Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
File: 96Sm-g_D47k2V-7xCu2sD7LEU4w.mft (raw, json)
Hash identifier: qtg51U9ZERGClFMQU0oxsDXk4f6Hg72jCnA3qxq1+Zc=
Subject key identifier: 2E:F0:E4:BC:A3:17:68:87:0E:45:24:D2:60:17:E4:84:E8:99:3B:A9
Authority key identifier: F7:A4:A6:FA:0F:C3:E3:B9:36:57:EE:F1:0A:ED:AC:0F:B2:C4:53:8C
Certificate issuer: /CN=f7a4a6fa0fc3e3b93657eef10aedac0fb2c4538c
Certificate serial: 019A5006FF14B63A69A09CC536F69FFAA7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
Manifest number: 0470
Signing time: Tue 04 Nov 2025 18:00:27 +0000
Manifest this update: Tue 04 Nov 2025 18:00:27 +0000
Manifest next update: Wed 05 Nov 2025 18:00:27 +0000
Files and hashes: 1: 96Sm-g_D47k2V-7xCu2sD7LEU4w.crl (hash: 5DNh1PuutOtRxJKOXV/O6WnWuZGaSJdfTuq1mmTkB8I=)
2: DqSVFNPqA_J9o0vXdKEoqfgBQv0.roa (hash: ZwggkA5coi0s9FB05nyVzSy5fJIa0mQqtItQ7c3UO84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:ff:14:b6:3a:69:a0:9c:c5:36:f6:9f:fa:a7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a4a6fa0fc3e3b93657eef10aedac0fb2c4538c
Validity
Not Before: Nov 4 18:00:27 2025 GMT
Not After : Nov 5 18:00:27 2025 GMT
Subject: CN=2ef0e4bca31768870e4524d26017e484e8993ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:39:04:bf:e5:24:cb:d9:5d:22:69:8c:23:
28:44:9d:db:73:fe:19:32:6f:84:a7:a4:dd:d7:11:
a9:a5:c7:b8:98:d0:97:06:d0:36:1d:e4:10:69:30:
4f:1e:23:3d:6c:b3:f1:b1:0b:e1:e4:70:2e:42:83:
70:65:49:cc:57:60:27:96:92:cf:fd:d3:bb:f4:17:
82:5d:ab:a2:fb:50:64:9b:49:60:aa:2e:22:fd:9d:
48:3c:12:9e:a6:c3:37:0d:7c:bb:91:01:9a:9a:05:
b5:cf:3a:18:43:6d:f5:2f:0f:8e:dc:04:9d:94:5b:
b1:ce:34:21:5b:75:8c:c9:a8:3b:4f:16:75:1a:99:
0f:27:af:32:ed:c3:0e:3d:37:6a:f8:51:77:53:9c:
bc:c5:32:a5:e3:9e:8e:ab:ab:cb:4f:b9:83:4a:df:
b0:c4:c2:e1:d1:e3:24:4e:e8:3e:51:8a:01:60:57:
51:f4:3d:27:c4:ae:3f:a2:06:ac:4e:c6:d6:40:d2:
14:ac:17:a2:49:37:69:fb:a7:b3:61:ca:68:0a:6e:
5b:c1:36:4a:8f:ec:45:3b:2f:ac:c8:35:b6:a3:fd:
4c:24:2b:c7:2a:fb:76:c0:6f:fa:92:2c:a7:53:f8:
86:e8:e1:42:3d:95:0c:c8:59:5e:4e:bd:20:92:9e:
3c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F0:E4:BC:A3:17:68:87:0E:45:24:D2:60:17:E4:84:E8:99:3B:A9
X509v3 Authority Key Identifier:
keyid:F7:A4:A6:FA:0F:C3:E3:B9:36:57:EE:F1:0A:ED:AC:0F:B2:C4:53:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:42:d3:06:b6:79:f9:d0:c2:13:a5:81:9e:0f:2f:13:b4:37:
0b:53:b2:c5:a6:14:67:17:2c:43:46:40:31:cd:cc:0f:3c:e8:
ae:77:75:49:d0:70:3f:94:bb:aa:88:c0:33:b6:2c:89:06:72:
ab:d9:44:c2:70:f8:90:32:26:3d:11:30:a1:02:aa:d6:41:aa:
c1:ab:7a:7c:1d:31:dc:40:54:6d:9d:23:db:44:f0:ac:21:92:
81:49:89:4b:f8:a2:00:b2:e3:3e:5d:26:f1:16:f3:31:44:5f:
86:6a:53:d7:30:db:cd:35:2c:0b:d0:d5:21:85:4f:26:76:83:
0c:9d:d1:4a:c5:76:d0:b8:9b:98:d2:46:ec:4c:7b:61:09:90:
cf:8f:bb:13:b5:7f:12:7c:8c:e3:fd:14:e3:32:c0:5f:09:15:
f0:28:49:2f:ae:ba:99:91:f3:23:92:17:f0:19:d9:3c:5e:5b:
7e:ff:41:8a:0f:d3:12:1c:13:4a:f9:cc:0c:32:49:27:8b:16:
a3:4a:a4:d5:85:6e:10:be:64:68:ea:86:6c:91:b9:d9:54:07:
d4:a4:56:7e:93:67:a0:b3:61:5d:79:c7:10:66:ad:1c:8e:b5:
bb:24:26:9b:ab:3a:bd:7f:99:f1:57:ee:a1:9c:cc:42:ec:68:
67:73:fd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:26 2025 by rpki-client