Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: JluWSEXqYqmu5CVeY9sdNC7BThZtZ24ysggB3raeUJ0=
Subject key identifier: ED:95:83:17:46:DD:2C:79:70:DD:EB:76:9A:0A:A7:38:3A:A4:11:0B
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 019A4FD00866DE7E73700A09C663F9E7C9E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 16A2
Signing time: Tue 04 Nov 2025 17:00:24 +0000
Manifest this update: Tue 04 Nov 2025 17:00:24 +0000
Manifest next update: Wed 05 Nov 2025 17:00:24 +0000
Files and hashes: 1: aXSOEWx3tVF7ynpp-Q3fBbDZg50.roa (hash: RSnTxORBukbARx6FRTZpYXAyjlGDaMBXkz61tBk9AhY=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: 1hsYNNTP/24Ah04qUHt6x3LSgdSzw1GaN1VPvEE9R1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:08:66:de:7e:73:70:0a:09:c6:63:f9:e7:c9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Nov 4 17:00:24 2025 GMT
Not After : Nov 5 17:00:24 2025 GMT
Subject: CN=ed95831746dd2c7970ddeb769a0aa7383aa4110b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9d:23:76:3c:28:b0:22:d8:45:85:4d:30:a1:
54:c8:ef:84:d0:0d:e6:88:9f:ab:04:07:0d:03:9f:
38:4c:8f:74:d3:d1:46:c1:1b:4c:f2:5d:de:e0:44:
9a:97:4d:3d:62:4c:45:e0:b7:65:91:61:29:ce:bf:
d4:f8:5e:7b:22:66:93:d7:db:4a:91:d1:c4:d0:a8:
cf:05:b5:cd:4f:9e:57:1e:81:34:f5:6e:1b:09:29:
f6:7c:3e:0d:a8:9e:55:b5:82:bd:3b:25:6d:09:64:
7f:ee:b0:3c:be:a6:c7:1b:cc:b6:5e:08:46:64:26:
85:bc:07:17:4c:4f:5e:e6:4b:f3:63:07:b2:a7:d8:
b6:3d:9b:fb:ae:a9:f5:9e:cf:f2:75:93:09:68:27:
78:fd:20:e5:f5:cc:2d:13:08:95:43:3b:16:47:f3:
5a:93:d9:1a:51:3a:6b:4d:f3:b7:b9:de:7c:f0:08:
8e:0b:10:c2:bc:16:f1:99:1a:75:6f:3a:a5:74:8c:
ed:85:c8:53:d4:51:22:5d:0f:79:75:6e:89:9a:04:
06:1e:6b:ff:5b:d5:5c:89:09:21:cc:06:11:e9:c2:
73:ce:0a:2a:d4:4b:bd:1c:36:b0:dc:18:36:19:e4:
38:86:0b:fb:42:58:78:25:07:b6:56:41:da:ee:37:
cf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:95:83:17:46:DD:2C:79:70:DD:EB:76:9A:0A:A7:38:3A:A4:11:0B
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:83:5d:be:fb:c1:42:14:58:6f:5a:19:f2:d4:8c:a6:9b:d1:
fc:26:91:d6:ac:4f:69:83:32:bc:cb:86:99:44:5a:34:24:2e:
b8:f4:fd:b4:25:ce:b7:ac:55:3b:0b:8d:4a:8d:e2:1d:0f:7d:
e0:4b:12:fc:99:c2:f2:82:55:b9:e7:69:fe:67:93:87:c4:bd:
4c:75:74:0c:83:27:74:0f:8b:98:84:e9:25:91:5c:41:4f:fa:
e1:95:c4:e6:f0:72:24:fb:dd:d0:2a:0d:0d:86:a5:e7:ff:45:
e2:46:11:ba:1a:0f:53:e5:70:0f:4d:c9:fb:a2:d6:61:fb:0b:
06:75:df:ef:42:8a:4a:1b:20:b6:28:8d:4f:b2:84:78:e6:bb:
b2:cc:fb:ea:fa:b4:1b:f1:12:03:94:17:e2:28:c2:f8:c1:cb:
a0:b1:66:6d:48:cc:53:22:bb:c6:84:cf:a1:40:45:97:1a:a6:
cf:a7:97:ce:58:9b:38:c0:83:d0:bc:4c:84:3a:68:3e:d5:26:
2f:c3:e5:49:f1:77:6c:e7:22:64:3d:ae:a5:e7:5e:84:4b:17:
e7:fe:5f:70:d7:07:18:0e:00:98:bd:f3:91:4f:23:02:6f:b2:
ed:95:7a:c6:86:47:3c:ba:3b:60:c3:cf:e8:87:9a:ee:3d:50:
9d:6b:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:34 2025 by rpki-client