Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
File: S_xaKUEPH_z03ipacFj1FiCzC3k.mft (raw, json)
Hash identifier: p6fyILlOnik9r4piYDS2a+RVHzCrq83BNj5I6OA15oM=
Subject key identifier: 5F:55:C2:9F:3F:AE:07:45:CB:3E:1E:EE:84:7F:05:DF:62:39:F8:78
Authority key identifier: 4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
Certificate issuer: /CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Certificate serial: 019A5006E6E21530688BC440E6E05882B653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
Manifest number: 0EC0
Signing time: Tue 04 Nov 2025 18:00:20 +0000
Manifest this update: Tue 04 Nov 2025 18:00:20 +0000
Manifest next update: Wed 05 Nov 2025 18:00:20 +0000
Files and hashes: 1: S_xaKUEPH_z03ipacFj1FiCzC3k.crl (hash: UyN+xk/JUqBrIGiRplm6VJKgPNi3tfBs30qaDYaU6No=)
2: bgx026u65bEUIofoNprJyhzn_S4.roa (hash: mkA02/DFrwmq5MSNIOugSkJaE1Y0Xy5Utto0dixWmsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:e6:e2:15:30:68:8b:c4:40:e6:e0:58:82:b6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Validity
Not Before: Nov 4 18:00:20 2025 GMT
Not After : Nov 5 18:00:20 2025 GMT
Subject: CN=5f55c29f3fae0745cb3e1eee847f05df6239f878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:e1:96:5a:5c:04:0e:81:fb:8f:f0:8a:74:
40:9b:54:a4:23:14:30:7a:5f:d8:89:34:70:93:56:
72:9b:95:75:77:42:79:fc:79:27:43:fa:83:95:cd:
91:53:4d:7d:d9:fa:94:28:ec:e2:f9:c3:a7:56:4d:
c7:8c:4d:9d:ad:6b:d5:1c:22:d9:0b:af:ba:d1:cc:
87:9a:02:42:84:96:06:93:aa:9f:33:49:ec:c4:67:
b1:33:ea:c8:7d:99:26:d0:b0:e4:6e:21:bc:2f:25:
7c:03:19:3e:50:99:99:15:cd:6a:42:61:72:21:d6:
57:27:d0:b4:c0:0f:fd:fa:13:1c:d1:4d:3e:cd:c3:
27:c7:21:87:8f:60:02:5b:90:79:d9:72:93:d7:2f:
8d:51:0e:ec:3e:3a:bf:53:a2:d0:b7:aa:c2:03:c4:
7e:65:1c:36:a2:fa:51:64:aa:4b:16:ce:1d:66:e8:
25:38:91:86:c6:15:98:3e:70:55:60:9a:8f:11:68:
18:07:0b:a2:1d:04:a1:f9:a0:2f:a8:de:a5:4d:e0:
b1:59:95:39:f2:b3:90:b0:74:4c:67:2b:2b:94:48:
c7:ff:25:81:69:33:67:0b:de:f1:1b:38:1b:ac:77:
72:73:1a:a7:de:79:a7:5f:03:05:1b:27:c2:83:b3:
87:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:55:C2:9F:3F:AE:07:45:CB:3E:1E:EE:84:7F:05:DF:62:39:F8:78
X509v3 Authority Key Identifier:
keyid:4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:72:05:ec:09:f9:6b:f1:a6:44:ca:e6:e8:c4:dd:af:7e:8a:
94:8c:f2:ed:cf:10:c1:a5:36:fa:12:2e:f7:58:99:78:b7:51:
3b:a8:07:de:e5:69:79:ba:6f:4a:1a:e3:cd:9c:83:3b:9c:9f:
af:4c:d8:18:74:d9:4c:f7:e0:f5:76:e6:ae:c3:a4:dd:91:30:
85:c9:77:a0:1c:ac:8d:30:3b:8b:d6:29:a4:d3:10:49:c0:27:
cf:56:45:5b:fd:66:8c:cc:3d:36:85:66:5a:9f:87:77:75:74:
3e:ed:40:82:03:e4:b6:0b:2f:a1:b5:dd:26:19:fc:7b:a9:d4:
0f:08:b4:c0:36:5c:80:75:4d:0d:57:9a:0d:01:76:3d:db:fb:
6c:ee:d0:1d:2a:21:16:a5:98:60:37:d0:12:4a:bf:01:cb:a2:
16:00:61:f0:cb:fb:e8:3a:4b:0e:d5:fa:6e:5b:17:5a:69:2b:
6b:b3:73:81:3b:4b:f8:8a:5f:13:d5:8b:43:b3:3d:bc:0b:6f:
b7:7b:2c:d4:eb:0e:6e:5b:ce:30:d7:8b:25:eb:62:73:4b:77:
58:76:aa:a8:be:b3:49:7c:91:bf:e2:2b:23:87:b8:72:46:a8:
ee:9c:f2:7e:8e:22:61:07:bd:bd:09:96:86:66:69:8b:12:a9:
c4:f4:d0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:32 2025 by rpki-client