Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json)
Hash identifier: LL1T4SgBFBKuVSlxAVXYMOjFPjqQOUAgXL50WJGflNI=
Subject key identifier: 61:A8:A1:A3:81:21:58:5D:FF:36:0E:66:B8:CD:7F:0A:62:57:3D:60
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 019A4F62804BDA9A47F1E1C07EC576DC3B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
Manifest number: 0E80
Signing time: Tue 04 Nov 2025 15:00:46 +0000
Manifest this update: Tue 04 Nov 2025 15:00:46 +0000
Manifest next update: Wed 05 Nov 2025 15:00:46 +0000
Files and hashes: 1: 4EkSsDmoQioZqy5Nx3ZgwgNVKek.roa (hash: VGhbj0GwVploD/uygEp/n7MuApEtZ3hQmaUGbybY4XI=)
2: LXrqqPRInqT0YQQrkSiScVOv68s.roa (hash: RhWWbbeT6YQP2eTW6sSumZ2mUd9atkadmzcbsktp9d0=)
3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: Zlm4E8gwogzBlLgOHWcW57H5onTkXNuSldEbsDvxQZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:80:4b:da:9a:47:f1:e1:c0:7e:c5:76:dc:3b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Nov 4 15:00:46 2025 GMT
Not After : Nov 5 15:00:46 2025 GMT
Subject: CN=61a8a1a38121585dff360e66b8cd7f0a62573d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:6e:e0:96:be:56:38:4b:70:7b:6f:63:42:
f9:14:16:e6:21:8d:b6:60:d5:04:43:89:da:dc:69:
ff:0f:0f:31:d4:f4:c9:db:07:b9:c7:d2:05:d2:dc:
de:00:79:c2:37:a0:0b:71:2f:a7:12:6a:35:c5:a4:
f0:d3:88:9b:d3:0f:72:45:9c:0c:f4:3c:6a:a1:67:
f8:38:47:25:77:4f:ea:69:ea:5e:22:82:0d:fe:c5:
df:11:b8:d6:b2:0b:f3:c8:b5:34:25:e9:cd:20:bf:
50:98:80:e8:28:f8:aa:e7:04:93:1a:8a:f1:c6:ba:
72:4d:9c:92:8c:2a:51:f4:ea:d1:e6:ba:32:8a:88:
fd:3a:3a:3b:5c:6b:89:6a:03:e6:6d:17:f8:7e:0b:
28:25:c7:ef:90:bb:dc:a7:14:40:d3:8d:24:c4:23:
1e:20:40:eb:01:79:ac:c2:b6:26:9b:eb:4d:30:bf:
bc:d6:6d:b8:2d:c0:46:34:56:89:e5:f2:f9:bc:b5:
59:9e:55:b7:44:ed:72:0c:5a:72:7c:bb:62:65:fb:
5b:bc:59:d5:1f:6a:e1:4c:29:8d:d0:de:05:ef:43:
b8:1e:c0:a8:fa:33:24:eb:1b:4b:e9:ee:74:53:36:
68:02:96:bc:e5:1f:d1:ed:0b:e1:00:f2:d1:45:a8:
1b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A8:A1:A3:81:21:58:5D:FF:36:0E:66:B8:CD:7F:0A:62:57:3D:60
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cb:a5:50:64:a4:e1:a0:71:8d:d7:22:89:76:fb:06:2e:db:
d8:53:27:c3:ce:13:78:31:f0:e4:54:a6:d3:d0:33:da:06:fe:
69:60:e0:26:06:f1:c1:e7:da:c0:72:88:51:af:e1:63:ce:65:
49:b8:ab:2f:44:72:d7:35:d4:54:3b:8f:7c:fc:3e:00:7c:0a:
57:4d:5c:02:d8:87:fe:53:2c:8f:85:b5:87:3f:05:97:4c:b0:
03:9b:57:f7:5d:7f:bb:fe:40:b3:a9:b8:db:06:db:8e:6c:4d:
68:20:b7:b5:65:f5:0b:9f:37:aa:2f:6e:94:10:32:7b:28:be:
54:11:42:d5:d5:ca:a3:5d:32:e7:cc:cd:b3:07:63:94:fb:d5:
65:52:99:a7:5c:35:b8:c3:ee:57:96:d9:e4:74:ff:de:e3:f3:
34:7c:96:38:b8:af:0f:a8:e3:de:19:f3:6d:07:0e:f9:6e:2a:
b1:b9:05:8c:40:ff:22:ce:41:ad:1d:1f:a1:27:fa:29:14:09:
a8:94:32:f0:60:fe:b4:f2:dd:3a:b7:e6:ae:88:c0:93:b2:b2:
80:84:fb:cd:db:78:08:67:1c:f6:b2:64:34:58:64:98:e6:4e:
fc:10:db:5b:a6:28:b7:ec:0e:49:70:fc:d6:ee:bb:c8:83:78:
e5:e1:1b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:55:10 2025 by rpki-client