Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
File: SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft (raw, json)
Hash identifier: BU/Zf3Rf++kzgBjSJbzFGHwQFC5b/gR19dobWQ2TNK4=
Subject key identifier: 7F:0E:B8:D3:87:CA:94:F0:66:E6:68:0D:56:13:7D:35:88:1F:D5:1F
Authority key identifier: 49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
Certificate issuer: /CN=4999010bbb1f48709aeac02e84338a49b7774611
Certificate serial: 019A4D7443E1CA48BAA6F6AB783A05811837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
Manifest number: 11CF
Signing time: Tue 04 Nov 2025 06:00:56 +0000
Manifest this update: Tue 04 Nov 2025 06:00:56 +0000
Manifest next update: Wed 05 Nov 2025 06:00:56 +0000
Files and hashes: 1: MfMkCUr7HQ6KxqyWEzQVmKSbin8.roa (hash: 15XIx+4E6jpmVYTgDMId5DLCY/biXmoyIZeEQt1OExE=)
2: SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl (hash: XZS8Xwr8OuuAOet1LQsKRQy/+yBE0X+L5mlFXMn9hBE=)
3: V7TwuQchFJyj3FzgSo-quNHM3vk.roa (hash: hjNtsrFF5n1yKl43GjiftBGk4/SSn0HVl0kFwJ8ePwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:43:e1:ca:48:ba:a6:f6:ab:78:3a:05:81:18:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4999010bbb1f48709aeac02e84338a49b7774611
Validity
Not Before: Nov 4 06:00:56 2025 GMT
Not After : Nov 5 06:00:56 2025 GMT
Subject: CN=7f0eb8d387ca94f066e6680d56137d35881fd51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:06:f1:ad:56:39:62:21:a7:65:b1:2e:d0:fd:
17:30:a6:11:16:e7:6f:94:f9:75:70:d1:81:2b:32:
86:6b:ab:56:b5:fd:48:66:36:51:0c:45:52:f3:fd:
02:c4:8c:84:f6:2c:3d:22:13:67:1b:22:d2:ed:a7:
78:99:bb:26:e3:f7:12:90:2e:84:10:4e:e6:e9:d0:
a3:b6:1a:e7:89:67:28:d2:4d:9d:9c:bc:00:78:c9:
c8:c9:18:1e:c2:c7:8a:6e:6a:ff:b6:3f:3e:1c:dc:
d3:45:37:7b:4f:49:24:50:c9:70:00:cd:62:c7:af:
6a:55:9f:69:05:f6:56:ed:61:73:01:a9:a1:dd:14:
4b:16:0c:3c:0f:5d:e7:19:d3:78:95:d0:e6:ca:e4:
c5:f3:e2:0d:17:3b:82:05:86:c8:a1:a1:da:ea:ca:
5e:19:4a:0e:c0:8a:71:ee:4c:6a:ff:32:fb:fb:7d:
62:8c:34:f5:64:b4:e0:5c:2b:03:1a:59:cb:af:ed:
41:f5:d4:47:c7:8b:a4:22:39:08:96:16:0b:72:b7:
b4:1a:b0:71:13:10:b5:a4:51:b6:a1:f4:90:cb:dd:
95:c3:ad:f9:86:c1:f8:0d:67:58:0c:0f:92:6b:92:
df:bb:16:94:96:16:1a:02:a6:c6:43:b5:a2:47:38:
cc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0E:B8:D3:87:CA:94:F0:66:E6:68:0D:56:13:7D:35:88:1F:D5:1F
X509v3 Authority Key Identifier:
keyid:49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:11:95:13:34:bf:37:84:c4:f3:3b:db:29:8a:b5:2f:45:ec:
0c:c6:bf:b1:c2:18:a8:fb:a1:dc:b3:aa:0b:a9:e7:49:89:ef:
78:13:00:3b:e3:59:79:de:56:07:4e:63:af:b4:6f:88:ec:0b:
8e:4d:1c:4f:5b:8d:14:18:16:50:b8:67:69:15:92:67:b8:33:
a6:11:4b:ba:ef:00:7b:d6:14:52:f0:1c:04:d9:f6:b7:e6:60:
b7:06:52:da:bb:0b:be:b7:ae:7b:a3:e7:50:0d:b4:52:67:36:
d8:af:8c:a9:5e:71:27:3a:d8:ba:4e:5a:54:46:41:87:1b:ea:
43:ad:6e:71:b0:60:69:20:22:a0:90:5f:be:9b:1e:5e:86:47:
55:c8:3c:53:8c:88:7c:a7:5f:f6:e1:e8:0c:bc:d8:af:59:97:
93:99:b6:7e:62:99:1c:01:13:07:20:ba:1d:1d:86:95:04:b1:
ec:66:4d:8b:1f:aa:4f:ff:96:d4:f7:77:a4:57:2c:6c:9e:db:
7d:51:58:9e:52:1d:30:ed:27:29:a5:a1:2f:4a:78:ed:66:2f:
11:26:c1:c2:97:47:d3:ee:15:ec:f0:fc:b1:47:43:15:c0:42:
40:78:fd:25:c8:6f:20:4e:8a:c1:02:a4:89:93:6a:b5:20:30:
3e:ed:eb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:24 2025 by rpki-client