Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
File: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft (raw, json)
Hash identifier: W1mIdw2r2uRDjZbJMIjJ3aaoMWP/VhnX/NC0gJZ17Z8=
Subject key identifier: 16:A7:CE:21:78:52:F4:8D:4E:2B:FC:A1:1A:60:73:93:EF:54:AE:C6
Authority key identifier: B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
Certificate issuer: /CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Certificate serial: 019A4C981881F7602CA71AC2937F65B90A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
Manifest number: 0622
Signing time: Tue 04 Nov 2025 02:00:27 +0000
Manifest this update: Tue 04 Nov 2025 02:00:27 +0000
Manifest next update: Wed 05 Nov 2025 02:00:27 +0000
Files and hashes: 1: BxWtid_-E8rZCQpiPweDOTdOKeU.roa (hash: eIpy/irnZIzZ2iTcdnKoq7vKHPC2KdLXiq5W/929yzo=)
2: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl (hash: e+oxB0fJEnEyNmoNe04RV+PCY3J6VPBNy7vMyV/93+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:18:81:f7:60:2c:a7:1a:c2:93:7f:65:b9:0a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Validity
Not Before: Nov 4 02:00:27 2025 GMT
Not After : Nov 5 02:00:27 2025 GMT
Subject: CN=16a7ce217852f48d4e2bfca11a607393ef54aec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cf:83:24:6a:02:83:db:fe:7e:91:3f:a8:23:
da:ac:0d:e4:5c:34:99:eb:0a:43:82:26:3f:28:40:
e9:72:4b:13:62:46:9e:d7:2f:94:03:f5:bd:8e:a6:
90:57:85:d8:cf:61:55:98:aa:49:5d:3c:e4:17:a2:
7d:17:b7:5d:c9:41:d7:22:b4:a2:1e:2b:68:02:96:
44:68:fc:62:b9:e3:9f:9b:a4:53:88:ea:fb:3c:cc:
7c:a1:da:46:08:17:fe:31:0b:80:41:73:dd:d7:e3:
17:ca:f2:f6:ed:ed:3e:a7:f0:7e:ac:5e:c7:26:74:
1d:d8:8b:2b:cf:04:28:7d:a7:80:8d:1c:4d:9f:ef:
9a:a0:3f:b7:26:80:74:7b:5c:a7:96:1f:6d:a4:ae:
36:d1:76:33:8f:92:f0:81:58:7e:50:a2:80:64:d3:
89:25:9b:2e:82:56:04:d6:4c:77:0a:b2:a3:b1:b6:
3b:b0:f6:52:51:a8:b1:f9:76:97:68:8e:f8:b6:39:
9c:1c:fa:ea:ee:21:af:46:7c:86:45:02:42:8e:96:
76:fd:0a:d3:23:c3:48:2e:88:94:82:87:80:e8:18:
24:2a:1b:3e:cc:4f:59:d9:98:89:23:98:e3:c0:86:
77:63:8b:d7:b2:bb:35:24:63:52:1c:13:78:4a:9e:
74:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A7:CE:21:78:52:F4:8D:4E:2B:FC:A1:1A:60:73:93:EF:54:AE:C6
X509v3 Authority Key Identifier:
keyid:B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:91:9d:08:ff:b4:f7:9c:d5:7b:2d:eb:52:66:74:db:2f:55:
90:c7:49:7f:6d:0a:03:5f:99:ca:43:ba:62:ff:23:13:bb:33:
d4:bd:58:58:e4:33:24:79:c8:6a:dc:65:de:2b:1b:ff:74:8c:
4f:ef:ac:57:d3:bb:35:33:83:d9:e4:c1:f0:3a:9e:36:c4:eb:
9d:49:80:46:96:ca:a7:55:b4:f7:27:ab:68:a6:c6:17:35:c0:
3e:53:ce:30:67:b4:d1:6e:d1:a4:13:64:e6:51:7a:40:6e:93:
b2:bf:08:bc:a7:58:32:ff:6c:55:ab:07:f0:86:96:5f:49:8f:
d4:ed:cb:a4:63:bb:e6:ea:b6:19:47:bc:5e:39:b5:39:95:43:
05:76:8b:df:4a:2a:ed:25:fe:a1:f3:bb:67:95:ef:3f:76:93:
3a:fd:03:f1:88:c8:2a:d3:d8:f5:5d:21:23:a9:1c:52:75:32:
68:19:6f:42:52:cb:1e:fc:7f:7f:d2:8f:54:b3:2d:55:ae:f3:
df:ab:69:c3:8f:6e:d3:7e:69:ab:2f:6d:6b:7b:26:0f:b8:72:
18:62:6b:9d:58:cb:f1:34:a3:13:14:39:d2:9a:10:80:c5:a1:
ff:a7:04:a4:cf:1a:18:67:c7:ea:16:da:71:0b:18:8a:cc:fb:
9c:4c:60:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:13 2025 by rpki-client