Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier: 0JHlXBzZf7Q/FQsds5t5V7YxsCFP0A0rCjXCgDJstXk=
Subject key identifier: 70:65:DA:1A:6A:03:ED:33:E6:81:19:56:67:83:D8:CA:52:A2:61:7B
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 019A4EBD42DAAE8060427184B2E6C1F15074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number: 16C8
Signing time: Tue 04 Nov 2025 12:00:17 +0000
Manifest this update: Tue 04 Nov 2025 12:00:17 +0000
Manifest next update: Wed 05 Nov 2025 12:00:17 +0000
Files and hashes: 1: 2_e31xA0ke3Styc34JcGbffddwc.roa (hash: SiZtRmCeZumulAZS0QR6GtmaGOYbZYgtQLDnc2RPi2w=)
2: H1ot2MdUTN3jveoJS7U1sYASkIY.roa (hash: ysbPlqFJhEFUNGGIg/X6JBUO2rkOODa5SQIBLfuQqpI=)
3: H4lyP83NjE4StXhzWVmNmQgWeD4.roa (hash: C6GXgty+pdVrNR5OI7BiS07ixVEg3xvCstT2O6bzlQY=)
4: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: NWPINgbqv9EjuPgb4heGIz4aPoGHVmCbhuyAAEePVxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:42:da:ae:80:60:42:71:84:b2:e6:c1:f1:50:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Nov 4 12:00:17 2025 GMT
Not After : Nov 5 12:00:17 2025 GMT
Subject: CN=7065da1a6a03ed33e68119566783d8ca52a2617b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:44:70:dc:e6:1d:a7:fa:7b:43:f6:13:cb:00:
0d:a8:9c:77:21:b3:55:aa:54:7b:dc:50:86:47:22:
5e:34:53:94:31:0c:37:24:d2:90:0e:f6:72:1a:30:
8a:95:dd:70:cb:ae:b2:42:71:5e:68:3b:00:cb:95:
28:6a:0d:08:0e:7d:40:9a:e0:d7:a3:97:9d:cf:44:
08:8a:3f:6a:72:10:4f:90:6f:d3:58:8e:eb:16:29:
1e:c9:14:75:ec:59:c1:5b:e1:f3:8c:fd:5c:48:ff:
20:2d:e2:c5:b0:20:67:74:59:39:47:27:4a:da:e2:
ea:32:9b:a4:f2:52:e3:3c:fd:8c:1e:ff:60:87:e1:
0c:53:2b:7e:fd:11:57:c5:29:54:b6:be:57:84:b7:
3f:3b:01:87:31:09:40:fc:9a:88:0c:8a:46:8d:b3:
c5:7a:e7:b7:af:21:24:91:29:87:0e:ff:58:65:38:
21:3d:3c:11:69:59:d9:d2:b4:55:2d:cc:fe:14:ac:
f7:e1:f1:44:3f:7f:6a:dc:01:8a:6d:80:23:62:08:
18:f8:41:d7:63:8e:f0:21:02:ee:08:35:67:ab:ac:
10:51:e9:b9:97:73:ad:42:11:c4:af:3a:8d:f8:3d:
dc:5a:c3:3b:38:06:b1:06:02:9d:db:36:73:c2:37:
bd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:65:DA:1A:6A:03:ED:33:E6:81:19:56:67:83:D8:CA:52:A2:61:7B
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5c:e9:38:c2:bf:48:9a:07:28:61:2d:89:b5:56:c7:14:24:
ae:cf:8a:be:80:33:33:1b:00:fa:0a:c3:43:7e:aa:73:17:e2:
76:04:4a:1a:93:3b:88:32:e3:72:20:eb:b6:9f:2d:9a:90:08:
15:11:a4:fb:eb:7d:c5:7c:d0:26:cb:51:8f:a3:e6:28:42:97:
59:35:3e:82:21:4a:a2:d5:96:25:23:ac:11:33:dc:cb:43:69:
46:63:05:40:8d:10:c8:ba:d1:e2:ca:af:3a:4d:af:5c:46:cf:
96:21:c2:3f:f7:73:ca:7d:d9:b2:26:5d:8c:cc:92:d5:44:22:
c3:a3:1c:6d:82:1f:7a:25:db:46:01:b3:9c:25:6d:c2:d0:c6:
10:f2:0b:34:ea:d2:64:98:c1:30:bd:e2:4a:2c:64:4e:69:fd:
63:ad:1a:2a:4c:e1:29:84:75:4c:01:66:2d:f1:da:d5:fd:c4:
e0:07:90:a8:31:b4:fd:7f:78:7e:53:44:ba:35:91:0a:bd:5e:
c7:84:ed:ef:01:d0:9e:29:d1:f1:ff:61:b0:74:ba:eb:0c:07:
10:1d:d8:26:7e:f5:ca:be:ac:09:93:cd:7c:21:5a:20:a5:2b:
24:06:94:42:bc:71:7e:a0:2a:af:c8:88:3c:7e:dd:8f:b8:a4:
c3:b5:bf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:51 2025 by rpki-client