Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
File: sL0oE0WvbNVBVNTP908ZWjiP_8E.mft (raw, json)
Hash identifier: yIfQrHxLMZEdcxDoXAyy7La7DM3hEYpjx6j0sUNr+7g=
Subject key identifier: B9:BC:7A:ED:B6:34:8E:19:4F:87:42:52:CE:7D:A2:F8:CF:1C:49:59
Authority key identifier: B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
Certificate issuer: /CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Certificate serial: 019A4DAA857BFFEDFD07449908E21163178E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 07:00:12 +0000
Manifest this update: Tue 04 Nov 2025 07:00:12 +0000
Manifest next update: Wed 05 Nov 2025 07:00:12 +0000
Files and hashes: 1: WQbKsA3j9plFxqexMQZCCTZtrbU.roa (hash: NWTJ5dr27/rFdV1pDzF/Ey/hAby6fAYx1MwHmB4Vn1s=)
2: sL0oE0WvbNVBVNTP908ZWjiP_8E.crl (hash: odS3LMtyBZ76nxvECr8TC/7QQPAF6adWfQqjS6cmRWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:85:7b:ff:ed:fd:07:44:99:08:e2:11:63:17:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Validity
Not Before: Nov 4 07:00:12 2025 GMT
Not After : Nov 5 07:00:12 2025 GMT
Subject: CN=b9bc7aedb6348e194f874252ce7da2f8cf1c4959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:80:e1:69:ef:0e:32:c6:ce:52:74:b8:1c:
d2:1b:ad:63:28:e7:b4:e1:bb:67:2a:1c:ac:8a:55:
d1:4a:2f:a7:6e:77:f8:a0:94:5e:19:ca:7f:b8:d2:
43:51:5f:44:ee:81:05:9e:8b:59:d7:e0:08:42:2c:
95:74:d1:e1:8b:6b:7f:29:26:30:38:77:0f:c2:8e:
f1:29:8b:3f:20:f5:21:4f:d0:22:16:3f:d1:a6:0a:
33:9f:c8:c9:bf:28:d6:e7:15:11:4d:5a:05:83:bb:
a9:97:06:1f:8a:fb:7e:30:b3:d1:9e:c2:1a:ff:b0:
bb:d1:f2:07:40:97:8b:50:a1:c0:32:2e:d6:c1:7c:
72:a2:13:c6:21:37:79:89:02:84:b7:bf:08:60:9a:
24:63:d8:e2:c9:1c:db:45:8a:c0:a0:f2:69:25:28:
fc:38:48:ae:69:bb:f3:fb:5c:78:e7:0e:d7:c2:60:
7c:03:5c:f2:de:57:7a:97:59:9c:be:3c:08:e0:54:
80:10:ff:ce:df:77:93:a0:59:a5:f9:19:a7:8f:3f:
54:bb:23:92:a8:70:63:8e:9a:44:ec:bb:93:4e:8a:
6e:73:30:05:3c:30:bb:30:38:fa:b2:16:4b:d5:63:
01:98:c8:23:2e:a9:14:84:59:74:a8:53:23:23:e3:
2b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BC:7A:ED:B6:34:8E:19:4F:87:42:52:CE:7D:A2:F8:CF:1C:49:59
X509v3 Authority Key Identifier:
keyid:B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:42:28:cc:a7:62:03:0f:8a:1d:81:74:d9:9a:81:bb:55:57:
81:f5:11:16:12:3b:a0:16:4c:1c:3d:73:5d:b4:14:63:99:aa:
4b:72:58:10:2c:45:55:d5:99:16:8d:ff:3d:4c:50:a7:f9:31:
06:ac:34:92:9e:25:9c:26:5f:cb:a8:3f:c5:92:be:2c:11:6e:
b0:14:b1:e3:dc:7b:6a:b7:2c:6e:74:d4:39:af:f4:0d:aa:75:
2c:05:5f:b2:07:9a:f9:da:2c:2e:3f:68:5c:db:0e:95:75:b9:
c5:47:e4:f8:76:e3:6f:64:e4:b5:05:f6:68:3e:0b:0f:de:41:
85:0a:78:ba:df:c5:b1:dd:53:02:7e:3b:bb:44:de:b4:74:4f:
86:1a:d3:95:89:06:5a:eb:4c:90:66:22:22:ea:21:0b:a1:83:
94:bd:2b:33:bf:73:ef:cb:99:37:c2:f9:3c:74:55:f1:9e:0c:
be:32:76:80:84:12:04:ff:ff:4a:8b:6b:06:18:10:7a:df:5b:
b6:e4:3b:d7:f7:7f:bb:3c:0d:88:76:01:09:6f:33:0a:95:83:
04:0e:bf:a6:b7:19:6e:ff:b0:14:07:ab:95:e3:fd:79:5c:2a:
c9:c5:04:1d:e6:3f:04:81:88:f4:88:4e:d7:77:63:74:ec:8d:
a2:12:c5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:04 2025 by rpki-client