Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
File: r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json)
Hash identifier: vXJVEWvE/ONUsY6W2RTkAhniBuxAfHS+KNe7EBjimXM=
Subject key identifier: 8C:A3:DA:9C:77:7A:5D:03:B0:59:FC:3C:EF:03:23:3D:9C:20:8A:D2
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial: 019A4D73F47BF2DBC5ABCFF23B415C71142A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:35 +0000
Manifest this update: Tue 04 Nov 2025 06:00:35 +0000
Manifest next update: Wed 05 Nov 2025 06:00:35 +0000
Files and hashes: 1: WRw_zQ2egi-s7g_XDa3-zCzmCZo.roa (hash: 02LV3UJv16rTHuq6tHPlIKsn2U/3pYjP8DRzavT1ujg=)
2: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: Q9l1QVn1rUCI7Gkbz9jji3ynxYElel0yAC++VlvfohU=)
3: tMXBcGUIKGTfYRMTtfG6biesR-c.roa (hash: JWcwNHGeY4nL5R6D6KA+SUTM4UCaSarGczrFPqLJ+XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:f4:7b:f2:db:c5:ab:cf:f2:3b:41:5c:71:14:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Validity
Not Before: Nov 4 06:00:35 2025 GMT
Not After : Nov 5 06:00:35 2025 GMT
Subject: CN=8ca3da9c777a5d03b059fc3cef03233d9c208ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:69:20:d7:df:ce:bf:06:f0:7b:64:c6:81:
81:13:59:1a:1e:d5:d5:a0:40:93:41:ac:9e:9f:da:
5a:ca:dd:e6:a3:93:61:fc:06:c9:df:41:39:7f:80:
58:b0:f3:cd:cf:9f:02:6f:48:61:f0:55:5b:15:3d:
63:f0:73:f2:28:dc:2b:a5:85:f3:57:8b:80:6f:03:
41:e1:ef:29:ff:6c:a2:25:7c:f0:30:5a:f4:22:fd:
27:c0:39:26:69:79:7c:00:52:79:70:38:81:fc:45:
98:26:17:13:3b:91:ad:c0:dd:e8:a2:7b:5b:10:58:
08:e7:f9:3d:65:f1:4a:e2:73:3b:30:12:00:a6:b2:
7e:24:b0:25:3a:7f:be:3e:af:be:1c:a5:54:52:92:
c4:6b:ec:d1:9d:ae:4c:df:89:e1:f9:fc:7f:03:f0:
84:c3:2a:74:13:30:b1:8d:1a:fb:d8:59:41:82:35:
ad:0c:51:f7:33:e1:d7:9e:30:ea:0a:41:d5:04:c6:
12:ec:b6:9e:24:7a:27:35:73:4b:e6:96:cc:a7:f9:
1b:58:c6:b7:5a:0e:01:b7:30:b8:47:6e:a5:95:09:
e7:e0:cf:53:01:8a:7c:df:8d:06:52:90:96:68:59:
22:46:df:c2:b2:68:91:96:68:5e:e7:69:aa:53:94:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A3:DA:9C:77:7A:5D:03:B0:59:FC:3C:EF:03:23:3D:9C:20:8A:D2
X509v3 Authority Key Identifier:
keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:c4:82:21:e5:25:65:68:41:29:2c:a9:83:8a:82:c5:c7:b4:
a2:ae:b5:dd:73:aa:39:fd:31:27:95:00:94:8b:fe:ae:b4:6d:
90:97:72:0b:b4:1b:04:c8:2a:83:a8:4c:a1:75:20:0c:bf:85:
4e:62:9c:5f:1b:ea:54:53:24:95:e2:e8:5e:14:e4:3b:40:c3:
33:cd:2b:53:20:28:7d:88:34:b2:c4:ce:14:0d:4d:93:99:28:
45:87:4e:14:b5:3c:97:1f:d7:c9:66:34:92:d9:4e:26:1f:38:
7b:bb:e7:d8:0f:61:97:1c:99:d9:b1:30:72:68:6d:20:a8:77:
c8:19:74:1b:9a:df:7d:1d:c3:b9:73:3a:3c:18:9c:30:26:8b:
9a:c0:c0:cf:2a:cf:3e:b4:45:2f:0d:f4:41:1b:43:1e:4a:ae:
0d:26:55:db:0f:0e:f6:4f:9e:12:88:cd:f6:e7:fc:dc:0b:00:
68:11:a2:16:fe:65:e5:4e:0b:b4:27:9c:01:0d:a0:35:a1:74:
26:d1:d1:14:d2:04:2c:68:bf:0d:f9:1e:c5:0b:de:2f:27:9e:
47:63:83:1f:be:7c:c5:08:2c:bf:d5:f3:96:40:9a:5f:29:bf:
35:ae:31:67:33:ae:5a:ce:04:1e:5b:77:17:7e:ce:6b:66:8a:
31:d4:9a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:00 2025 by rpki-client