Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
File: S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft (raw, json)
Hash identifier: lROb6r2SK0YWD49UEG3mgvXMLH0WmDapWpfzmLE2MSE=
Subject key identifier: 43:70:63:8B:16:83:F1:AE:C3:EB:42:E4:65:0D:93:F2:7B:92:A1:61
Authority key identifier: 4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F
Certificate issuer: /CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f
Certificate serial: 019A4E86535FFE27CE88800A7F4F83613CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
Manifest number: 13A7
Signing time: Tue 04 Nov 2025 11:00:17 +0000
Manifest this update: Tue 04 Nov 2025 11:00:17 +0000
Manifest next update: Wed 05 Nov 2025 11:00:17 +0000
Files and hashes: 1: 1D0kryG-hg5X4kNtLF0_L_6fbtc.roa (hash: Zop4UA3qvwcLs+PgF6ZAbdQWhdOq1xNbvhqjWudAWN0=)
2: S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl (hash: IAmhgDr83BhW4zwlzAdGRjXyQeB4v+6AeyEszTolv8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:53:5f:fe:27:ce:88:80:0a:7f:4f:83:61:3c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f
Validity
Not Before: Nov 4 11:00:17 2025 GMT
Not After : Nov 5 11:00:17 2025 GMT
Subject: CN=4370638b1683f1aec3eb42e4650d93f27b92a161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:ab:6a:c3:b4:d5:5c:e2:06:17:96:ac:6b:
13:89:78:f9:ac:86:26:32:38:ca:d4:52:a3:30:8a:
db:d4:00:8c:ff:70:35:74:83:b0:3b:8e:f3:6d:99:
cd:24:46:6b:34:e3:c8:c3:38:b3:16:8d:10:c1:0d:
85:0a:67:f7:78:c7:c9:18:0c:9d:eb:e5:f1:1c:2d:
d3:86:11:c4:c0:9d:0c:e9:ff:d3:2a:72:97:41:1b:
e9:99:e6:12:70:0e:6c:88:b0:cd:d1:f5:77:0d:be:
9f:f4:92:46:0b:18:0a:cd:7d:09:b9:21:f2:bb:9d:
bb:40:12:a2:82:f7:35:fd:98:0b:dd:fc:4f:1e:45:
f6:3b:fa:4a:86:c9:e6:d5:e3:5c:1d:ad:06:81:05:
ac:9a:6f:49:f7:a9:f0:94:a9:d6:a1:59:f6:be:3d:
43:5e:95:d5:4b:70:b0:2e:83:4a:52:a4:2c:91:ce:
7c:52:70:7c:d7:dc:d6:02:f1:43:e1:03:f4:38:02:
a3:cd:70:18:cc:56:45:88:f9:57:a6:61:1e:4a:03:
bc:2f:50:0b:9c:d8:86:ee:fa:bc:a6:69:5d:09:23:
21:05:3e:77:1a:c9:0c:47:1b:83:5a:94:1f:dd:11:
25:5d:7d:c8:9f:bf:d7:c4:c1:a9:ea:e1:d7:40:4a:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:70:63:8B:16:83:F1:AE:C3:EB:42:E4:65:0D:93:F2:7B:92:A1:61
X509v3 Authority Key Identifier:
keyid:4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9e:60:dd:e9:6a:da:71:a7:27:42:1b:b7:0f:fe:63:0c:8a:
5c:b1:62:a9:f0:77:ab:b9:65:82:f9:e1:55:73:a8:88:8b:a5:
ec:53:df:98:52:90:73:0f:29:6f:78:63:3d:a7:64:c0:35:a7:
79:34:fd:e5:cd:df:c6:8d:4f:a5:c4:0c:93:30:fb:18:9e:8d:
6e:5b:2d:e9:22:a0:73:bb:66:05:81:8a:e5:60:a9:67:1d:62:
d7:38:db:b8:9a:fd:f2:bf:d0:d7:43:75:74:fd:d7:72:5d:0c:
de:a4:19:36:cc:86:16:c1:12:43:ed:71:b5:88:83:98:17:5c:
a1:a7:81:14:a9:b2:f8:b3:03:7d:2f:52:45:b5:d1:93:98:ef:
58:db:b4:da:1d:d9:42:47:cb:7e:80:22:8e:8b:a7:80:0b:b6:
8d:8e:7b:da:61:f4:27:e1:be:4b:34:96:e8:66:f1:45:96:a7:
73:39:11:f3:e7:b0:79:ad:69:f2:1e:0e:ea:9e:bd:0a:dd:4c:
6a:88:9b:36:89:71:bd:47:e9:2e:cb:27:37:c0:a4:8f:24:22:
e0:e6:e0:5f:bb:e0:cc:d3:83:53:5f:a5:9d:f0:84:bb:2c:6f:
f4:98:67:f2:c2:5d:88:a0:f6:6a:af:87:cd:4c:ef:5d:8a:6d:
3a:1b:d1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:10 2025 by rpki-client