Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
File: suRItKCPDkxYooPYBzWoqAPhDU4.mft (raw, json)
Hash identifier: Kaw9hxl93JCizAJhE5O889y8vjQXEtExB6LvQLn06AM=
Subject key identifier: D4:32:F7:FE:B5:12:96:85:C0:C1:37:5F:BB:83:4C:29:42:B0:6C:E6
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 019A4DE1C0EBBDF8F362E568F505CBDB5BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 08:00:31 +0000
Manifest this update: Tue 04 Nov 2025 08:00:31 +0000
Manifest next update: Wed 05 Nov 2025 08:00:31 +0000
Files and hashes: 1: 0JGiKje1faw9lacGbk5NhV2XAbU.roa (hash: Z5RBvg80RTlugYiMNKYpsKysKI83C+571C6SNSSEK3o=)
2: 2DxKgawRIdwPHYKPKO80oLEjXnQ.roa (hash: GkiqXgjmsGCVt8nP5qXPMp6hqSSrH1HiN32NDxCXRyM=)
3: CzOVrXq8s2rQFDCGaFJZ_xM7OZ0.roa (hash: 5XAPorQnylekwHM79ynLgJVh80voKy6A8YYVF6d1gL0=)
4: DpKy84xGq4bZRMW3bg3Qqscpy-g.roa (hash: Pghneqh0rqfe/wIbx3lltKoFinQFr3Xds6By1KC5GTY=)
5: Zf4cfRQ8Yb3zaonMniOY9mHCgZU.roa (hash: 7qovkktB6alfndSsebLaLeESbLcFDoOHnNh2I5l6SkM=)
6: rJBUoTOBCbGpyq2LQ5qyqtlWDVk.roa (hash: OOOBfJlZtCKY/fNu/6lDyCNmP9uVM4ZIRjn3vJc9saw=)
7: suRItKCPDkxYooPYBzWoqAPhDU4.crl (hash: nWJUkHOXg5OFxBlwPrXCCVpF1ljFgKX+JvTEFeV7sDo=)
8: wz_TvTU1xF0eJ_9EwkVCuufFGFo.roa (hash: Vtdi4r4GuCz7NyZSMqwPceN5sJkZoRY3YKYSc4S4CjI=)
9: yDDPfOYkq9TvDo49z4rJ89YrUS8.roa (hash: h90+S4fhQ3iqdh42EvmGUJBw540N3+LmJjYWM7l7haw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c0:eb:bd:f8:f3:62:e5:68:f5:05:cb:db:5b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Nov 4 08:00:31 2025 GMT
Not After : Nov 5 08:00:31 2025 GMT
Subject: CN=d432f7feb5129685c0c1375fbb834c2942b06ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:4f:5e:a0:f3:0f:f3:e4:1c:ae:55:91:30:
f0:18:ad:69:f0:4f:5c:24:da:75:cf:22:96:38:9a:
e4:8c:5e:ad:20:5f:9b:2a:96:95:eb:a5:b9:ff:90:
54:a2:2a:0f:11:b9:5a:43:d3:08:82:8f:22:cb:8e:
f4:41:d3:40:fd:a0:43:8d:18:81:5f:5c:8b:11:db:
b6:18:ad:99:d7:74:f0:a9:b0:46:76:74:55:d9:94:
46:91:d8:14:7d:71:54:6d:d7:85:db:ef:13:30:ee:
6f:ed:7a:eb:bd:74:be:42:88:79:b9:5f:64:d4:87:
27:ba:f8:1d:1e:95:ba:74:ef:ed:cf:d4:d8:c4:93:
a1:e4:bc:96:c5:d8:0e:9d:12:97:26:a1:5a:fb:29:
60:60:19:b4:8f:ae:d5:52:c1:c7:32:bc:33:40:c1:
7c:36:ff:30:25:71:b5:f9:2a:20:41:a3:62:01:f1:
c5:4e:9c:1e:f2:ec:7a:cc:94:45:ee:e4:f1:7a:aa:
76:87:1e:30:34:34:62:b0:c1:3f:b1:6b:41:14:ae:
50:99:33:b2:f6:ee:1b:08:42:90:e4:48:55:b5:99:
ff:37:96:61:f5:11:6c:cf:27:a0:56:e4:60:22:b6:
5b:fe:67:bd:90:68:a3:3f:33:48:c6:e7:6e:57:f5:
9b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:32:F7:FE:B5:12:96:85:C0:C1:37:5F:BB:83:4C:29:42:B0:6C:E6
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7b:7c:07:c7:0c:49:d6:b3:59:0f:ec:e6:8b:e6:b6:8e:a2:
47:24:37:20:9a:04:b8:36:03:31:f9:a0:3e:3b:59:b6:63:57:
a0:ad:47:14:c0:b7:92:57:a5:62:01:53:1b:51:7d:09:53:85:
fb:2d:1b:54:03:02:1f:80:89:10:9e:95:73:83:9f:b3:88:b7:
d1:30:70:1e:04:2e:8d:f6:8b:e7:12:ce:fb:40:a9:5f:b8:cb:
1a:9f:18:5e:3b:bd:c2:63:c5:42:d8:a1:b4:83:11:6f:b4:43:
48:d4:c5:8d:25:3e:99:70:95:d7:d3:a4:11:3a:17:08:3e:18:
91:f2:39:ca:15:6f:46:fe:aa:49:8e:e0:f8:1c:37:47:e5:9a:
b8:f8:19:a5:bb:1f:ee:0c:07:45:3f:3b:25:2c:b0:b0:11:19:
93:55:f0:c1:9a:3d:38:73:71:a9:11:63:bf:53:17:35:56:8c:
a8:3d:34:4c:d5:4a:25:90:b7:52:a2:9d:4c:06:56:15:41:c4:
ae:9b:9a:5c:10:04:58:70:0c:0a:63:43:16:20:d8:3d:49:5c:
59:81:28:ba:f7:07:92:8b:fc:e3:b0:b7:bc:43:aa:a1:c9:d3:
bb:67:7d:70:fd:86:fa:63:ae:69:d3:2b:2e:33:21:f8:88:c4:
8e:bd:74:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:52 2025 by rpki-client