Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
File: sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json)
Hash identifier: JMciOmgV7+Vin79DxVMP1ivPcFuK8wWSKhbC0EtHxzY=
Subject key identifier: F2:9B:2D:EC:91:FF:58:82:8A:92:83:BF:2C:48:CC:CB:19:57:54:52
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Certificate issuer: /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial: 019A51F5A2E1BD941D0EBB2C8D12D5B7541B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 03:00:43 +0000
Manifest this update: Wed 05 Nov 2025 03:00:43 +0000
Manifest next update: Thu 06 Nov 2025 03:00:43 +0000
Files and hashes: 1: 2T5PZV0ykQrCqtWQsuyltR-_EP0.roa (hash: adHBBG4DTLEXzzbMMTMmfqzyorTjLSxY7EK7i8wkAJ4=)
2: fOGaYfmCbgoyUIfYq0nj6dp3ggs.roa (hash: k+pBFiGRIlpDeHFyJ2TjGWDmfTvqV2e7W4zXwUECFg0=)
3: hu6cElB5t5xLfzkwp-1E2pD6XpI.roa (hash: kdn6w5+MgRdzoZY9M3/FnbfXPKK9TjtWqwutVLtON4g=)
4: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: wLtvkjwzmEK9xcBhJRV7PoHY9p5brK7gbd/r+/rnijI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:a2:e1:bd:94:1d:0e:bb:2c:8d:12:d5:b7:54:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Validity
Not Before: Nov 5 03:00:43 2025 GMT
Not After : Nov 6 03:00:43 2025 GMT
Subject: CN=f29b2dec91ff58828a9283bf2c48cccb19575452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:d9:16:af:d4:ed:e5:92:44:41:db:3c:08:
96:c8:45:d3:03:7b:5b:40:bc:f9:a2:2a:fd:44:8f:
f0:6e:ed:b7:c1:12:74:57:ab:71:75:ba:bd:12:92:
10:c1:5f:62:f8:2a:c6:d8:09:07:80:19:d2:87:f3:
c2:5c:6f:6e:fa:f5:53:54:dc:53:7c:79:a6:f2:6c:
58:78:e4:0d:fd:b4:22:27:35:0e:df:96:ef:ad:5b:
99:5e:09:2d:f8:64:b9:0e:db:d8:b9:2c:fe:39:5f:
1e:10:47:cb:85:96:bb:3c:88:d4:58:4e:7c:cc:ce:
2f:d8:29:7b:6e:c5:7e:33:f5:77:9a:77:e8:31:74:
c5:8f:c0:0a:31:39:3a:5b:d9:c5:cf:5c:fb:0e:a6:
80:fb:22:a9:b7:61:38:4a:3e:15:a2:70:09:5f:a5:
f8:8a:ed:e7:63:fc:b7:26:e1:cd:61:1c:c4:fa:d3:
0f:4f:13:9c:a0:1e:a6:40:ca:bd:21:da:e0:86:73:
e6:1d:1a:06:5e:c4:e8:01:8a:14:c8:f1:d7:98:ab:
a6:ff:94:93:4a:8f:2b:d0:c3:4d:86:de:55:f6:d7:
eb:e8:73:7b:8e:7b:78:6b:99:a9:f8:fb:21:8a:b2:
e4:df:d7:48:0c:72:bb:c8:d8:29:f0:c8:01:78:81:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9B:2D:EC:91:FF:58:82:8A:92:83:BF:2C:48:CC:CB:19:57:54:52
X509v3 Authority Key Identifier:
keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:59:93:22:ab:d0:07:3d:14:50:82:50:47:47:50:e4:b8:4d:
1e:f0:68:87:08:53:e5:82:26:fc:01:54:d0:3a:fc:19:a3:cf:
92:11:b6:e1:9c:24:cf:67:d4:f9:63:4e:9b:f9:e7:42:a1:71:
6f:1e:89:cd:1d:08:f5:6a:1d:d3:ca:af:40:5a:b1:66:8f:0e:
43:70:7f:9d:66:34:8c:29:20:f9:55:34:19:03:08:73:9d:4f:
02:12:7b:19:80:af:5e:c0:1d:39:e8:b7:a4:56:fb:7c:6d:9e:
e6:e3:44:a8:8e:a3:84:ff:b1:05:03:5b:51:91:9d:ac:95:20:
c3:c6:b2:b8:2f:ad:3a:9d:76:27:89:47:52:cf:cd:d7:4c:dc:
7a:37:92:fb:5c:ce:1f:b5:cd:96:a6:33:1a:81:7d:8b:7f:01:
30:8f:9c:af:5c:9a:67:d4:81:11:79:c9:69:6e:04:70:df:b9:
2c:61:37:94:2f:6a:6c:81:63:f8:25:7a:27:ee:89:cb:bb:19:
8e:55:4f:2f:09:c2:33:14:11:10:b0:3b:c1:42:83:90:56:da:
07:c8:22:4f:10:7f:62:05:15:89:52:92:7f:b0:0d:ca:76:46:
64:af:9d:94:88:0a:21:1b:be:22:81:8c:42:6e:49:f6:82:0f:
c6:67:d0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:11:38 2025 by rpki-client