Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
File: sVyi9obU5ISnfDTBc0dr9p0je30.mft (raw, json)
Hash identifier: 19fHtaKjbnzMLlNn5oOhrz3caye3yLpEZsagUhmF7mo=
Subject key identifier: B8:97:B4:98:3A:9F:B5:B5:EC:65:BB:50:33:29:F6:49:9D:D3:D3:BF
Authority key identifier: B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D
Certificate issuer: /CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
Certificate serial: 019A4EF59F158D4D75EF812AE856B575FB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
Manifest number: 12B7
Signing time: Tue 04 Nov 2025 13:01:51 +0000
Manifest this update: Tue 04 Nov 2025 13:01:51 +0000
Manifest next update: Wed 05 Nov 2025 13:01:51 +0000
Files and hashes: 1: HGyMO-gI6BJOthGGldBVkMwTP6M.roa (hash: LWkHdvqqdhuJkMVn2Z8NyBNjrEPjz4vXV3NQv+TmBQY=)
2: sVyi9obU5ISnfDTBc0dr9p0je30.crl (hash: 7M22W9goPolCSNWcT6B9aOGUW1NSsTh7bPL9jObaBtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:9f:15:8d:4d:75:ef:81:2a:e8:56:b5:75:fb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
Validity
Not Before: Nov 4 13:01:51 2025 GMT
Not After : Nov 5 13:01:51 2025 GMT
Subject: CN=b897b4983a9fb5b5ec65bb503329f6499dd3d3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:10:88:c0:8c:b6:83:40:00:77:00:26:bb:
59:58:45:15:af:c5:76:b2:db:78:0f:73:5e:aa:e0:
af:5e:51:94:55:2a:ed:d2:43:ea:63:d2:c9:ed:08:
a7:f3:c0:ae:56:c7:29:38:21:33:6c:17:27:7c:2e:
ef:35:b7:dd:26:cd:0e:30:5b:53:fc:dd:a8:74:22:
6b:bb:c5:59:5c:9c:36:ce:13:b1:9a:36:a1:c9:ba:
1d:83:2d:e2:22:bc:2c:8a:7a:fc:73:ed:ac:5b:f3:
2b:17:4e:d9:db:31:5e:32:4c:ba:cf:ab:f3:39:03:
d7:bc:40:fe:07:d2:81:c6:d3:05:2b:4e:ca:02:af:
66:8d:7b:f6:fe:37:96:7b:9a:87:83:7e:fb:91:5f:
47:05:fd:82:09:02:dd:02:4e:3c:d4:f2:f8:14:9a:
b4:56:31:b1:df:53:43:00:36:be:44:e0:01:b0:95:
86:25:ac:b6:17:4a:70:35:e5:cb:4f:25:d2:83:cb:
4c:67:f0:23:aa:bb:de:7b:55:9c:f4:9c:ca:da:84:
b2:ed:0c:31:81:9c:b7:a2:dc:ce:3a:dd:d4:46:df:
c1:da:a0:6f:29:02:74:65:73:ee:10:2c:5b:5d:5d:
7c:a4:c3:3e:d2:26:dd:b5:58:c1:ca:b7:b3:f7:50:
d6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:97:B4:98:3A:9F:B5:B5:EC:65:BB:50:33:29:F6:49:9D:D3:D3:BF
X509v3 Authority Key Identifier:
keyid:B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b8:80:e6:ea:81:55:bf:99:a7:cb:71:8f:19:0d:1e:3c:58:
3d:56:8d:33:62:98:45:52:d9:ba:11:60:f9:9b:df:6e:4c:38:
f6:c2:62:52:80:f8:e1:9e:4e:9c:dc:a0:1f:81:44:9d:61:2e:
1f:04:9f:c9:e8:0e:e1:f1:51:41:2f:f8:f1:80:56:99:62:14:
f0:6a:f8:ec:19:8a:45:f5:40:06:eb:5a:4e:67:61:f8:cd:3c:
de:da:cd:20:3a:df:1d:b4:54:85:18:6d:de:75:0f:03:44:39:
af:b1:0e:14:84:ce:1c:8a:d4:48:28:4d:0e:ec:71:00:87:11:
10:3c:b6:03:69:ab:14:5f:c8:37:f7:ae:84:d4:4a:54:8e:d7:
bd:e2:f7:23:98:e0:9b:60:6c:e1:13:e0:ac:a4:17:db:31:b6:
74:d2:13:b0:1e:35:e8:db:d5:da:d8:5a:2d:56:69:34:2a:bc:
cd:ab:5d:e8:93:d5:cb:f4:1a:f3:4a:1f:b9:8b:37:e3:78:d7:
df:c4:92:ad:57:20:68:e0:39:5c:f2:3c:1d:f8:c0:fd:6a:4e:
f0:b2:07:8b:ae:1d:c3:1d:24:f1:3a:58:5b:2a:cd:e0:59:26:
2b:1a:eb:e4:e8:b5:79:e0:43:28:9d:8b:6b:b2:f4:15:a6:8b:
b5:a9:89:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:31 2025 by rpki-client