Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
File: sXQMTAefLR3uhUOfgngbm651apU.mft (raw, json)
Hash identifier: nIEA3kyL8G7Pq8p0RfpR/4Py08K3zW10ihmukHthzVI=
Subject key identifier: 01:E6:8A:29:79:34:D5:5D:3A:73:57:5F:B0:AA:1C:80:B5:4B:62:DD
Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
Certificate issuer: /CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Certificate serial: 019A50750B250E05F7B2EBA238B30F58E8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
Manifest number: 135A
Signing time: Tue 04 Nov 2025 20:00:39 +0000
Manifest this update: Tue 04 Nov 2025 20:00:39 +0000
Manifest next update: Wed 05 Nov 2025 20:00:39 +0000
Files and hashes: 1: 0kGm7IS6foM84ApNB5wMBZmcs70.roa (hash: fsNAu7RVtrbBsKEN64Ou91zqn3ieSIW0lwlDv3luCl0=)
2: QHGLz4vDf8HU0PXuv58AHJKDNwE.roa (hash: zsAsJqx3Xlx/j+LLE8QbsIeKt4A9wuocERvf2nTmf7A=)
3: Sz2kPMld2S0NhbWe3VBXUQg4E_g.roa (hash: CgZe2V9k88f5ug37ai2G7ohUxSeYSwTeyOJXFySNdfc=)
4: sXQMTAefLR3uhUOfgngbm651apU.crl (hash: Pwf23hWqkm4A5xAUfyUBaW3uYnvwqrMxBIYnKNRv4kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:0b:25:0e:05:f7:b2:eb:a2:38:b3:0f:58:e8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Validity
Not Before: Nov 4 20:00:39 2025 GMT
Not After : Nov 5 20:00:39 2025 GMT
Subject: CN=01e68a297934d55d3a73575fb0aa1c80b54b62dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:f0:0f:db:ce:86:9e:97:7e:f3:e0:ee:a0:
89:20:09:a8:b6:7c:3b:41:cf:a2:b3:ec:15:c5:61:
6f:a8:04:83:0a:bc:cf:60:6b:b7:28:0d:a2:91:cd:
58:99:f0:14:ff:65:e6:9b:47:49:97:4d:86:11:d8:
e7:fc:a6:53:dc:2e:77:db:0a:7e:a3:d7:b3:9c:97:
23:01:ff:8e:c2:ab:23:a1:eb:08:3d:b7:e8:10:72:
40:48:fa:9d:a1:5b:f0:57:79:7a:5d:4b:d7:27:ea:
56:0d:05:1a:a9:65:6c:f1:27:04:97:88:5a:95:08:
8f:cf:e3:22:f1:5c:e3:b2:f8:42:53:18:27:65:8b:
99:b2:d9:b5:d1:82:00:a8:08:84:a7:12:85:60:2d:
38:c3:dc:70:b8:c5:a0:b7:90:3c:39:d8:0c:f0:60:
c9:b9:b7:73:2a:c8:b6:eb:54:f9:a9:c6:ef:4b:cf:
d2:f1:66:d1:3c:da:9b:d8:8c:1a:a1:ee:74:ad:7c:
ce:ad:22:49:fc:d4:d8:9f:b2:1b:7c:31:d7:87:2c:
71:d0:ae:dd:bf:79:55:3b:df:d7:dc:49:b4:0d:a3:
77:80:9e:6b:43:22:c1:15:d9:cb:b8:60:bc:2b:85:
e2:61:44:b5:d1:85:74:c7:30:93:b7:d1:14:e3:1f:
9a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E6:8A:29:79:34:D5:5D:3A:73:57:5F:B0:AA:1C:80:B5:4B:62:DD
X509v3 Authority Key Identifier:
keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ce:0a:ef:d8:5f:98:1d:75:d9:db:82:b8:42:d2:fe:ef:df:
13:3e:7b:1c:4c:55:00:69:cf:49:74:3f:2f:eb:44:a8:17:fd:
4a:74:2a:40:24:c1:73:42:c5:a0:5c:a3:fc:2d:c8:ee:9e:f7:
9f:80:c3:31:1c:1d:cf:15:f0:7d:c6:32:d6:94:68:41:68:92:
05:9a:c4:20:ba:07:6d:f3:02:54:4b:73:5d:d0:3e:36:42:f8:
fd:4b:e1:88:69:26:da:3a:2b:4f:69:44:81:f1:8d:23:5c:98:
d0:56:ea:59:24:04:f8:a1:ab:93:ec:3d:d9:0b:2a:0c:e6:4e:
ec:2a:e1:26:3c:60:f5:7a:5c:27:e2:ee:08:47:f2:10:29:48:
cf:4f:27:83:c6:1b:db:31:55:3c:4b:9b:cb:f4:fb:06:bc:7c:
42:c4:96:9e:d6:fb:87:fb:90:90:0a:cf:68:9d:22:10:6a:15:
91:10:b6:a7:b6:26:3d:87:6e:b0:8f:08:3d:f4:64:ab:5e:85:
83:d6:75:a1:ab:da:41:96:35:8c:6e:e0:73:2a:1a:e0:8b:ae:
83:b6:4b:2f:57:39:0d:72:af:f9:79:5a:7b:23:e4:80:19:45:
8c:79:5f:ca:5b:99:76:82:b7:c6:cd:bd:e3:d3:ef:05:f7:10:
a1:04:5f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:54 2025 by rpki-client