Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
File: S5o7nhAjIJXBjSZERAzlxYoTizU.mft (raw, json)
Hash identifier: UpSkO3Db0DVgGk3F5vP6i9jOjZeMlCe+oFF/v8Gfues=
Subject key identifier: D3:9F:A2:19:4B:BD:64:42:82:DB:2D:59:3D:F7:27:30:63:18:4C:1F
Authority key identifier: 4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35
Certificate issuer: /CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
Certificate serial: 019A53E433737E4DDA4762D2C077AE157899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
Manifest number: 0EA7
Signing time: Wed 05 Nov 2025 12:00:55 +0000
Manifest this update: Wed 05 Nov 2025 12:00:55 +0000
Manifest next update: Thu 06 Nov 2025 12:00:55 +0000
Files and hashes: 1: AGFXaqT3BvJjfsfWKc-WZgyT260.roa (hash: otB7RONJ2iX79r/3n1UHcffodGPsIg2+hKNGewXNd5g=)
2: S5o7nhAjIJXBjSZERAzlxYoTizU.crl (hash: JSKPlqmmEIvz9qAme1Fovo+7Io6XMBtxAUgrX1XkiJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:33:73:7e:4d:da:47:62:d2:c0:77:ae:15:78:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
Validity
Not Before: Nov 5 12:00:55 2025 GMT
Not After : Nov 6 12:00:55 2025 GMT
Subject: CN=d39fa2194bbd644282db2d593df7273063184c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:15:af:96:d6:a5:b6:64:76:db:cb:23:5b:
3b:3e:48:6d:13:d7:46:58:aa:81:a9:a6:eb:d8:cc:
32:9d:58:80:ca:e8:24:ff:ab:cb:94:74:a0:fc:81:
52:f2:dc:35:7e:43:4f:ff:cf:d6:da:f4:09:74:58:
6a:bd:88:81:41:98:9c:6c:39:dd:56:5b:64:bb:a2:
26:f5:5d:89:7c:a5:61:cb:58:8e:94:68:ed:e7:e4:
82:0d:ff:bb:5b:32:23:3e:89:64:d1:86:cd:cc:38:
68:bc:ce:20:dc:9f:b1:2c:8b:b1:a5:c6:56:18:3c:
91:f0:a0:59:27:0f:e4:2a:61:ac:7f:4e:6a:66:3d:
f6:b8:42:40:1c:f6:6d:72:85:65:4f:ea:b7:53:4d:
87:a7:15:68:8d:78:9e:a1:24:27:3c:22:b6:38:cc:
77:0a:1c:04:b3:9e:f1:de:4a:c2:52:2e:72:2d:b7:
46:37:0a:56:c1:06:38:a4:7c:90:ec:a6:bd:a7:ac:
d6:12:e0:c3:3f:56:b7:e4:45:e3:56:db:c3:77:74:
14:6d:6f:8d:f8:c4:d8:b4:be:3a:65:00:f1:d3:22:
37:5e:ac:fe:a2:38:48:a4:5e:19:31:49:fb:81:14:
19:6e:91:ec:d2:81:83:98:1b:e6:fd:2b:3e:f3:42:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9F:A2:19:4B:BD:64:42:82:DB:2D:59:3D:F7:27:30:63:18:4C:1F
X509v3 Authority Key Identifier:
keyid:4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:75:e7:cb:8c:36:29:77:65:d9:26:dc:86:b4:c6:3f:70:9f:
d2:0f:04:da:72:44:2d:92:56:ca:ca:3a:00:3f:94:b9:b1:18:
77:b3:e5:31:da:3b:4d:2e:8f:6d:65:15:ec:3a:a8:ab:e8:c6:
b9:60:28:d1:62:ba:f2:a8:3f:63:34:1c:96:9d:1b:41:47:8f:
65:3b:04:44:92:e4:bd:35:08:8d:7b:b1:2c:e2:25:4c:98:f0:
61:0c:2d:fd:b7:a3:88:c4:6a:42:eb:8e:69:47:3f:d3:bd:e1:
01:27:83:96:68:23:e1:27:31:76:dd:14:22:38:2d:58:62:56:
6f:5c:b0:29:6e:b1:5b:21:1a:32:65:22:d1:da:e9:8e:b1:4a:
a9:ad:67:f4:48:8e:cd:2b:eb:c5:92:c1:e7:00:de:9f:97:c6:
eb:88:a3:3e:61:22:b4:04:9c:c2:8a:13:f0:16:b4:30:b2:9b:
eb:c2:d5:e9:92:8b:a5:5e:28:f9:a2:c0:c8:f7:6e:38:08:08:
19:27:41:6f:8b:7c:4d:9e:cd:41:cd:1f:18:63:5d:23:ce:69:
1e:92:00:fc:c6:4e:9e:d7:ba:54:6f:62:63:0a:aa:3d:1d:2a:
ad:ca:39:63:03:50:88:59:f4:d5:01:01:9d:1c:87:f3:b3:58:
33:56:81:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:11:05 2025 by rpki-client