Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
File: sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json)
Hash identifier: wbIanwYRP120K9+aQ2+aYeBrgy15xAfxvFaIs6Jtt88=
Subject key identifier: F8:D0:76:8E:2F:CD:C1:8D:C7:8A:1F:11:57:86:86:4F:0F:71:71:D0
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Certificate issuer: /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial: 019A5150EC8C5C15989AE322C15F42DEF366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 00:00:49 +0000
Manifest this update: Wed 05 Nov 2025 00:00:49 +0000
Manifest next update: Thu 06 Nov 2025 00:00:49 +0000
Files and hashes: 1: QXyQtT8qy7cZkdePrzNkoMkFsLI.roa (hash: p4NnT1oNWa0lNXGn9ql046BScEcNjINqPaeSDpvSus0=)
2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: Gf2fZ+xPn/iXelP398J+HwyohfP/Op572TJCnyxbHVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:ec:8c:5c:15:98:9a:e3:22:c1:5f:42:de:f3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
Validity
Not Before: Nov 5 00:00:49 2025 GMT
Not After : Nov 6 00:00:49 2025 GMT
Subject: CN=f8d0768e2fcdc18dc78a1f115786864f0f7171d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:e1:86:30:20:69:4d:fe:ed:79:dc:8b:20:
0f:2e:49:47:79:3f:13:06:0d:e8:45:95:8b:91:1f:
e4:72:70:b6:a6:2e:66:91:f5:78:04:84:c2:7a:b1:
81:b2:c1:96:13:01:c1:e3:c7:de:fe:8c:fb:bb:be:
bb:fb:df:2a:d3:8d:b4:4b:53:32:88:65:79:cb:fd:
3e:11:2c:fe:45:d1:c2:58:9e:f0:0d:0c:b3:91:fc:
5f:82:14:3d:5d:52:2b:6e:b2:6e:a3:36:24:50:62:
33:37:53:bc:c7:21:76:2c:5e:c1:b6:20:d0:af:40:
3d:a0:bf:5a:db:35:31:3b:12:d6:1b:52:c1:b6:89:
14:9a:6a:73:97:09:b1:2a:df:28:5a:c8:f9:2a:95:
bb:6e:ca:e9:fe:41:65:f8:1a:81:21:20:b4:42:8a:
09:94:04:ce:be:43:01:bf:ba:11:da:53:5e:11:44:
d7:53:a5:b8:ff:19:36:5a:9a:0e:69:fe:f3:cf:79:
9c:b4:9b:b8:b9:af:99:88:88:48:63:71:b8:a0:94:
84:c3:04:78:e4:12:6e:eb:8a:d9:70:fd:aa:81:12:
79:73:a9:f8:20:bf:1a:ba:cd:dd:e0:47:50:7a:68:
8e:f5:f1:95:59:9d:65:00:2b:02:e9:7a:96:3f:a2:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D0:76:8E:2F:CD:C1:8D:C7:8A:1F:11:57:86:86:4F:0F:71:71:D0
X509v3 Authority Key Identifier:
keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ff:37:f9:3b:8b:79:85:56:dd:34:0d:1c:a3:3e:3b:7a:02:
a8:10:50:27:3e:44:bd:89:ee:6f:ff:95:c1:8e:e0:83:2a:a5:
97:88:33:e8:6a:58:0d:1a:17:e6:aa:fb:49:05:82:13:44:da:
b1:cd:ec:a6:02:c7:c8:88:99:d3:99:b7:b4:fa:e5:1f:19:67:
78:a0:74:7f:ae:c2:6d:87:98:98:b0:f9:73:cd:5f:be:4a:a1:
f1:13:32:76:2e:39:4a:4d:44:b4:fc:84:3a:3c:21:7a:94:c0:
84:2a:db:01:13:2e:3b:72:02:f2:56:61:17:38:28:7b:26:bc:
46:68:9d:2b:99:47:43:be:5e:e9:10:73:5a:12:9a:b9:e5:fd:
de:82:01:62:39:aa:35:1d:69:55:8f:c6:f0:8e:e9:5e:e4:69:
5f:96:0e:1d:e0:9d:1c:bf:42:0e:4e:6c:e9:93:87:1a:6e:8a:
a0:55:7f:39:61:43:aa:bc:9c:b6:70:3b:2d:aa:79:2f:5b:eb:
cf:17:82:06:c7:e8:2c:d1:a2:00:85:72:03:a4:a6:29:56:d0:
b1:76:77:81:6f:4f:d7:18:4f:dd:70:5c:11:45:b1:c4:6d:fd:
97:da:24:8e:0a:59:44:bd:8d:7c:d5:c6:91:c3:1b:be:51:7f:
9a:fe:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:08:03 2025 by rpki-client