Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
File: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft (raw, json)
Hash identifier: MFz8e7ftd3o3Mfk8Kn6tbMFaDw++3oSE3TwaDCE2yWw=
Subject key identifier: 3C:10:AE:41:90:7B:C8:C4:C8:AC:76:69:1F:1F:1E:32:2F:28:83:6D
Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
Certificate issuer: /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Certificate serial: 019A4DE18B24F47941AE59AC88DF718AE938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
Manifest number: 03E5
Signing time: Tue 04 Nov 2025 08:00:18 +0000
Manifest this update: Tue 04 Nov 2025 08:00:18 +0000
Manifest next update: Wed 05 Nov 2025 08:00:18 +0000
Files and hashes: 1: N2ivlz1wZCpdYYLO1Jxljykvn4c.roa (hash: qYmGGsXcI2a1eHN7AFVSkBu0axGqB7MkOzzu5zM+aAU=)
2: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl (hash: XHEWdA7qjDT2w4ptApZ6ZHll+B/Qwfq+2jvVJWTxwRY=)
3: y-thR2-wOGxjUF2dmavWMwBsUm0.roa (hash: WQLO7IU5V5iq1uzzyryZYM1QGfm/WLluTpgcnyQ2D8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:8b:24:f4:79:41:ae:59:ac:88:df:71:8a:e9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Validity
Not Before: Nov 4 08:00:18 2025 GMT
Not After : Nov 5 08:00:18 2025 GMT
Subject: CN=3c10ae41907bc8c4c8ac76691f1f1e322f28836d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:fb:ca:ef:7b:4c:11:a1:71:74:6b:64:53:
17:0a:97:10:47:a8:bd:28:32:ac:8f:86:30:5e:d3:
81:e6:49:68:b4:29:c2:84:4a:5e:46:27:9d:32:bc:
6c:78:d0:58:fd:0f:d8:85:b0:60:96:c2:a2:c8:e3:
47:48:08:44:cb:b8:3b:02:1c:dd:d5:0a:7c:74:a9:
16:17:56:76:7c:1d:7a:b0:de:9c:33:87:3a:eb:6c:
c2:4c:88:cc:20:13:86:aa:c4:48:7b:59:68:0c:32:
61:10:da:e3:bf:ab:81:0b:72:50:e8:a7:58:33:21:
84:52:95:50:91:40:94:ca:96:48:55:c6:02:05:40:
f5:2a:22:b5:ac:14:02:c6:0c:0d:7b:3c:da:ce:15:
ed:ba:73:7d:6c:da:65:d3:0f:da:ae:09:ed:3a:66:
c3:d8:b1:f0:dc:c9:15:f3:c6:45:a1:fb:d9:75:03:
83:05:05:72:ad:2d:e8:ec:c9:8a:80:33:6c:73:de:
9c:e2:43:97:65:4f:25:9e:89:5c:4d:46:77:4e:a6:
3c:1a:af:1e:ca:be:e5:95:83:67:57:46:6d:82:6f:
79:c9:d0:8e:49:ef:e7:ac:d3:50:45:ee:d9:be:2e:
e7:bc:b8:b7:ad:40:14:5b:06:d1:ec:d1:ea:bd:22:
59:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:10:AE:41:90:7B:C8:C4:C8:AC:76:69:1F:1F:1E:32:2F:28:83:6D
X509v3 Authority Key Identifier:
keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e1:99:be:09:00:f0:47:7c:8e:ff:ea:6c:c2:a2:33:43:d5:
ca:e6:8c:d9:a6:7d:44:8e:6d:f1:a0:f4:ab:b2:97:67:8f:f9:
3c:28:84:15:10:63:ae:01:22:0e:9d:48:6d:ff:40:92:fc:b9:
3a:f3:c7:42:89:ae:06:27:3f:d1:b4:3c:8a:cc:e5:62:e1:f9:
70:36:f9:f8:4f:aa:d3:7c:5f:50:4e:c5:b9:89:29:4c:b4:fd:
59:21:1d:50:ef:81:16:a9:f9:9d:a9:2a:fd:38:b2:2f:43:35:
97:ff:0f:14:90:65:0a:7c:3c:4b:84:81:33:1b:9a:76:fe:8b:
fe:ae:60:d3:f9:46:b0:33:b5:d2:b2:27:9f:29:88:5c:6c:54:
c2:1e:55:f0:c7:a4:3a:28:e7:3e:f1:e3:8a:6b:9b:31:4b:23:
9f:19:e0:c4:4a:14:d3:7a:ea:31:9d:d0:98:05:ae:95:35:8e:
19:44:a3:f5:74:19:8a:f1:e1:3e:e9:a9:62:a0:79:9b:a7:bd:
88:3e:55:54:ea:2e:90:85:2a:aa:36:d8:8e:23:17:84:9d:e3:
df:d8:e4:12:33:25:89:26:c8:5b:76:f3:f6:17:17:48:22:f6:
66:18:fd:fa:90:95:09:05:f2:ca:ed:f7:6f:55:53:82:16:fe:
ac:30:47:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:22 2025 by rpki-client