Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File: sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier: 0alJRAWSBL9NjhwwIKDneUgIHZ+mXRqivO6F24kT7O4=
Subject key identifier: 5D:9E:FC:03:8F:3D:2C:AE:15:F6:7F:FD:29:2B:AD:DE:BC:99:95:14
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer: /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial: 019A541A57DC2FCA889C70810EBD092A5653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 13:00:03 +0000
Manifest this update: Wed 05 Nov 2025 13:00:03 +0000
Manifest next update: Thu 06 Nov 2025 13:00:03 +0000
Files and hashes: 1: AUWnKCughTUHbSmmjTVn8vVnF6E.roa (hash: m1cgzZ28NmXLcFryBxDw9CaAhbB6KXsR5pNMz3ZSd1A=)
2: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: vNHXt691bWo4mcbM7GI5Sd+1QeZCaAL4wHGBVdd6O68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:57:dc:2f:ca:88:9c:70:81:0e:bd:09:2a:56:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Validity
Not Before: Nov 5 13:00:03 2025 GMT
Not After : Nov 6 13:00:03 2025 GMT
Subject: CN=5d9efc038f3d2cae15f67ffd292baddebc999514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:3f:b1:02:ff:5c:f9:56:2c:9f:d9:07:8d:
f3:a0:bc:d9:e1:68:ca:e2:bd:47:4e:0f:6b:1a:14:
dd:e7:86:2b:1e:da:47:e6:30:56:cb:69:66:3c:17:
3c:d9:50:e6:de:1f:0a:cb:f2:bd:c9:a9:a2:62:f2:
8b:bc:48:6a:90:69:b6:8b:01:90:42:ae:c6:d4:dc:
be:f4:5d:73:81:c9:40:5c:9f:dd:5e:92:dc:d0:b9:
fa:e5:2f:c6:27:9c:66:e3:20:13:a6:59:3a:66:19:
33:21:e0:6a:e2:b6:b4:c6:bc:2e:28:f1:f5:fc:ce:
91:be:16:6f:e4:e3:f0:29:65:32:6f:39:25:b3:cd:
30:4e:14:43:59:11:ef:24:92:9b:fa:3a:20:d0:6d:
d3:ad:d1:dc:ee:e0:fb:63:6f:9b:58:d9:6a:d6:81:
2f:53:bf:77:bb:70:59:2a:e2:1c:74:90:21:a5:52:
d3:44:b7:ac:ed:46:9c:b3:f3:7c:d7:fb:29:8a:7a:
3b:65:cd:a2:b2:5d:7a:13:27:8c:c9:de:85:47:04:
66:c6:5f:b6:6a:d5:06:f2:88:07:90:02:46:0f:9c:
a6:99:3f:6c:5e:1d:be:32:e7:70:1a:c6:2c:4e:6a:
72:6b:5b:4d:71:52:7b:55:3c:e8:cc:ec:bf:ee:21:
6a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9E:FC:03:8F:3D:2C:AE:15:F6:7F:FD:29:2B:AD:DE:BC:99:95:14
X509v3 Authority Key Identifier:
keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:cb:ad:75:7d:d1:a6:94:0f:be:4a:1a:c6:12:19:ff:56:26:
79:d5:36:8d:d2:71:af:4d:fc:01:98:23:ba:ce:a6:f3:27:55:
63:60:e0:3f:e8:0f:4c:56:04:4e:1d:21:2e:65:af:ca:9e:80:
11:93:75:d4:3f:ca:cb:c4:48:55:1c:64:4e:4b:67:52:44:8f:
7a:10:af:29:f7:e9:e2:ce:ad:fd:5b:da:98:26:65:79:09:69:
c7:d7:cb:2a:a6:cd:d6:8a:7a:35:63:b5:e9:fb:27:17:87:14:
16:e3:d4:3c:5d:53:cd:c9:af:1d:f1:4f:d9:2d:8d:ce:44:e8:
c9:59:a8:d7:8b:7b:4c:af:41:f4:f9:bc:6b:c3:58:e6:e6:db:
18:cf:cc:39:c1:27:c9:70:d5:ed:f2:6a:bc:76:bf:bf:24:01:
e6:eb:4b:0d:2a:e1:3b:82:85:72:84:8f:1c:f9:1a:9f:47:61:
67:69:db:3e:db:bd:31:e0:da:22:3d:f5:b4:a7:6d:ba:5c:e7:
df:c0:99:30:ed:bf:97:77:a7:a1:cf:fe:09:50:3e:a1:29:3b:
14:47:03:7d:95:e6:39:d6:7d:26:ff:93:46:67:97:58:73:0b:
26:5b:e4:3b:3e:e5:21:6a:fc:23:97:fa:e6:e7:a9:cf:74:43:
cf:5f:50:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:17:40 2025 by rpki-client