Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
File: sPiohfd3bSq5m7TyDoTTBuA5SqM.mft (raw, json)
Hash identifier: l3v9CfYHp32WBvWgx44R1cAk2SOwgSvTajXRSYDRu8I=
Subject key identifier: C7:BF:0F:3E:DD:84:2E:0B:63:AE:28:62:7D:CA:7E:88:D9:DA:A3:C4
Authority key identifier: B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
Certificate issuer: /CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Certificate serial: 019A5074D19539ABC39BAE58661FCE824DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
Manifest number: 14A1
Signing time: Tue 04 Nov 2025 20:00:24 +0000
Manifest this update: Tue 04 Nov 2025 20:00:24 +0000
Manifest next update: Wed 05 Nov 2025 20:00:24 +0000
Files and hashes: 1: SvV3htVhXEPI7wFXdPP_R5R2jOo.roa (hash: ADbpdowWW8HzIQ0XmIe2lqnPixhQxjU2ME36RexdQ8I=)
2: sPiohfd3bSq5m7TyDoTTBuA5SqM.crl (hash: j+c5qJwOCrHEKTYpRuwDsw1LhlgFuy05KM4FGNz6Pxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:d1:95:39:ab:c3:9b:ae:58:66:1f:ce:82:4d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Validity
Not Before: Nov 4 20:00:24 2025 GMT
Not After : Nov 5 20:00:24 2025 GMT
Subject: CN=c7bf0f3edd842e0b63ae28627dca7e88d9daa3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:ef:ea:ac:68:57:f3:84:92:1d:c7:1c:54:
5c:9e:f7:3f:77:d5:be:c5:94:01:09:f2:b6:3a:e3:
ab:3c:6a:68:48:c7:06:38:b1:f1:e1:b9:44:e0:c3:
d6:5c:51:3a:5b:3a:a3:92:cb:ab:56:b5:af:27:6f:
e1:42:66:be:8f:2d:f0:10:e9:61:38:85:9e:43:39:
be:6b:b6:27:76:60:24:a2:da:9a:dc:ff:c6:8f:68:
40:b9:8d:08:7d:6d:92:e8:a4:c7:d7:53:d9:2f:3f:
b7:98:a4:e5:dc:ee:11:b7:73:fb:0c:72:d2:36:9c:
b0:f9:e1:ec:6e:51:38:02:cd:2e:cd:2d:69:f9:05:
cb:ae:ad:8c:de:a4:dc:ff:71:be:2e:2b:ab:89:7c:
ae:34:2d:00:48:6e:d4:ca:b7:5b:39:34:aa:6a:13:
38:1e:f7:59:7f:e0:7c:ef:7a:89:e8:f2:7c:bc:a1:
a9:b8:22:39:e3:f2:46:50:80:38:ee:55:7c:c2:6f:
56:9f:15:cc:e4:90:6d:db:9a:fb:c1:4b:fc:4e:9d:
dd:1d:d2:13:36:5b:18:da:03:3b:3f:be:5f:55:5e:
bc:dd:07:7e:eb:6a:77:81:d5:01:f9:5a:6a:b5:6b:
d0:89:0d:fb:74:b0:f8:cb:83:65:e1:9e:3d:8f:42:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BF:0F:3E:DD:84:2E:0B:63:AE:28:62:7D:CA:7E:88:D9:DA:A3:C4
X509v3 Authority Key Identifier:
keyid:B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d9:f9:a0:3f:3c:45:f6:ed:d1:0e:d5:08:e5:27:5e:ad:f7:
ca:e1:6c:cb:03:b6:c9:a4:b4:c0:c9:29:3a:26:15:5c:36:bf:
46:d1:8a:b4:f4:3f:c3:a1:58:de:0a:87:67:45:76:e7:08:6b:
a6:18:50:7c:be:89:4b:72:bb:b3:fc:8b:31:8f:72:cc:ef:0c:
e7:43:a6:e6:31:5f:e9:29:13:3a:ff:84:75:db:bd:13:94:f8:
cc:5b:72:01:21:35:df:1b:c5:b3:93:63:9b:b4:48:e9:e8:f9:
c9:f1:13:a6:d3:0b:4b:5b:9a:8d:1e:01:fc:81:2c:44:8f:fb:
09:bf:e7:5e:5b:57:20:b3:0a:85:1d:dc:b9:f4:40:67:e7:e3:
5f:25:62:52:27:f0:f7:0a:78:f4:19:38:11:c3:11:64:73:02:
90:d9:6d:4f:86:d7:8e:f7:e1:ae:6a:39:4c:3c:b2:16:29:bf:
4b:d8:5d:34:8e:66:94:32:6b:39:4a:6d:87:70:03:93:06:05:
0a:b7:ae:fc:bf:89:2b:8e:cd:a7:e3:ac:3d:fa:fb:03:42:33:
34:96:77:da:91:41:a6:21:dc:5a:b7:cd:19:36:e9:93:ad:aa:
d2:38:46:74:27:d9:fc:f3:0e:f1:bd:d1:59:26:a3:27:ec:06:
54:d1:24:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:10:33 2025 by rpki-client