Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
File: S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft (raw, json)
Hash identifier: 0x8X5UXn+d7wpbCshjOEbk4oA+Ghe1RK9nulcOmG4TE=
Subject key identifier: BB:78:00:6B:34:F2:FE:C3:3E:85:E4:40:52:05:CC:80:9A:38:C1:09
Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Certificate issuer: /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Certificate serial: 019A4F62585085F6B89D4DD443BF796AC559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
Manifest number: 1719
Signing time: Tue 04 Nov 2025 15:00:36 +0000
Manifest this update: Tue 04 Nov 2025 15:00:36 +0000
Manifest next update: Wed 05 Nov 2025 15:00:36 +0000
Files and hashes: 1: IMyen03Z3kYW501dGBJKRvVCnYU.roa (hash: iucT9aE10m3DuQgfsaO8fZMDF0JO/83+1ytDh6dNspg=)
2: S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl (hash: QN2rY0jHfUbP+ly2BFByC4cPIzfy9RjGeKfGMEApp5I=)
3: _70B8nLCrCvW6ACV30Y-ItPOrFA.roa (hash: cBDWH8z972r2xnPCEsRs0ukVbID+nL6L8yt1uckQ37s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:58:50:85:f6:b8:9d:4d:d4:43:bf:79:6a:c5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Validity
Not Before: Nov 4 15:00:36 2025 GMT
Not After : Nov 5 15:00:36 2025 GMT
Subject: CN=bb78006b34f2fec33e85e4405205cc809a38c109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:42:25:bc:9a:8e:5b:21:72:77:ae:36:e2:0a:
76:eb:0d:3a:cd:2f:1a:80:53:88:10:41:1b:28:f0:
b3:63:12:87:67:5a:68:f2:1c:04:c6:1d:90:ea:d3:
85:ea:36:b1:af:52:d4:7a:48:12:c0:d6:78:b3:24:
e1:d4:b6:27:01:42:93:ce:72:81:c0:b9:00:20:c7:
13:dc:63:2d:51:eb:3c:8e:3a:b9:db:1b:96:ea:de:
96:0c:d4:11:a1:2f:4e:ec:da:a9:4e:e3:39:d9:33:
09:d3:a3:9b:32:7a:6a:c2:dc:03:38:76:d0:20:2c:
f0:b2:8e:83:29:8a:20:34:01:d2:4e:9e:4c:0f:81:
97:e8:a9:cd:0a:cd:4f:44:44:10:1c:01:cf:7f:78:
1c:f1:6b:82:7f:74:4a:e6:5f:2e:3e:4a:9f:43:c8:
22:58:8f:c4:b8:1d:b2:aa:f8:3b:d6:86:24:4d:dc:
7c:16:96:e7:91:d1:c6:bb:dd:05:c5:51:2e:75:57:
c6:af:90:8e:95:0f:c1:7e:b6:7a:92:3d:0c:08:80:
f1:9a:8f:69:2b:48:a7:ad:90:41:69:05:e4:cf:82:
d8:47:fc:9b:45:de:0a:e0:ea:8a:3d:5f:2a:15:f2:
ed:9d:09:59:20:dc:12:2a:18:3d:c7:d0:88:7a:9e:
5e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:78:00:6B:34:F2:FE:C3:3E:85:E4:40:52:05:CC:80:9A:38:C1:09
X509v3 Authority Key Identifier:
keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:36:ec:0b:ce:0f:31:1b:fe:a7:7e:71:ab:fa:4a:06:5d:0e:
b7:34:c4:60:61:c5:cd:ed:44:17:24:57:f5:70:5b:19:05:c1:
85:26:af:fb:72:ef:e0:6a:4f:c2:1b:d4:8a:3c:c5:35:8f:35:
cd:94:a4:ce:4e:f8:b1:26:a8:a9:f3:8d:d3:a4:9d:7f:2c:38:
bd:df:46:32:d0:ea:7c:14:27:35:69:33:90:66:4b:9a:6b:ce:
2d:95:f0:49:c0:dd:8c:72:71:b0:35:7d:19:eb:a4:06:ca:59:
da:23:c4:54:92:6e:bc:b6:90:5f:7f:03:67:5f:5a:5b:39:e5:
3b:f6:a0:9b:41:54:2e:cc:3b:6e:60:78:75:b6:0e:f2:5b:38:
15:30:c5:dc:f9:8f:4e:4a:e3:cc:92:d6:d0:6b:c4:d2:96:bd:
c2:e4:65:53:4c:35:d8:7a:7d:76:14:d5:6c:a5:26:49:ab:1b:
4c:f2:e3:05:d7:f0:ef:03:d8:af:20:02:34:84:02:a7:ed:81:
cb:2f:73:a4:52:cc:d4:14:48:a3:3c:3b:ee:3d:8b:01:0b:84:
91:6b:aa:73:e4:0c:ec:1d:ea:e0:ea:e7:40:7c:03:e4:11:0c:
58:29:82:eb:ba:10:ba:46:38:48:12:9d:21:88:30:cd:e5:29:
a3:75:a9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:54 2025 by rpki-client