Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: V1w0Nyqf5Olym8LUBkLCirXTzaTiR2tbaYiGMca+J+Y=
Subject key identifier: 8C:20:B0:60:20:27:9A:B4:F4:4E:4C:F9:ED:F4:9E:CA:84:95:1A:C4
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 019A4DAAAD7B9075E070C53D01D991381179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 07:00:22 +0000
Manifest this update: Tue 04 Nov 2025 07:00:22 +0000
Manifest next update: Wed 05 Nov 2025 07:00:22 +0000
Files and hashes: 1: CGIluw5b3rFNq3TYcrDu-mJjjcY.roa (hash: 7XYO0sh+h2BXkgYXdxURNA8WGt1oRVxjTX46cE0gy/o=)
2: RLQ2xMmRZoZiAtZFS_YRcySPvAc.roa (hash: P8RbzLYf4UK0GuClJazmarq7imv/ewysF1Ivpx0otS4=)
3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: V9dQ63LofNY5XnM1adICS7hxHoUqc1O9EnH4MfQcwbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:ad:7b:90:75:e0:70:c5:3d:01:d9:91:38:11:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Nov 4 07:00:22 2025 GMT
Not After : Nov 5 07:00:22 2025 GMT
Subject: CN=8c20b06020279ab4f44e4cf9edf49eca84951ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:21:ab:37:49:48:2e:0b:3b:19:fd:24:5a:
7a:2c:f0:41:10:72:e4:44:f9:dc:6f:40:0f:55:18:
4e:63:0b:06:8d:29:1b:b0:7b:8e:97:2f:92:2d:81:
bc:88:67:de:f9:eb:ed:98:4f:e8:4a:85:74:ac:de:
2f:7f:79:6f:3f:83:6f:84:3f:23:e3:a2:2f:83:72:
7c:f3:22:9d:d3:ed:a2:e1:7e:e5:0a:4c:e8:18:22:
e9:f3:db:e2:d2:01:13:8f:bf:b4:f1:80:6a:88:fb:
0c:2c:98:22:a7:94:65:2f:1e:ec:78:d6:d4:59:b1:
89:e1:4d:9d:8d:c0:32:44:4a:41:2a:45:5e:90:e2:
12:f3:25:51:76:2e:3a:a8:a0:ac:f7:75:6e:e9:99:
f3:a9:39:d7:2a:5b:25:19:91:a9:80:67:1c:16:7a:
64:d6:dd:e1:d1:ec:80:e6:e9:76:3e:7d:25:62:00:
0a:ac:0e:98:7a:85:04:48:33:e4:f6:1f:0e:54:d9:
ea:fb:e3:4a:4b:00:23:4e:3d:20:04:87:c7:05:10:
52:e7:76:c6:03:51:f1:45:60:9b:cd:47:ba:90:f5:
ad:5b:4c:fc:64:65:07:9b:5c:dd:db:e0:fa:46:fb:
89:47:77:93:e6:de:59:8a:07:76:81:bd:c2:63:b9:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:20:B0:60:20:27:9A:B4:F4:4E:4C:F9:ED:F4:9E:CA:84:95:1A:C4
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:60:1d:1e:62:0b:f3:56:8c:c3:7b:e9:91:1e:35:19:fe:19:
41:e3:fb:e8:06:1d:a2:2b:18:65:14:d9:3e:f1:39:94:c1:74:
dc:9d:1f:e4:59:00:2a:71:95:62:3f:d4:f0:c9:d4:5e:01:a9:
1c:01:34:7f:3b:a3:7f:f6:ea:9f:65:de:69:59:4e:32:2f:96:
3e:30:98:67:f2:78:65:20:07:98:bd:60:ba:33:d0:6e:57:2f:
c8:3e:f5:d2:8f:42:36:b4:7a:bb:aa:83:06:e0:51:de:a8:3d:
44:9d:8b:97:8a:ca:f2:9d:90:12:bd:96:63:6b:80:80:90:6e:
a3:62:d9:ad:ad:a1:da:5a:94:08:81:e2:26:d2:d1:c9:7b:43:
9e:f3:41:74:27:03:6f:85:89:a3:85:35:89:ce:f4:33:bc:19:
24:fb:fb:57:b1:fc:ba:1a:32:9b:7f:8b:b5:20:77:79:d6:a6:
20:6d:b9:ad:3e:10:66:48:3b:98:a1:a1:fa:10:ed:38:01:07:
3f:46:4a:a4:ac:26:67:fc:65:ea:cf:0a:40:a7:32:4d:3c:24:
1c:35:98:13:0e:94:3a:3f:3a:aa:9e:b6:5c:a3:1e:81:ea:1c:
ce:80:6d:ea:3b:a0:4e:56:67:24:44:e8:3f:e1:42:c2:5c:f8:
82:44:20:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:38 2025 by rpki-client