Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
File: sWmklwDgw7jjmnkTDJh6UADM_-I.mft (raw, json)
Hash identifier: 7yGB0iQJcuHiPblabqWGdGNO2eK0aQzvxHRBq4jpySA=
Subject key identifier: 6E:FD:32:97:73:58:6B:30:60:48:5D:DB:6E:67:D5:5B:D6:47:61:0F
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial: 019A4E4F862D49724284C39080278119C34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
Manifest number: 1295
Signing time: Tue 04 Nov 2025 10:00:25 +0000
Manifest this update: Tue 04 Nov 2025 10:00:25 +0000
Manifest next update: Wed 05 Nov 2025 10:00:25 +0000
Files and hashes: 1: 1-ThtHy19ctjaQuYuBhqSQqIE9WU.roa (hash: V9qRoZ+PC8g7OlSlh2fBbc43/EN/zOPrb+QtN2UkltA=)
2: 30Dio0Gszjx6FTAe-4VlPrqwyTc.roa (hash: psw6/BxDCb7H27J6+J3WPOwk2OKgWYIKlnVQ23OKdwQ=)
3: sWmklwDgw7jjmnkTDJh6UADM_-I.crl (hash: 9KqAVrIwNQX5lRGMMIBYgNllVsLLY2URNweoHON/6lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:86:2d:49:72:42:84:c3:90:80:27:81:19:c3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Validity
Not Before: Nov 4 10:00:25 2025 GMT
Not After : Nov 5 10:00:25 2025 GMT
Subject: CN=6efd329773586b3060485ddb6e67d55bd647610f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:c9:35:76:14:52:1e:64:7c:41:97:c3:1c:
c8:8f:5b:6c:3b:d0:cf:d8:61:75:6b:2c:38:87:68:
f9:56:3e:eb:13:36:89:d2:8d:63:5b:dd:fd:c2:27:
7f:cf:dd:86:b1:e9:ae:69:92:09:31:d1:6b:a5:6c:
f5:23:de:3f:c2:96:fb:7c:93:9f:8c:2f:99:be:4c:
29:02:20:be:90:9b:22:95:e6:4c:85:95:17:32:ae:
8d:2c:de:1a:3d:78:0c:1c:45:75:35:e7:61:42:8b:
c1:db:62:01:7f:d8:7d:fc:f5:17:1f:a6:34:ce:7e:
49:17:fc:0e:5b:40:4a:93:63:4e:75:fa:1d:52:1c:
2f:f4:62:79:7d:e1:f4:0b:91:17:3e:84:51:ba:49:
50:87:62:f2:32:9c:a6:ab:fc:34:a2:3f:af:0f:ab:
47:15:db:53:33:8b:3c:45:61:60:fa:40:52:a8:39:
30:fa:ad:0d:b0:2a:fa:16:5b:21:3d:d9:67:2c:cf:
15:dd:df:33:31:9a:d9:f8:20:85:cc:dc:3e:5c:dc:
ed:5e:b2:03:48:40:0a:13:28:25:66:22:93:49:a6:
dc:a0:74:d6:10:74:4a:0a:a0:1a:b4:86:c3:cc:89:
c7:16:31:f9:33:3e:84:c6:44:75:00:86:d8:89:a8:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FD:32:97:73:58:6B:30:60:48:5D:DB:6E:67:D5:5B:D6:47:61:0F
X509v3 Authority Key Identifier:
keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d5:85:a7:8d:77:5f:dc:7c:d5:9e:c1:98:b3:f2:8f:48:92:
ff:b6:03:b5:5f:49:0c:2a:68:3f:5c:a3:15:ab:4e:8d:73:ca:
36:d9:6e:fd:51:ad:b8:4d:c0:ed:20:e9:d7:59:53:2e:4d:d3:
2a:6d:74:ea:8b:8b:cf:7d:50:4d:0b:c6:d0:4d:97:e3:c9:5c:
e8:db:36:66:53:87:85:4d:2c:7d:1d:5f:e4:30:11:51:86:38:
d8:91:e4:52:da:ca:f1:04:96:69:2e:2f:fc:51:1a:eb:0b:b8:
72:52:6b:c0:b4:35:f7:9c:5d:4c:28:d3:a9:b9:e6:6c:e3:41:
67:f4:b3:a0:72:d8:b4:67:f1:00:a1:36:1e:cc:2d:a3:11:a6:
eb:9f:c1:19:2e:a5:5c:e7:a8:3c:09:19:a0:ba:8d:16:fa:cd:
fa:8b:34:82:ac:f3:58:bb:d1:e1:18:c1:4c:3d:94:3e:24:49:
04:85:57:fa:ea:d0:8c:95:ec:bc:01:bd:21:c3:5c:e0:48:82:
c7:3f:3b:96:12:cd:dc:0c:8a:6b:76:a3:f6:53:ee:5d:4f:f6:
9f:6a:ed:e1:90:e2:68:45:03:25:91:47:26:4f:41:e3:ca:2c:
a9:c3:b7:27:33:c3:37:2b:a7:46:34:79:4d:07:1d:ee:db:21:
8f:16:6e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:53 2025 by rpki-client