Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier: BsBdH1+F0SSSf/przXnjk+7DVCn/sa0bUiqXMLPtZgo=
Subject key identifier: 69:41:E0:2F:20:0B:E0:25:BD:B0:69:95:98:B3:0E:F9:EF:8E:56:21
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 019A52D18FA9A0B55931D8A1673AF538286D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number: 10B8
Signing time: Wed 05 Nov 2025 07:00:56 +0000
Manifest this update: Wed 05 Nov 2025 07:00:56 +0000
Manifest next update: Thu 06 Nov 2025 07:00:56 +0000
Files and hashes: 1: 3L4Ds4lPDiLLOvZ8T2NW6fHNbRs.roa (hash: NwLfkOcBti2VO8eJgA/iflwdsDMiN5aPUXSbDozw53I=)
2: Gg8qXyeg-gil2NOkr3thvUZqwIE.roa (hash: pEcvppDB8KUs5+dwI7YABXPT/TWvmUqee92Iz6LzfZk=)
3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: EwOUdJbR5/r+aDAasPif2b34pUa/MuN7tXO8VQxm/Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:8f:a9:a0:b5:59:31:d8:a1:67:3a:f5:38:28:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: Nov 5 07:00:56 2025 GMT
Not After : Nov 6 07:00:56 2025 GMT
Subject: CN=6941e02f200be025bdb0699598b30ef9ef8e5621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:b1:11:fd:20:43:f9:d7:d1:1b:dc:0a:af:
9c:d7:d5:ec:eb:aa:5b:44:81:e2:de:da:17:c1:94:
71:79:f7:e5:9d:bb:8b:7a:ac:38:2f:1f:d6:3c:31:
9e:9a:55:48:41:3d:48:71:07:b8:a6:09:a8:70:1b:
38:77:23:a4:22:d5:0f:16:f4:42:12:17:34:54:21:
c2:ad:ef:e7:1f:d5:df:22:dc:42:73:d1:f0:64:e0:
0c:b7:e3:e2:51:2b:77:38:30:cb:2b:c6:cc:e0:4c:
f9:3e:d6:53:55:69:a9:36:27:00:72:db:07:67:ef:
fa:e6:6a:b7:c0:2a:07:be:46:42:e5:9a:79:82:b4:
50:73:9f:74:22:82:e8:68:ff:af:0b:b9:57:3b:2d:
e4:f3:ed:92:06:e8:50:80:6b:73:db:62:1b:30:e4:
eb:b1:1c:02:75:e8:ba:56:24:fc:c9:cb:14:d9:39:
bd:e3:fc:f3:6c:39:3e:d9:83:3a:17:bf:71:73:91:
08:da:e2:dd:9d:13:96:c5:26:e2:c9:36:a4:7b:eb:
ab:61:26:b8:ca:95:e9:84:c2:e1:59:28:f5:ff:61:
57:11:c1:8e:09:a4:bb:b4:66:c8:65:0b:d3:70:0c:
2e:56:8c:7f:50:9c:33:b7:c2:be:14:e1:e6:a6:96:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:41:E0:2F:20:0B:E0:25:BD:B0:69:95:98:B3:0E:F9:EF:8E:56:21
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cb:85:d7:b6:98:ae:1f:d6:d1:77:90:1d:fa:90:30:d4:14:
f4:2e:66:ff:88:a7:24:53:ef:a3:6f:4e:f7:7a:b0:31:b8:af:
32:0e:21:a0:04:79:33:37:7b:ad:16:3a:02:a6:2c:f3:5a:78:
3f:75:75:ae:79:6a:9b:05:ff:b7:52:4e:85:a3:6c:33:ee:cc:
b8:b4:38:54:27:7a:8d:e3:90:73:77:53:f2:32:37:66:21:33:
b8:40:f2:18:5a:be:e2:7e:49:fa:72:db:3a:8d:a0:5c:52:a9:
f0:1b:93:f0:9e:91:a3:26:8f:b8:5d:fb:64:89:54:1c:af:03:
e1:cb:68:ba:37:0c:35:d6:12:9d:d4:84:c9:4d:75:4e:40:35:
50:d9:11:29:04:57:95:03:6c:11:9e:01:d7:1d:d8:a2:c9:98:
e0:89:4e:d7:b6:80:62:a8:2f:f4:97:30:8e:96:0a:75:67:8a:
a7:e2:d2:6b:b5:03:52:d1:24:67:ca:61:20:84:7b:f6:c0:f9:
65:2c:02:37:4f:0a:0e:a7:cc:6b:1e:7d:d2:8c:3b:4f:a5:f1:
d3:04:a3:e5:07:ed:ed:9f:02:31:bd:94:c6:c5:4a:70:06:49:
b8:e6:fb:37:e2:c6:1d:2b:51:dd:0c:e1:76:f1:41:4e:cf:b5:
3b:e4:06:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:23:13 2025 by rpki-client