Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File: S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier: Sv9x79V38OryD5u4R/4l4HrcLG+Rymxs5wjTChL6cYY=
Subject key identifier: 29:B5:E0:CC:73:78:98:6D:24:6C:38:10:A0:2A:31:32:9A:C0:07:40
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 019A541A8B51EFA4FB3682528A1F3F030D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number: 172B
Signing time: Wed 05 Nov 2025 13:00:16 +0000
Manifest this update: Wed 05 Nov 2025 13:00:16 +0000
Manifest next update: Thu 06 Nov 2025 13:00:16 +0000
Files and hashes: 1: 0hP_n0pnEZN4K6poUlA-xqEv6yE.roa (hash: F/NswoqCQCtEeweJPN7XVnbp503CyUvfgOPod22wDEM=)
2: IfSKWBwWV6QcVsRSMjJ9wGMbUUk.roa (hash: HjUM6VN/VoF4kqrbPTW3NPTllgIWYUt/BGC2HsAIgNk=)
3: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: SsEt9EYXuwlgUesHZrJ+aQuhunVylR2veFa9vbb5Frc=)
4: eiTWJKHAu5xriuE2QvW7x5YIzOU.roa (hash: s87ilBuA43+J3H8PQ6AAVQPStmwyHIxSZQ+1oBAYKOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:8b:51:ef:a4:fb:36:82:52:8a:1f:3f:03:0d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Nov 5 13:00:16 2025 GMT
Not After : Nov 6 13:00:16 2025 GMT
Subject: CN=29b5e0cc7378986d246c3810a02a31329ac00740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:78:8b:cd:db:49:30:86:16:3e:87:3b:7e:63:
76:52:30:49:07:73:64:67:9d:44:17:94:d9:e5:8b:
b8:0b:24:49:8c:40:c4:b4:be:19:71:b6:39:53:b9:
bb:b2:8c:3a:3a:e7:23:88:d9:46:e0:f3:c5:a2:83:
8b:aa:cc:e4:5b:ff:86:7f:f1:b9:02:80:26:d9:d5:
17:e9:6f:ac:a2:9c:85:7a:fe:86:80:b8:55:da:f1:
8d:da:73:6a:52:57:ad:9f:40:2f:c2:08:78:30:09:
e0:8c:cf:09:e0:f5:9e:c1:b9:aa:2b:9a:d0:f0:35:
70:39:2d:2c:18:20:7b:63:d5:92:06:74:42:d7:f4:
03:1f:b0:8d:b8:42:04:61:33:68:5b:f4:bc:ae:9c:
23:ed:49:62:0e:68:df:11:15:36:4b:b8:6e:6f:d8:
57:2e:03:8f:c9:33:50:69:ee:10:80:28:58:72:13:
a1:c3:83:3c:1a:41:39:fd:cf:cd:af:00:fc:35:de:
33:19:93:c8:e4:e6:40:f5:e9:75:63:49:08:cf:18:
17:18:18:b6:db:da:e4:33:f3:ea:c8:2c:42:8e:74:
e4:1e:ec:4d:ff:f2:5e:54:69:ff:63:f7:57:bc:c9:
59:2b:5b:47:62:f6:21:14:9e:6f:09:4d:6d:19:1b:
7b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B5:E0:CC:73:78:98:6D:24:6C:38:10:A0:2A:31:32:9A:C0:07:40
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f9:d5:5d:b3:7d:ee:35:d0:77:81:1f:be:6e:df:13:0f:01:
02:e6:cd:ab:26:79:50:60:ac:0c:85:15:51:87:91:a5:9e:fe:
e9:62:f9:a4:8d:23:85:02:10:79:78:bf:82:68:c1:f4:30:81:
47:a2:dd:7a:14:3a:8a:28:27:94:be:73:29:0f:da:29:5a:17:
5a:7d:e3:bd:c7:c0:a9:cb:bb:80:38:bb:d2:d1:28:ce:07:3b:
f5:2b:e4:6d:44:06:3e:5b:1c:49:f9:b0:23:06:58:86:35:97:
fd:2d:fb:fd:05:ae:6a:bc:04:50:ee:be:3c:8b:71:cd:d3:4b:
09:25:b0:4f:2e:38:6d:f7:28:24:4f:55:ac:1d:9b:c6:91:31:
17:d6:f2:08:8a:57:e5:d7:88:4b:18:38:b7:13:1b:3b:5d:e1:
8a:60:be:49:1f:da:ee:bd:e4:da:fa:17:78:37:c9:d4:b1:5c:
3f:b4:e0:5d:58:a9:c4:22:8d:92:74:15:36:fc:91:3e:77:e9:
60:db:87:75:13:ee:04:dc:3b:e2:f8:12:02:dc:70:52:a5:bf:
9f:4f:31:c4:6e:a6:d8:46:65:9a:62:38:3f:50:82:cc:3c:4f:
3b:cd:3f:d7:f9:7a:1b:00:3f:fa:04:61:32:0f:6b:e1:5a:c8:
3d:b1:60:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:20:49 2025 by rpki-client