Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier: d/aQPP+v7ULazTvLUv4vPw8Ks2QbeIr2XzU2bjMTswE=
Subject key identifier: 6F:C0:46:3C:67:7F:30:0C:AF:D9:8F:F4:51:93:BB:A2:98:B2:16:50
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 019A4F99289984BDAFEF0CF595C739831570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number: 0B6B
Signing time: Tue 04 Nov 2025 16:00:28 +0000
Manifest this update: Tue 04 Nov 2025 16:00:28 +0000
Manifest next update: Wed 05 Nov 2025 16:00:28 +0000
Files and hashes: 1: 3jlhu43nFTAqKx4et3eHcMKKL3Y.roa (hash: BH64yszlx12crGfEJXHUgBhMmAPFBIBZrSlJaldUjes=)
2: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: eVuhcmYorLf2ThzYjARnKHWtdC/HgBPhl/j0PFweUJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:28:99:84:bd:af:ef:0c:f5:95:c7:39:83:15:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: Nov 4 16:00:28 2025 GMT
Not After : Nov 5 16:00:28 2025 GMT
Subject: CN=6fc0463c677f300cafd98ff45193bba298b21650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:b3:fa:67:d5:d1:55:02:f4:ff:a8:e0:cd:
18:34:99:a3:94:d3:56:42:4a:d3:d9:6f:2d:ed:03:
d0:c6:56:84:06:3f:ce:ea:4d:fd:2e:ad:0e:b5:ae:
e0:5c:f4:05:8d:72:a4:1e:bf:88:33:83:03:69:5b:
0a:38:99:27:27:b2:e6:c1:71:4f:71:3e:75:ec:e4:
85:8e:c7:d8:6a:c2:8d:0c:e9:06:61:44:74:80:2a:
4c:a9:16:12:f0:77:56:42:c8:cc:63:47:c4:47:f5:
d7:cb:fc:77:f9:20:05:4f:90:cf:4f:83:ac:c5:39:
61:13:1f:6d:0b:ed:a2:9a:b6:61:2c:20:8d:89:6c:
53:25:5c:9f:5c:be:ea:b1:4c:73:3a:7b:b8:89:4c:
54:2a:f9:de:b0:49:36:51:45:b6:33:77:b2:0a:f7:
80:f4:26:74:8e:43:8a:c4:a7:81:51:2d:64:3f:72:
eb:69:b8:db:2d:71:e5:9d:b4:9b:e0:b7:4b:95:d5:
a7:82:7c:8e:ed:0a:80:68:89:bc:0a:dd:e8:4c:5f:
e9:90:d7:b2:a3:e5:85:af:ab:6b:bf:1d:99:53:a3:
be:84:fc:7b:81:a5:f6:d6:bd:fa:dd:0a:ba:56:95:
a9:b1:48:c2:9e:4f:a3:96:57:cd:6a:a0:1a:b4:37:
33:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C0:46:3C:67:7F:30:0C:AF:D9:8F:F4:51:93:BB:A2:98:B2:16:50
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:30:19:21:d0:4e:db:3e:ad:69:39:6a:cf:80:bd:fc:27:58:
bd:ed:78:6e:f8:76:52:e3:6a:1c:44:43:49:60:96:7f:c9:b1:
13:36:a0:9d:35:fb:10:94:3e:0c:b5:77:2f:14:c6:ea:e3:dd:
94:f3:c6:fd:66:dc:e8:86:6b:a0:3b:00:08:2f:44:4d:54:4d:
e5:6f:a5:3f:78:ea:21:a5:0a:c9:a9:5e:ba:d5:3a:38:ed:8f:
2c:94:59:6c:d9:35:aa:cd:ef:79:5b:1e:85:08:26:80:30:78:
04:3b:0f:48:87:21:8f:ff:71:5a:64:c4:53:1c:69:9d:66:92:
a0:23:57:6e:33:ca:10:73:53:45:50:a9:3f:af:00:b3:d6:c3:
cb:80:db:31:5a:e2:09:76:f7:fa:26:19:ed:69:88:08:17:b2:
bd:c8:0a:e5:43:a5:f2:88:00:67:c6:8b:61:d2:5e:50:1d:8b:
85:6e:dd:c5:22:e6:94:ac:5a:6a:c9:52:59:6f:71:32:10:df:
48:0f:97:3f:17:7c:08:79:50:2d:7f:e4:a8:74:74:47:58:6f:
0b:f8:5b:81:1c:d9:e6:c0:72:e8:44:15:27:f9:99:08:a1:dc:
8f:61:26:cf:53:5d:fc:a2:f7:00:96:ae:eb:15:3c:28:ca:51:
88:c9:5a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:12 2025 by rpki-client