Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
File: s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft (raw, json)
Hash identifier: 03ikbuJziMfZAzBUtXh5bOsSQr3zumilR/xnYH8+25s=
Subject key identifier: A0:69:DD:54:30:EE:1D:3B:50:C6:8D:4E:B7:36:9E:9E:BA:65:8A:C6
Authority key identifier: B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
Certificate issuer: /CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Certificate serial: 019A4F2B8A3FE7ACFA24B682EE09B08F906E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 14:00:44 +0000
Manifest this update: Tue 04 Nov 2025 14:00:44 +0000
Manifest next update: Wed 05 Nov 2025 14:00:44 +0000
Files and hashes: 1: 1Z0qsk9StCFAQktZcYQaKAQv6Eo.roa (hash: 7ZoC6UA8RmSyn6UoUQLfpDC2951iCi7ws/lgZfO/s3U=)
2: s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl (hash: 8YzXGFzIeNdxaTl4/510BJ7giq1xQXy7O29WG5ki2fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:8a:3f:e7:ac:fa:24:b6:82:ee:09:b0:8f:90:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Validity
Not Before: Nov 4 14:00:44 2025 GMT
Not After : Nov 5 14:00:44 2025 GMT
Subject: CN=a069dd5430ee1d3b50c68d4eb7369e9eba658ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1b:ae:2d:32:39:dc:54:ed:39:71:b7:55:05:
35:8d:20:bc:4c:99:4d:07:ea:55:03:86:59:fe:15:
33:06:b0:42:62:b6:e5:5d:49:89:23:98:1c:b8:03:
7d:33:ea:3f:cc:d6:5c:43:a8:b9:28:12:cb:1c:ac:
04:0a:d2:46:31:aa:55:c0:10:ff:68:e2:f9:88:fd:
be:59:14:4b:44:c4:d1:74:b1:09:fa:cc:1d:0b:88:
68:d4:61:5e:4f:5b:e8:c2:d8:0f:0a:e6:02:40:2f:
49:94:fd:64:11:ff:58:e0:a2:2b:d6:08:d5:11:e9:
6f:3d:a2:a4:d4:a2:1f:23:ed:75:65:20:1a:3a:96:
14:1d:c4:0f:1f:f8:2e:c7:b6:55:0a:38:23:b9:5f:
29:1b:bc:5c:92:a5:f8:9f:1b:9a:7a:81:6a:30:a7:
74:11:5e:3d:9e:07:6d:b2:44:b4:47:0f:33:83:7f:
dd:82:b3:a9:26:0e:71:69:2f:ac:15:b1:f1:8b:76:
d2:c7:01:c3:f2:6a:b7:8d:9d:ff:4e:f2:82:b0:d0:
c8:6b:06:0a:a3:00:1f:fa:f2:54:11:a6:44:bb:d1:
d6:0b:91:be:bd:23:e7:f2:43:d4:f4:c9:2a:53:0e:
9c:96:69:c5:f4:19:3a:08:7e:b1:77:e6:74:99:65:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:69:DD:54:30:EE:1D:3B:50:C6:8D:4E:B7:36:9E:9E:BA:65:8A:C6
X509v3 Authority Key Identifier:
keyid:B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:2f:81:61:62:e8:1d:b1:81:66:bd:08:61:a8:d5:e9:3b:7b:
14:30:e7:7d:01:99:c0:94:dd:a3:b0:44:86:52:71:8d:69:07:
e6:e8:2f:b3:00:4a:14:41:bd:4a:d1:24:fd:2e:45:3a:f1:cf:
10:e7:fa:4c:06:4e:04:99:0c:3f:55:68:e0:b7:14:06:d2:dd:
2e:16:fd:0c:29:8d:ae:0a:d6:8d:a2:44:e9:ea:91:01:59:2f:
6b:4e:02:e4:f2:ca:90:19:e8:62:75:e2:37:ef:9d:54:a0:17:
de:51:8a:f5:87:16:96:7c:30:e4:02:fe:b0:95:ef:b8:b5:2b:
d7:60:bb:0e:b6:d3:83:81:17:70:89:63:6d:e7:bf:b7:a2:8c:
7b:b1:80:4f:64:ca:0e:a8:1a:da:26:28:bf:66:f7:b9:a5:68:
79:0a:d4:74:a9:5a:41:27:e6:cf:56:7f:45:06:dc:da:25:c1:
81:38:c6:ba:ef:bf:8f:54:18:7b:9c:b4:6a:6d:08:a1:b8:d8:
c2:bc:30:7f:a9:99:35:4f:17:5b:11:59:65:b9:e7:42:f1:86:
dc:e0:f4:9b:32:20:16:c6:9c:61:04:4f:e5:37:d3:a2:a6:5a:
f8:5c:65:53:4c:80:58:c3:27:3a:21:7d:73:da:2c:07:54:41:
62:6b:e8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:14:59 2025 by rpki-client