Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
File: SZ8D5I7WKpaEDrLy15w-whon8c4.mft (raw, json)
Hash identifier: xvnKVtBjCs38lqorGAVysWBSe+G0oiXS0I0NOsxTfPw=
Subject key identifier: 7B:65:A6:9F:8B:22:21:D7:6D:F1:71:0E:0F:ED:2B:82:B8:8B:AB:D1
Authority key identifier: 49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
Certificate issuer: /CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Certificate serial: 019A4F9924D63BCE673E1F78F592823136E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:27 +0000
Manifest this update: Tue 04 Nov 2025 16:00:27 +0000
Manifest next update: Wed 05 Nov 2025 16:00:27 +0000
Files and hashes: 1: SZ8D5I7WKpaEDrLy15w-whon8c4.crl (hash: ez4uLSMJ/nVDnMHjNgbzoesqZTHMvf+/knoRnqaNwc4=)
2: yzTNOCEQUyiIncYM071wY64qAlg.roa (hash: hLDsFeTn5OhhHpxN9Rt6KZxw/jMGMbLdQEqz1BHAxCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:24:d6:3b:ce:67:3e:1f:78:f5:92:82:31:36:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Validity
Not Before: Nov 4 16:00:27 2025 GMT
Not After : Nov 5 16:00:27 2025 GMT
Subject: CN=7b65a69f8b2221d76df1710e0fed2b82b88babd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bb:ab:30:f1:64:2f:4b:a8:b0:95:57:27:2d:
0f:6b:c5:03:cb:a6:6d:0a:26:f7:3e:00:c2:d7:09:
2c:3a:42:b8:55:bf:e3:d0:f1:20:a9:3d:ff:91:14:
aa:5a:b8:4b:64:a6:96:c3:fa:f3:1c:52:37:9c:4f:
1d:5d:ac:40:e0:cb:73:65:ed:15:71:28:07:85:2b:
db:b8:99:56:38:cd:28:d5:58:b8:c2:70:59:bf:6a:
70:2f:11:4a:d2:ae:5d:54:d3:26:f8:b7:6f:00:1c:
87:f3:9e:38:53:27:bd:05:75:77:1b:1c:e5:34:31:
0c:7a:68:fb:64:dc:4b:15:c8:22:d9:1a:35:a1:74:
01:66:76:42:1c:dc:1d:a7:43:b1:39:26:d7:00:91:
98:dd:f5:62:06:c9:15:89:4a:cc:30:9e:35:e2:cf:
78:f1:59:45:26:3c:32:bf:4b:e7:61:4e:95:02:18:
ac:c8:68:40:87:51:dc:a9:d6:c3:a1:f7:67:fd:80:
c0:c4:4f:3c:31:2b:cd:04:8a:78:60:57:c1:75:86:
4a:7a:30:af:a5:75:37:ec:b2:82:6b:d3:d9:78:71:
f6:5c:de:a5:b2:12:25:bd:35:d8:5c:32:21:c8:09:
53:2d:8e:c5:39:9b:bd:f2:a0:c8:ce:c2:a6:13:ed:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:65:A6:9F:8B:22:21:D7:6D:F1:71:0E:0F:ED:2B:82:B8:8B:AB:D1
X509v3 Authority Key Identifier:
keyid:49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2a:76:d6:18:08:7d:4c:39:09:33:8f:1b:c4:6c:a7:ca:63:
64:c5:7c:0d:9d:b9:2e:29:71:45:b6:5b:f7:67:19:3d:81:dd:
56:b2:6b:38:62:cf:43:67:ed:00:e8:12:bf:c2:e9:da:42:6a:
4e:21:02:70:fc:24:01:39:16:6b:e6:44:16:3f:37:5a:97:b4:
08:56:b6:62:c5:e0:4a:2c:e3:df:ef:0a:8b:05:55:63:5d:70:
2e:59:48:ec:ed:c4:ec:c1:ca:6b:05:0a:af:69:9a:7c:a5:7e:
30:c7:8f:2f:d2:ad:fd:88:07:4e:e4:de:b4:e1:46:99:f1:28:
bb:cf:de:21:9c:19:d8:7f:78:c6:b2:3b:46:74:a7:eb:63:2e:
71:aa:ee:4b:7b:9c:20:cf:21:c9:6d:ba:c0:6c:0b:e9:20:36:
25:4a:7c:7e:2e:c5:13:c7:53:4d:d2:09:a3:67:4a:0d:01:2e:
f8:b9:2c:5d:04:0e:68:2f:56:a1:a0:6e:ae:bc:8d:67:13:85:
3b:43:0a:62:9e:fb:ab:1c:aa:e9:14:34:24:e4:a3:b8:23:f3:
63:b0:e7:38:9d:b8:f8:d6:88:2c:ea:c5:5f:33:8e:c1:30:71:
13:99:b3:4e:46:11:f4:ce:cc:b0:45:8e:0f:0e:e1:1f:45:a3:
7f:a4:c6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:01 2025 by rpki-client