Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier: Kn89DQdx1HUKkOPaEjjjWWmgs1WIBqLxheo67l0Jg+M=
Subject key identifier: B9:47:9D:F2:81:62:0A:4C:0E:EF:87:B5:3E:C7:8A:7E:1D:51:E5:F9
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 019A511988D63A213AC7DFB00B3B7BA67C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 23:00:19 +0000
Manifest this update: Tue 04 Nov 2025 23:00:19 +0000
Manifest next update: Wed 05 Nov 2025 23:00:19 +0000
Files and hashes: 1: LYWNFEM4isLrMZkcPOtofB7wrtQ.roa (hash: 3L7ng+8G15KKO1VpRMLBS9WLq4qDKG/BjuMPbzD+J28=)
2: gPGcyQrRSC47MoDcNvHUCHgMy9I.roa (hash: MmytL0w6XbyXL7UhT0pH40kUdOSvBJ5woyxf0GcUHwU=)
3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: suSxqTg5/uEbcbcCIsgTrPAbWviAX6T47Rl84zuM6LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:88:d6:3a:21:3a:c7:df:b0:0b:3b:7b:a6:7c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Nov 4 23:00:19 2025 GMT
Not After : Nov 5 23:00:19 2025 GMT
Subject: CN=b9479df281620a4c0eef87b53ec78a7e1d51e5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bf:33:4f:a2:45:12:85:89:98:66:49:0a:60:
6b:70:8d:f8:41:ad:f0:94:48:de:b0:97:75:53:50:
75:bb:f5:8d:6b:9b:4b:0e:c1:5b:47:de:54:cd:83:
c3:48:f1:d7:22:d1:97:d3:3a:c8:a5:bd:83:9a:48:
83:d7:72:8f:fe:a4:b7:e9:ba:83:5d:af:5b:3f:f4:
b2:58:73:ba:d0:7e:02:48:5c:d7:fc:5a:da:d0:14:
b1:40:fc:c1:75:d2:77:3e:ff:e0:c7:38:86:b8:ed:
f3:e4:58:ea:ee:2e:82:c1:26:62:d6:66:55:bb:ce:
62:40:37:91:fd:e8:af:2d:30:35:84:85:c5:1b:14:
4c:e6:72:74:6b:eb:20:3c:f5:f7:8a:95:71:e2:6c:
39:db:70:dd:98:83:37:af:c3:0d:4f:5e:8d:8a:40:
ff:ec:3c:6f:6a:24:35:ac:3a:a3:97:68:14:67:17:
78:80:14:6d:ce:7b:e3:9c:84:1f:9d:8a:26:4a:c7:
c1:84:73:61:e5:d4:9e:dc:56:0c:eb:f8:f0:9d:95:
bc:7b:e3:ea:cf:ff:3f:d4:3d:c1:53:f1:4a:c5:ea:
c7:81:0d:60:0d:5b:e9:14:37:a8:1f:de:0d:9b:d2:
c9:88:d0:50:0b:0a:c6:fb:76:be:c8:68:7b:7d:2e:
41:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:47:9D:F2:81:62:0A:4C:0E:EF:87:B5:3E:C7:8A:7E:1D:51:E5:F9
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:99:e1:10:fb:67:ee:3a:67:fd:c7:19:a2:d7:48:27:31:92:
f5:db:ae:00:27:26:a1:7a:7e:9c:e4:a9:52:17:8f:49:ce:94:
89:5a:66:46:8a:89:20:cb:e7:ff:c2:30:7b:0f:8f:4e:6c:36:
49:16:08:d1:49:70:71:9d:ed:23:d9:88:76:1e:ee:ed:17:02:
c0:20:50:10:a7:6e:c3:67:bd:a5:dc:ec:a4:85:00:c6:a9:86:
42:08:fc:87:47:85:ea:d4:d4:07:08:37:90:13:90:82:34:7c:
ed:d6:51:f5:f1:75:72:cb:fb:25:be:fb:d0:07:66:39:cf:46:
ba:fa:45:ae:4c:9b:11:3a:71:f2:87:bf:52:37:78:15:3d:5c:
cb:2e:a2:cd:22:75:32:fa:3d:1a:c5:42:eb:40:56:84:01:68:
0d:57:df:17:12:7d:b6:6c:34:70:b1:66:49:53:1f:7c:b6:98:
46:aa:d9:a1:ee:6f:c8:b0:7b:69:a6:15:31:ad:2a:85:68:c3:
1c:dd:81:c8:0e:41:f0:61:bf:a8:a0:a9:ab:93:c5:f8:08:e9:
9f:c1:fc:17:29:98:dd:ec:f2:da:2b:43:6b:be:04:36:60:ec:
02:82:5e:de:5b:aa:23:dd:49:8a:f4:d0:25:cb:73:99:c3:31:
dc:91:b5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:26:51 2025 by rpki-client