Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
File: sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft (raw, json)
Hash identifier: mQlNiL70zI6Y0GZatjZDqjc7FKv+TuLTy5Cj/aGgx7A=
Subject key identifier: 63:82:A2:3E:62:E0:8D:6A:35:2F:B1:71:40:5F:4E:8F:E0:C4:9D:C9
Authority key identifier: B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
Certificate issuer: /CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Certificate serial: 019A4F998CFE5B0A956F47F705497F8A1850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 16:00:54 +0000
Manifest this update: Tue 04 Nov 2025 16:00:54 +0000
Manifest next update: Wed 05 Nov 2025 16:00:54 +0000
Files and hashes: 1: 00GJlkuxjT-xB1LSuZloHmKQPmA.roa (hash: 9a/Biy4j/OZlZRXYUZR8+r88dbkZ+LAsW+76+eBVauw=)
2: mcZ_wFiKJ5ceIsgC2BUu4MFFKQo.roa (hash: T2KHfDIrrN3cj+Vf6WCXsB4RoiQ2FgY7quTVSGHtuCI=)
3: sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl (hash: L04rcDjacjwEkQMR1iiMz5KlYm2anPRE2Fvms81JRoo=)
4: wgdhruz0xtRxWdWf--i6dPU1wQE.roa (hash: WcvpeOu2J24CdapCRKlSln4v+gu+O2IeoZu5OdQe1GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:8c:fe:5b:0a:95:6f:47:f7:05:49:7f:8a:18:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Validity
Not Before: Nov 4 16:00:54 2025 GMT
Not After : Nov 5 16:00:54 2025 GMT
Subject: CN=6382a23e62e08d6a352fb171405f4e8fe0c49dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:f2:38:65:a0:75:2e:47:76:3a:f1:9c:0f:
44:44:28:a6:7b:cd:6b:62:fb:97:42:32:cd:f4:2c:
27:fc:20:5a:c3:b8:e7:57:53:4f:01:7e:02:cc:43:
ed:95:83:ad:29:fd:ae:b8:28:2d:34:49:c7:7d:18:
3d:a1:a6:fe:43:2a:d0:dc:cb:0d:1e:aa:94:d6:41:
f8:f1:b8:0b:0c:02:ec:7f:5b:20:68:c4:c9:d4:f2:
25:59:c3:1a:5b:c7:e2:19:2d:8b:0e:20:5e:ff:79:
72:9b:e1:87:f3:74:f5:59:fc:18:07:9b:f7:1d:cd:
8d:15:8c:54:f6:b4:88:f8:03:d5:c1:11:05:09:4b:
e5:64:7e:38:ca:f8:c3:be:b1:e6:e2:52:a4:e9:d2:
5f:bc:e8:8f:6e:f0:fd:18:b8:f3:0e:d1:cb:d4:0b:
38:8c:70:36:09:89:1b:70:de:5d:fd:30:83:61:f0:
87:c8:7c:1d:2e:a9:64:00:fe:7e:b6:66:c5:26:dd:
40:bc:0b:5e:fd:23:d2:a4:94:39:38:e5:84:8f:55:
90:5a:60:0c:28:64:8b:bf:5d:97:24:c3:83:a2:c9:
15:f0:08:fc:59:0a:ea:2d:26:7e:31:f8:e4:bb:f0:
5d:66:55:0f:d8:52:68:18:9e:26:40:9f:b7:d8:1e:
ee:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:82:A2:3E:62:E0:8D:6A:35:2F:B1:71:40:5F:4E:8F:E0:C4:9D:C9
X509v3 Authority Key Identifier:
keyid:B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b4:05:d5:4e:f3:aa:76:93:81:82:a8:82:72:43:32:00:c0:
be:82:29:d8:5a:73:b9:bc:41:67:a0:79:55:d3:22:ef:76:56:
58:90:b3:6b:6d:c2:41:37:23:43:d4:ef:a0:61:e6:43:60:4a:
48:d7:fe:e2:dc:1e:72:7b:e6:7e:88:1c:05:f4:76:fc:9f:61:
f3:73:39:d3:dc:50:96:e4:f8:ae:e2:99:fb:22:53:37:0b:f4:
8b:27:38:2a:c6:3f:ac:a3:46:8f:6e:46:d5:28:49:74:f1:4f:
15:30:7c:4e:fe:2d:a6:c3:55:c4:e2:45:04:c3:4a:b7:58:e9:
59:fa:63:02:9b:a4:c5:81:2b:96:f7:18:8d:14:76:4c:5d:59:
50:97:01:e7:af:fe:34:b5:39:a7:73:12:8a:01:0e:2c:78:5b:
3f:50:10:1d:0e:71:7f:16:70:36:a0:59:4b:da:e5:69:19:01:
b0:43:c2:5c:f4:3e:72:74:27:f5:bc:9d:f5:51:af:9e:16:bd:
db:c9:43:32:c6:48:69:b4:d8:8a:2b:12:23:a0:09:8e:30:af:
b5:e3:a9:09:51:d2:4a:e9:27:69:d2:ac:dd:a1:76:d6:67:73:
e2:79:07:ee:45:ee:8b:39:75:a1:b7:ff:84:87:3a:80:9a:85:
4e:44:e6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:31 2025 by rpki-client