Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
File: sda67LY65G_uowyrhiHUbFn3KAg.mft (raw, json)
Hash identifier: VSwAmyXCXQtQOPUqInLMCc9C2XW2+grp07BM2CTPlko=
Subject key identifier: 26:86:74:B7:AD:B5:AC:87:BB:AD:A5:37:C6:31:17:3C:A9:51:E2:1B
Authority key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
Certificate issuer: /CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Certificate serial: 019A5074A102FE129CD6DEDDB370DAC0595D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
Manifest number: 145F
Signing time: Tue 04 Nov 2025 20:00:11 +0000
Manifest this update: Tue 04 Nov 2025 20:00:11 +0000
Manifest next update: Wed 05 Nov 2025 20:00:11 +0000
Files and hashes: 1: LM0g69HtGp_batQfV5x1NEUMmOk.roa (hash: 7VtBpd+wuDX24L0fq4Y7fsMl9oygXrzXXYzNLlqhtLg=)
2: sda67LY65G_uowyrhiHUbFn3KAg.crl (hash: 66JNucu+NPJC77084EZATWqKyob9w0q2M6ovA42BO9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:a1:02:fe:12:9c:d6:de:dd:b3:70:da:c0:59:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Validity
Not Before: Nov 4 20:00:11 2025 GMT
Not After : Nov 5 20:00:11 2025 GMT
Subject: CN=268674b7adb5ac87bbada537c631173ca951e21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b3:d7:af:37:01:ed:e2:0d:13:6f:1e:a3:0c:
3d:d5:23:bb:de:1d:3f:08:21:d2:47:4a:fb:89:78:
63:2a:0c:85:a2:3c:52:29:63:e0:c3:d1:69:20:2f:
6c:74:86:d6:83:59:6a:3a:d7:18:d0:4b:ae:43:97:
0d:38:16:b4:a3:71:0b:cb:5d:f1:ae:66:38:53:6d:
4a:a6:79:ac:2e:76:58:82:d0:c2:cd:31:1b:68:01:
9d:7e:2a:72:1e:85:ca:20:52:a3:80:54:c3:19:b2:
52:59:c4:6b:0b:6c:a0:5e:e6:60:86:77:cb:ca:dc:
9b:f1:e8:d9:0a:1e:ef:1e:83:e3:b7:5a:de:d1:d3:
d6:d5:c0:d6:f4:1f:93:30:37:c3:3c:07:d6:55:99:
cf:f4:dc:26:b6:0d:71:30:3f:c3:2f:b5:a4:95:89:
c7:c8:14:6a:ed:17:23:12:14:e5:87:22:9b:27:f2:
9c:e9:49:80:8a:a3:64:ab:07:16:aa:df:03:b3:f9:
89:ab:2f:d6:9d:fd:5b:d5:ae:32:40:b6:f0:37:42:
d4:63:97:25:d6:c6:ab:e6:c4:1e:be:d0:d1:e6:fd:
d4:f6:37:8a:f7:31:f3:73:2c:b0:41:45:f9:9e:85:
7d:87:36:8c:61:5e:15:ae:7d:bf:69:80:7e:69:73:
a7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:86:74:B7:AD:B5:AC:87:BB:AD:A5:37:C6:31:17:3C:A9:51:E2:1B
X509v3 Authority Key Identifier:
keyid:B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c1:e6:a2:97:09:e6:ea:52:cd:89:32:b2:2f:68:25:73:d5:
6d:7c:79:f6:4c:52:b1:61:c7:2c:57:44:b2:22:11:5d:e4:28:
df:25:c6:20:cc:df:0c:19:d9:9a:3a:1c:a7:8e:32:47:d9:d4:
89:56:db:8f:ec:cb:07:ba:08:be:33:57:dd:c5:a6:0e:88:80:
7a:4f:34:2c:f2:2b:7d:f1:ef:76:60:5d:93:60:72:fe:04:3b:
7c:e9:6d:1e:51:65:49:3e:1e:2b:4e:e5:7b:8a:2f:9f:bd:b1:
e9:e6:d3:13:c3:e5:9b:d3:c6:ab:15:c5:85:33:99:f3:2f:95:
99:a8:f1:b3:48:f3:24:75:6e:d7:bd:85:73:e0:16:5d:aa:f7:
f5:b9:cf:78:b0:a8:b8:09:33:d6:24:a9:88:de:1d:61:ad:bc:
4d:54:fb:de:26:f9:f3:16:11:a0:1a:fc:b9:0a:21:34:85:eb:
2d:42:ce:dc:0d:f4:5f:49:c9:3c:bb:44:71:12:11:e0:74:18:
59:93:af:63:2c:06:45:8b:a1:70:b8:5e:db:0e:a0:50:20:c1:
0e:cc:b7:39:57:43:13:cd:d7:ce:cd:04:ca:36:b0:af:d2:e0:
60:57:58:3c:0c:43:06:14:0d:85:cd:ad:1f:11:7c:c7:0f:39:
c2:66:48:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:33:16 2025 by rpki-client