Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
File: SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft (raw, json)
Hash identifier: mdPFVmxxqvvSBhYylAprze3RnKxC6BBHGfvFgeQM7IE=
Subject key identifier: A9:28:D7:9A:F9:D3:4C:CA:F9:DB:0B:F8:75:FB:D2:4C:9C:67:C6:B7
Authority key identifier: 4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
Certificate issuer: /CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Certificate serial: 019A4C612EDBC51293FB19AD7FAF6FD30F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 01:00:28 +0000
Manifest this update: Tue 04 Nov 2025 01:00:28 +0000
Manifest next update: Wed 05 Nov 2025 01:00:28 +0000
Files and hashes: 1: KUfFcY4n_r75t21wBTn8NHwpPWo.roa (hash: Vj4b0HHRAbzzjfGSfe71X4pK6wA9f27I+UmGi3mJNYI=)
2: SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl (hash: jfLNwQs/dNUUPQBAuFrqVe29D3la+KNtyvL9D7NQ7EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:2e:db:c5:12:93:fb:19:ad:7f:af:6f:d3:0f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Validity
Not Before: Nov 4 01:00:28 2025 GMT
Not After : Nov 5 01:00:28 2025 GMT
Subject: CN=a928d79af9d34ccaf9db0bf875fbd24c9c67c6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:db:4b:54:a7:f7:31:96:de:f6:29:76:54:c8:
c9:12:d8:c7:21:29:e3:a4:2d:b8:f4:0a:f7:82:4e:
92:88:18:ba:93:17:06:15:e4:e7:fa:92:c6:68:b5:
f6:83:a9:8b:27:c8:44:10:f3:42:d8:02:97:c0:e0:
08:2e:73:fd:03:aa:aa:31:6c:67:b8:f4:42:f1:a1:
77:14:53:88:e3:8c:37:6f:92:a5:f0:79:a4:c3:50:
bc:5e:90:ef:a3:e0:8d:9c:88:06:76:e3:e7:d7:df:
7a:27:87:ec:c8:9a:83:cc:6c:c6:1a:10:63:78:53:
21:dd:6a:bc:1d:a1:4c:3c:98:19:03:3b:ec:c6:9a:
5a:c2:96:0f:f0:a1:36:b2:40:c1:5e:21:2b:c8:51:
e9:46:a3:57:b0:a0:8c:5c:bd:ee:88:8d:6d:0d:bd:
e2:3b:e5:a0:a4:4b:7c:7a:9b:3b:c7:23:a9:23:6a:
9a:6c:53:30:90:60:cf:d7:36:a8:8f:d5:fc:c3:5c:
a6:a1:03:15:5b:9d:51:ce:f3:00:57:6c:3d:6f:a5:
51:7a:76:2b:1d:5a:38:9d:a0:88:04:63:f7:a7:d0:
53:fd:c7:4b:8f:3e:08:82:43:35:55:22:9e:80:1f:
c2:46:15:ee:a2:43:40:87:da:84:ad:40:85:d0:0b:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:28:D7:9A:F9:D3:4C:CA:F9:DB:0B:F8:75:FB:D2:4C:9C:67:C6:B7
X509v3 Authority Key Identifier:
keyid:4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ae:01:8e:2b:4a:e0:50:97:14:94:90:21:6b:c0:b5:c8:14:
17:35:0d:e8:21:ea:50:26:87:7c:10:53:fc:bb:bf:87:62:2a:
3f:8d:28:43:0f:c0:9e:bc:c4:65:0d:3d:ac:3c:e3:ff:8c:65:
71:96:2b:ce:a8:bb:0d:d5:db:19:24:34:e5:93:54:4d:d8:b0:
0b:37:08:44:c8:a1:77:27:82:91:49:0f:e7:2c:39:89:92:77:
e7:7d:7f:eb:3f:43:a8:cb:39:3e:b8:04:b7:28:f1:4a:fc:32:
b8:b7:89:34:4e:db:26:ed:ff:45:95:d3:1f:ab:0d:32:ee:f1:
9f:7e:a1:10:47:06:a6:f6:2b:c9:22:17:4a:42:c7:2e:39:d0:
b0:e3:22:c9:8d:bc:71:fb:ed:73:1c:83:81:48:ed:fe:cc:52:
d1:26:81:f3:78:1e:37:7f:55:27:df:85:f9:35:8c:39:43:15:
fe:00:61:69:1e:72:fb:63:1c:0e:a5:e7:ef:fc:af:6f:ff:02:
39:36:98:1b:f3:ef:27:9b:3e:77:24:39:1d:82:42:e7:12:f7:
2d:ca:ca:48:96:43:24:30:f7:f0:7e:06:5d:27:02:c0:40:21:
30:47:ed:14:44:3a:36:60:1a:8e:5a:f3:b1:9e:af:ee:f1:64:
b1:dd:ca:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:49 2025 by rpki-client