Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
File: sV49wOv7EOu5QZdFRzLveGrHW3A.mft (raw, json)
Hash identifier: XRpe/j0hoi5fj2GoL208/mWQ4rXD91bh79LlXW8HPDs=
Subject key identifier: D8:63:23:DC:3F:84:93:49:7C:B7:00:BC:68:B0:37:73:6F:9A:F2:21
Authority key identifier: B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
Certificate issuer: /CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Certificate serial: 019A4D3D40D31B84D298FD85C819E7F28EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
Manifest number: 0BC7
Signing time: Tue 04 Nov 2025 05:00:51 +0000
Manifest this update: Tue 04 Nov 2025 05:00:51 +0000
Manifest next update: Wed 05 Nov 2025 05:00:51 +0000
Files and hashes: 1: sV49wOv7EOu5QZdFRzLveGrHW3A.crl (hash: PmZ5/NnTszBSlQQ4dZTV1qpBlaqe7p7Rx7NYE2X2oho=)
2: xqJHtB7Nv0rU8nAxtjI4F8Ssziw.roa (hash: xXaHko57KcXgGPz0/l3ONXw7AGqXwRHBoA+nggaHNQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:40:d3:1b:84:d2:98:fd:85:c8:19:e7:f2:8e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Validity
Not Before: Nov 4 05:00:51 2025 GMT
Not After : Nov 5 05:00:51 2025 GMT
Subject: CN=d86323dc3f8493497cb700bc68b037736f9af221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6c:e6:e3:d1:56:a1:85:5b:5f:a0:13:26:55:
af:0d:f6:01:3f:ab:c8:f0:cb:97:22:97:f4:75:1c:
d8:19:96:8d:9e:0c:5d:88:cd:f0:06:8e:03:14:e4:
eb:f1:df:30:e2:79:26:0a:cc:6d:51:ff:e0:57:5e:
71:0e:c8:2e:4e:93:98:6f:6e:b9:92:d2:09:05:79:
62:b4:d8:c0:fe:7c:2f:e0:11:bb:63:a9:90:ac:2c:
4e:40:71:61:03:af:83:fb:43:12:04:44:48:10:64:
59:67:07:8d:c7:1b:ad:70:28:05:00:70:3f:71:26:
f5:86:f6:3f:b3:6c:d9:9b:88:f7:2d:4c:31:38:6b:
02:30:ad:9c:8a:f8:4f:81:53:69:fe:9c:aa:7c:c1:
98:b8:d9:09:cc:69:32:ca:d7:b9:39:5b:01:f4:9d:
d1:53:db:cf:67:f8:b7:bc:23:9d:ad:87:c8:a5:c6:
9d:db:3d:77:43:3f:55:4e:88:9f:a6:8e:a7:96:2c:
a9:29:57:49:47:c0:75:3c:e4:73:35:75:28:35:8f:
8f:40:c0:b6:02:07:c3:d2:7f:9a:0d:97:66:af:18:
e5:40:79:54:eb:b3:9f:aa:54:f8:3c:15:a7:53:cd:
62:9a:c4:95:39:83:cf:85:34:24:5f:92:80:28:53:
24:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:63:23:DC:3F:84:93:49:7C:B7:00:BC:68:B0:37:73:6F:9A:F2:21
X509v3 Authority Key Identifier:
keyid:B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:06:30:46:0a:d8:67:d2:db:d5:09:03:af:e0:23:d2:85:18:
18:4f:40:57:eb:fb:bc:59:94:cf:33:2d:6d:47:ad:e2:f0:2d:
bf:fe:03:09:53:08:7e:3f:f7:69:3c:e4:fb:22:ad:34:28:52:
7c:21:8e:d6:ec:6a:68:fb:33:18:7d:2c:e2:ca:90:be:ab:c9:
c3:1a:20:7f:66:06:cc:52:c1:3b:34:11:43:80:48:4b:c8:da:
12:34:a2:7b:cc:5a:bb:a7:fb:5e:a8:4b:52:48:44:e8:c9:22:
42:d2:5c:bd:ee:6f:e9:30:a7:bc:cd:00:aa:58:b3:2f:31:d2:
5d:84:9d:5f:9b:2a:a1:73:5b:36:f3:51:7b:6e:49:49:37:46:
a4:27:ca:6c:d5:b9:27:02:f6:a8:ec:ec:22:a4:39:70:d2:f2:
09:ed:62:ca:46:dd:5c:d1:5c:be:0e:05:d6:f6:09:38:85:ff:
c9:e1:70:70:bf:24:71:27:48:77:84:5b:37:dd:68:c5:dc:15:
77:7f:e5:da:af:5c:06:87:fa:56:00:6d:3d:9a:b0:d2:d7:62:
00:2e:e6:56:5b:31:fa:d3:b4:99:fb:7c:2c:65:4f:40:f1:76:
38:7a:15:6c:b2:14:33:3c:7e:00:bd:cf:dc:25:a5:28:16:86:
b6:6d:ce:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:37 2025 by rpki-client