Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
File: svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json)
Hash identifier: Fen7ptYPShWPTHgPoMLmrcYoJ2Jc/s6wSgFm2RRrm9w=
Subject key identifier: 0E:8E:0C:86:A1:FA:38:8B:80:0E:2A:24:69:1A:50:79:71:F5:6F:FA
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial: 019A4DAAE6120627C013E69B7401AD420778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
Manifest number: 109C
Signing time: Tue 04 Nov 2025 07:00:36 +0000
Manifest this update: Tue 04 Nov 2025 07:00:36 +0000
Manifest next update: Wed 05 Nov 2025 07:00:36 +0000
Files and hashes: 1: bkaEgwUfFQuvU4deHKYEq645oxo.roa (hash: a6t899hSFrNnCxDeJsEHX7KWBkAwoAJJxMP3KbPkcsM=)
2: gM8Vs4rZduYc-FMusqbqCtswvSM.roa (hash: PdGvc2+s2b+cxeznU9E/uPp7OuLxD8n8FSf7bdTA3Io=)
3: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: jKOpioc0AVudW3R/Py/kP6ih8FVVUYprhwuKwA3cV7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:e6:12:06:27:c0:13:e6:9b:74:01:ad:42:07:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Validity
Not Before: Nov 4 07:00:36 2025 GMT
Not After : Nov 5 07:00:36 2025 GMT
Subject: CN=0e8e0c86a1fa388b800e2a24691a507971f56ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:13:f4:c1:3b:d7:d8:4d:02:42:7a:48:45:
5f:cd:97:2f:7b:e8:8c:42:d0:92:8b:6e:73:2d:c5:
d6:6e:16:4d:82:db:74:e5:71:89:87:83:52:c0:e6:
d7:d9:9c:b9:30:c1:eb:b3:1b:53:97:79:a4:59:b4:
c9:bb:19:83:c3:c0:a2:98:11:8f:e2:79:40:37:16:
5a:ca:cc:e5:c4:02:3a:fa:3c:e2:c9:f4:a5:64:ec:
1d:b9:c0:c9:d9:90:d3:43:69:fc:d5:0e:24:43:ac:
e2:a2:41:47:b4:5b:be:bb:6f:d3:bf:73:be:61:6d:
6b:a0:0a:6c:82:4d:e3:a2:ff:10:98:a3:d5:c9:31:
dc:1c:a3:95:e4:68:5c:ea:0c:05:f2:ad:cd:12:b3:
e2:b2:d4:b7:19:4e:0e:fb:a0:d5:6f:0f:ad:04:b0:
c0:99:5a:1d:1e:94:83:bb:f7:23:04:5f:d6:1e:97:
21:98:3c:8d:c0:d1:2c:17:db:ff:81:ed:51:5d:c3:
fc:5b:64:65:7b:71:8e:49:99:eb:4a:dd:fd:d2:6b:
89:85:09:ea:b0:9c:1c:09:51:6b:d6:33:3c:f9:f4:
77:fc:ab:99:1f:ff:0b:ef:d4:45:c1:2b:db:83:de:
43:80:ed:c2:51:d2:52:1b:19:dc:43:54:e3:7e:ab:
1a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8E:0C:86:A1:FA:38:8B:80:0E:2A:24:69:1A:50:79:71:F5:6F:FA
X509v3 Authority Key Identifier:
keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b1:f3:97:05:21:9c:a2:41:c4:33:4e:02:2d:08:fc:b1:46:
5f:99:3f:67:2d:c6:59:e1:a3:83:27:93:7f:0c:b5:be:ce:f3:
e2:ba:1d:76:0f:33:12:58:6e:15:9f:dc:e7:52:44:7b:ec:a5:
89:d8:ee:18:da:8d:31:cb:53:b2:6c:9e:b5:52:ad:6f:f1:d2:
31:83:d7:47:8e:3f:78:f6:f9:2d:b8:07:e4:77:a7:54:fa:9c:
8b:aa:ea:de:4d:bf:0e:13:b2:8b:30:0d:8d:14:3f:ec:fb:58:
75:3e:79:79:5d:0f:3f:83:9a:f8:9d:ab:60:f2:56:0e:b5:d2:
a7:43:72:88:ac:d6:a3:5d:97:9d:bf:be:fa:ff:0d:9c:4c:11:
8b:90:69:5f:6b:07:3c:67:88:51:75:52:d3:fd:84:51:86:07:
60:ff:0f:83:af:c6:81:91:01:7d:39:e5:34:02:ec:b2:a4:87:
d9:6d:cb:af:7f:e4:e3:d7:32:8d:fe:34:af:8f:8b:81:17:f2:
87:e6:da:24:8e:d9:a7:87:f3:c7:c2:47:75:64:ea:7c:76:7f:
9c:2e:19:c0:4e:48:d8:8b:8c:41:6c:b7:c2:8e:61:da:92:cd:
63:43:b0:c8:36:8e:8e:55:0e:97:50:11:64:c3:f9:b7:c9:bf:
ea:b6:a5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:47 2025 by rpki-client