Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
File: S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json)
Hash identifier: 5liAtX7UYCJXGAxPt8HKePeacPUtNtCx9d4kqf8ipZo=
Subject key identifier: EE:7C:45:8F:D4:9B:11:20:C7:8C:0F:E9:E8:60:47:68:BC:7C:BF:46
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial: 019A503E36D0F197589AAFD31D03F1F78B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 19:00:45 +0000
Manifest this update: Tue 04 Nov 2025 19:00:45 +0000
Manifest next update: Wed 05 Nov 2025 19:00:45 +0000
Files and hashes: 1: M2oh_KntEbzSd5x9NMZSq_CLZnQ.roa (hash: x3vhRRKg/BRlfpWUDclKnemjloDpJmmJOqeSSdSoUa4=)
2: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: X556J2K2PpmwZnUj+ZrgFUBCutRfHfSfgYm0VNE4ApE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:36:d0:f1:97:58:9a:af:d3:1d:03:f1:f7:8b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Validity
Not Before: Nov 4 19:00:45 2025 GMT
Not After : Nov 5 19:00:45 2025 GMT
Subject: CN=ee7c458fd49b1120c78c0fe9e8604768bc7cbf46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:29:f6:bc:36:0c:38:06:c4:e1:aa:b5:cc:32:
d0:8a:9e:d2:f3:4f:d8:c6:64:8e:80:d8:92:68:ec:
cd:c9:67:dc:63:53:fd:d2:58:51:b1:97:92:71:3c:
b2:d1:e2:3f:72:08:80:7d:d4:e1:a6:f7:ec:e9:a0:
aa:c8:d7:25:91:e9:01:aa:ae:34:4a:59:61:4d:ed:
36:bf:f7:e9:10:14:f0:15:0e:c0:9c:d6:b6:43:b9:
6c:d3:39:97:da:03:5d:62:45:d2:10:f7:5c:b2:6a:
44:f3:7f:74:b4:af:ab:ef:eb:59:9c:be:f7:6b:11:
bc:6a:c5:61:5c:70:7e:4e:0b:57:5d:b9:f9:57:da:
06:aa:e4:eb:ca:5a:ab:51:00:90:7f:33:af:08:3b:
76:4d:92:b7:e4:0c:c2:23:dd:7d:61:22:66:dd:90:
d3:ce:3d:c9:73:b1:48:5c:f8:ac:e6:18:43:a2:81:
7a:04:42:f4:85:ac:4c:52:66:90:80:1a:98:f7:c1:
e6:82:3d:a0:74:11:05:50:72:6f:a0:c8:39:56:74:
e5:8d:e0:7a:53:9d:9c:e0:20:8e:c3:3a:6e:1b:70:
8d:88:35:15:6b:9a:58:45:c5:d5:0d:12:c2:e1:ff:
59:9d:4d:6d:ee:07:29:af:90:a5:26:5f:de:cd:b6:
b8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7C:45:8F:D4:9B:11:20:C7:8C:0F:E9:E8:60:47:68:BC:7C:BF:46
X509v3 Authority Key Identifier:
keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a8:07:0d:9d:3c:46:6a:ab:9b:99:97:4c:05:c9:87:49:6d:
60:b6:04:1c:32:7f:32:34:41:87:88:68:73:5c:2b:49:59:fc:
2e:7e:ca:c0:ef:26:be:16:f0:28:55:01:73:48:0d:e0:f1:b8:
a2:c3:60:3f:7f:88:e4:10:e5:6e:7b:41:29:bc:48:c6:e3:bc:
c7:04:ea:6d:bd:69:bf:25:c3:e5:f5:22:3f:a2:fd:2e:4d:79:
3f:c2:66:29:dd:78:0f:e1:dd:67:62:72:4b:c9:5a:08:c5:6c:
0f:53:73:cc:c2:f4:f2:17:7e:ff:36:b4:8f:3d:dc:cf:01:bf:
74:c5:4e:42:30:46:3e:a4:8a:05:7a:1d:4c:ec:97:e9:6d:59:
c5:ce:cb:ca:0b:74:5d:46:2d:ca:f1:92:89:62:be:01:d2:0e:
d7:e8:dc:94:71:c4:83:8a:45:d2:e0:91:a6:d0:71:da:9f:d8:
19:57:39:67:16:35:84:11:3c:37:19:e4:72:c5:6a:d9:6b:c4:
1f:3f:e2:0a:5e:10:21:83:3a:43:37:34:5a:15:2b:93:1f:3f:
b0:81:fe:5c:b1:71:c2:bc:b8:22:4d:15:d7:9e:be:e7:99:2e:
ae:6e:54:f6:53:23:02:6a:1b:93:f0:20:cf:ac:63:75:04:15:
3a:d2:5f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:55:05 2025 by rpki-client