Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
File: sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json)
Hash identifier: xr6+fGxI5Ob1OoYyIJaK+MFpKtaJzzPDZZZTauWLvnk=
Subject key identifier: 21:63:C6:9D:7F:F2:0A:21:84:53:73:28:56:F0:40:20:69:CA:BA:98
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Certificate issuer: /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial: 019A4F98EF5B29D23589EB445931C14CE5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 16:00:13 +0000
Manifest this update: Tue 04 Nov 2025 16:00:13 +0000
Manifest next update: Wed 05 Nov 2025 16:00:13 +0000
Files and hashes: 1: 5q_QBExX-iJkMtzTZ_fdW28i38Y.roa (hash: o+vnb00qVUwzoLHaYfEzcLDShc1yhr65w9Ny1ipEj7o=)
2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: 1cCfXOmFgjE2mutd1Dxv//pU8UWtWEAOeSAnwL+olh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:ef:5b:29:d2:35:89:eb:44:59:31:c1:4c:e5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Validity
Not Before: Nov 4 16:00:13 2025 GMT
Not After : Nov 5 16:00:13 2025 GMT
Subject: CN=2163c69d7ff20a218453732856f0402069caba98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:da:71:b0:7c:0e:b6:83:4c:bc:55:48:d2:
5c:7b:f7:99:5a:1a:9b:ea:d6:dc:01:03:77:5c:88:
58:13:72:d2:29:6c:13:8d:18:80:f6:8b:43:67:3f:
4f:64:17:67:3f:93:44:98:91:8b:bf:64:7d:e0:71:
97:f8:a5:bc:ab:43:11:7d:39:d0:01:fd:be:e0:4d:
b9:62:23:78:82:db:47:39:f2:27:d0:dc:ed:f5:67:
f7:41:8f:ac:76:2c:ac:1e:d1:70:43:61:10:bc:02:
bc:f6:f6:60:04:00:e0:2c:d9:a5:74:69:20:77:6f:
79:af:f9:0b:f1:5b:d1:aa:19:cf:f0:8a:1f:7a:32:
da:86:cd:a3:03:ea:a4:26:b1:d6:8d:70:64:99:83:
5e:01:e9:cc:d0:c5:4a:96:65:b9:98:a1:97:27:6b:
95:8e:18:05:15:c0:21:51:e5:44:3c:58:32:07:3a:
3b:4e:29:13:2f:9c:b9:49:48:42:3c:cd:06:7a:f6:
f9:eb:38:ce:8f:35:09:ce:ed:9b:11:09:b5:b4:b8:
be:29:29:e6:06:94:ad:56:7e:43:0d:f0:a6:bb:d6:
10:23:04:02:5b:5d:ce:14:10:96:89:a0:48:46:27:
a6:bc:1a:98:e2:c3:e0:06:4d:33:90:5c:ee:d9:d7:
7b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:63:C6:9D:7F:F2:0A:21:84:53:73:28:56:F0:40:20:69:CA:BA:98
X509v3 Authority Key Identifier:
keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:98:e4:1e:b8:a2:cb:5b:74:d0:e7:9f:1c:22:3d:a7:6d:8b:
5b:9f:83:06:ac:48:e4:73:c6:dd:dd:9d:dd:b5:0d:92:d3:e1:
07:0d:0a:1e:04:c4:d5:11:77:42:52:4e:c3:f2:46:24:4a:65:
40:09:cb:42:83:fa:8f:1d:8c:0f:d2:85:02:c1:d0:07:fa:3e:
be:1d:94:4e:03:5e:50:ae:e3:5b:88:e6:62:25:75:49:73:9f:
8a:99:c5:c0:66:aa:17:b9:86:fc:69:31:42:c3:cb:da:2f:32:
35:0e:0d:54:01:57:6f:22:9b:ec:da:96:48:15:fa:6b:64:af:
5c:91:b0:c7:0b:2d:99:1e:45:81:76:64:80:d5:b0:21:ef:53:
cf:b6:fb:65:96:f0:c5:75:5a:d4:d7:52:37:1a:f3:45:ad:cb:
b7:b0:69:8f:aa:dd:46:60:83:ce:a2:7c:52:06:ce:03:64:81:
50:9c:ea:f8:de:6b:7a:bd:7c:b6:fe:ea:c6:2f:8a:d2:22:cc:
bb:a0:77:da:21:d3:78:d9:c4:da:5c:55:60:b2:db:a1:e6:cb:
4d:66:6c:5c:2e:ec:d2:16:ec:b7:d0:dd:c5:fe:7f:9d:b4:33:
86:12:e3:c1:67:c0:fc:36:31:7d:99:82:34:ff:60:7e:35:d0:
8e:11:79:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:22 2025 by rpki-client