:dd:c8:37:52:
cb:b6:31:55:63:a7:24:1c:d9:a8:28:e0:9d:11:e0:
08:5e:32:26:09:c0:78:8e:28:52:a0:8a:df:e6:ca:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:64:26:2E:A2:4E:4D:5F:CC:7A:4A:74:1A:67:68:94:38:F5:52:80
X509v3 Authority Key Identifier:
keyid:B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:54:88:de:80:8c:15:5b:06:9a:8b:35:2a:62:02:11:4e:88:
aa:d9:c8:e6:6c:2f:10:3a:84:68:c7:21:d7:84:07:8d:2f:a3:
3f:c8:87:51:85:aa:11:7e:fa:41:e5:d6:49:f6:82:c5:dc:cb:
b8:38:b0:e3:3c:9c:5f:89:b3:13:b6:11:8f:a5:d1:ca:a3:e3:
2f:d7:92:67:9b:af:32:80:d8:05:fe:47:92:11:65:c2:85:cb:
bb:5f:cd:80:6a:e6:75:06:66:fb:a0:d9:ca:f2:16:73:1a:f0:
82:3c:0d:13:fb:f6:6d:f1:06:88:6b:d5:41:cd:31:67:25:65:
2e:79:0a:8a:7d:02:9a:f8:be:03:99:34:67:d7:73:d7:0c:76:
42:0b:db:5c:ca:25:4d:e8:45:d2:0e:0c:d4:6b:f6:37:ec:30:
de:e0:6b:ca:30:3e:85:e3:93:2b:65:ec:01:70:fe:25:7a:34:
d1:ae:d8:45:a1:eb:a3:e5:14:ad:c7:69:93:dd:65:f3:11:b5:
92:e9:a0:5c:32:d0:18:e9:04:3b:72:e0:50:99:3c:cb:af:13:
18:02:33:10:5b:53:10:7f:57:9a:95:e6:f2:4d:4b:25:cc:0c:
62:2c:01:7e:70:8f:25:ac:d9:2d:0e:61:7c:3c:34:6f:e1:33:
38:95:df:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:15:49 2025 by rpki-client