Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json)
Hash identifier: QGa7S4TYYMY8+GGWX7fGyVePs4HmqAISXHU4sa2EDLE=
Subject key identifier: 93:EE:83:D9:D5:B9:57:2A:BA:9D:EC:AD:F8:1C:FC:81:F7:33:71:60
Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Certificate serial: 019A52D2163B32E8C24B037DBA327A8ECE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 07:01:31 +0000
Manifest this update: Wed 05 Nov 2025 07:01:31 +0000
Manifest next update: Thu 06 Nov 2025 07:01:31 +0000
Files and hashes: 1: ReBd6XpLAEdQnq22AyigT28YEek.roa (hash: RhoXTgASpblnjFEdfG3nqoqUpEixf7i2FKnJEh2Jo/g=)
2: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: 0jKHMex6CpeQOmCp8s0uJUd3On7Cml1aORqSOPasaRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:16:3b:32:e8:c2:4b:03:7d:ba:32:7a:8e:ce:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Validity
Not Before: Nov 5 07:01:31 2025 GMT
Not After : Nov 6 07:01:31 2025 GMT
Subject: CN=93ee83d9d5b9572aba9decadf81cfc81f7337160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:b9:71:7a:75:5a:58:da:a9:99:18:20:5d:
0f:92:d5:1e:18:c3:14:1b:2b:b7:c2:ea:54:52:1c:
8e:cd:22:4b:4a:61:60:47:fc:f4:73:5b:05:3d:73:
76:d9:7d:76:a9:ef:ab:2e:54:93:2c:19:53:f9:29:
eb:35:97:0d:22:83:48:8f:84:4f:fd:9a:d3:d2:87:
af:10:dc:38:9e:05:e3:e5:f7:8b:80:43:5e:6b:5e:
bf:e7:da:81:d9:bb:55:e4:f6:dc:54:4a:d7:ad:a7:
38:9a:c7:6c:e7:ca:ff:1f:cf:a6:d2:62:40:e6:79:
9d:09:0e:d1:dd:eb:4d:f1:a5:a3:c8:c7:79:c8:70:
78:95:a1:65:e2:5a:b8:c2:bb:66:c6:eb:5d:f4:9d:
67:eb:a8:ec:e1:d5:15:11:7b:38:d3:e5:70:aa:22:
55:68:e4:99:40:b8:50:c8:f8:97:ea:b7:24:95:18:
04:89:6c:cf:e1:bf:a8:a7:d9:ab:c9:a6:cf:61:58:
07:02:9f:86:f7:d3:31:39:ef:f6:4f:58:dc:b8:b8:
f2:aa:d1:9f:00:ce:d3:2c:54:12:2e:25:94:c3:21:
4f:53:1b:6d:4f:6b:0c:fe:26:c8:a3:ee:07:b3:00:
81:d7:2a:19:6a:65:29:0b:01:df:4e:3f:da:99:2f:
b4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EE:83:D9:D5:B9:57:2A:BA:9D:EC:AD:F8:1C:FC:81:F7:33:71:60
X509v3 Authority Key Identifier:
keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6d:3d:ec:22:c9:15:02:bd:32:f5:dc:0a:6b:6f:4f:21:ae:
6a:cb:9b:b9:23:1e:68:d4:50:9d:27:3a:7d:46:ac:f1:da:c5:
96:c7:c3:0a:a1:20:9e:3e:7d:10:60:be:86:80:2b:8b:aa:f8:
0d:9d:a0:67:e4:28:fa:6f:82:1b:4e:09:2a:06:00:f9:fd:96:
d2:03:28:28:49:8f:ca:7b:27:29:c7:f9:4e:de:73:97:54:ff:
2d:e2:5d:ef:a6:ad:ea:54:9f:bd:48:db:1e:d3:bf:96:ae:86:
17:44:b1:b7:51:ce:68:0c:4d:0b:32:b4:4c:01:93:e8:89:47:
c3:0c:04:6f:b7:84:46:47:db:32:c6:4b:80:1d:b8:f1:b0:08:
b0:00:f7:0f:cd:03:10:93:ca:20:44:bb:cb:44:8d:46:b2:ef:
6e:93:2a:dd:8e:2c:57:e2:8a:59:9e:7d:28:8c:9c:13:cd:29:
24:63:47:cb:08:98:9b:01:e1:12:70:77:ae:c7:97:08:94:82:
2e:67:92:57:2e:52:9d:36:15:25:ac:32:58:68:22:2c:6d:61:
3f:8a:d3:26:18:71:b1:f0:20:f4:fb:c0:ae:ed:fe:e8:35:31:
fa:81:0f:16:99:8e:b4:35:88:9a:e1:d2:78:c9:1c:9e:6a:ec:
81:e7:92:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:55:14 2025 by rpki-client