Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: 7wKnbCBMQ7RGzHbydywHjGx3cE6FB2FTlqOh4m2X6SE=
Subject key identifier: 8B:27:4A:29:66:C9:0C:2E:8B:F2:B1:28:7D:5E:BC:E3:59:B2:EA:15
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 019A4E864435FA23B9D359C46B771BD18B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 0AF0
Signing time: Tue 04 Nov 2025 11:00:13 +0000
Manifest this update: Tue 04 Nov 2025 11:00:13 +0000
Manifest next update: Wed 05 Nov 2025 11:00:13 +0000
Files and hashes: 1: 7qAkcUK8ZlpOQk4HP0uuF0lhspY.roa (hash: ZilTYghFnWRS/ebtjdIbZ9Dk7wTzY0JMcLcLjLJ+fE8=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: J/ejJ1bPC+4Csd525r1HqSB0Iz9Vt0LUaPz+pI+iOxY=)
3: ddztps0hN4VMdXyjS1k_lHAPDQI.roa (hash: FuonT4M3ClmAeThBArgxMo2zntTmX1+p4F4rL/ngyiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:44:35:fa:23:b9:d3:59:c4:6b:77:1b:d1:8b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Nov 4 11:00:13 2025 GMT
Not After : Nov 5 11:00:13 2025 GMT
Subject: CN=8b274a2966c90c2e8bf2b1287d5ebce359b2ea15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:4b:0d:47:8a:05:89:69:25:c3:5d:10:01:
a4:f2:9a:86:33:e1:4c:86:be:4c:fa:44:0d:c6:2e:
cc:83:e7:37:39:e0:31:0f:c7:ee:3e:c5:bd:1c:fd:
b6:92:9d:28:26:ac:8b:21:3c:d4:23:0f:48:cc:49:
9f:97:e0:c3:35:60:88:92:30:05:a9:3b:dd:14:3e:
75:6d:e3:50:e3:1f:bc:73:96:77:c8:a9:21:55:01:
50:f3:3c:6d:48:32:aa:e6:c7:3a:df:b8:c4:cb:b4:
65:b6:f9:6e:46:f1:f7:56:b9:ab:ca:d5:03:c7:7c:
ab:15:05:6a:b3:a8:42:f1:96:ec:72:31:a5:34:63:
70:13:09:a1:94:67:9a:bd:26:39:e3:16:5c:af:9d:
57:7d:40:05:b7:51:e4:4e:45:aa:0c:3b:e4:a6:72:
b4:55:d7:78:ad:5c:40:dd:d7:35:5a:25:92:ed:51:
6e:f4:22:6b:a4:0b:25:5d:81:db:b0:11:ce:49:67:
be:14:c3:b2:c9:45:84:5c:f8:94:84:05:34:a9:e9:
19:d8:9e:7b:72:19:a6:cc:73:35:a1:d7:a0:0f:b9:
78:e6:77:c3:7b:72:7a:60:b9:94:13:3e:ab:cc:9a:
db:eb:ee:e8:55:18:e5:2f:58:b1:08:03:47:3b:d5:
0a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:27:4A:29:66:C9:0C:2E:8B:F2:B1:28:7D:5E:BC:E3:59:B2:EA:15
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:25:42:e9:2f:45:ed:e2:8e:0a:0e:d6:7e:31:72:52:b2:25:
e1:a6:2e:06:4e:d1:19:ba:19:f5:e7:53:57:2f:78:3c:a1:d2:
c1:c9:53:8b:dd:e8:ea:8a:37:f8:4d:f9:e6:f5:41:5a:80:7e:
2b:97:0c:ce:73:cb:8d:26:95:d7:d0:90:24:1f:66:12:08:98:
63:3e:3a:fe:8d:9e:d8:48:92:3e:15:1d:8d:81:3b:60:61:c5:
de:69:73:59:d0:56:d2:cc:2d:c1:19:60:d2:ed:67:9b:3d:ff:
7f:e5:4b:1a:68:2e:49:c9:9c:f4:fd:1c:34:5f:7e:98:55:c4:
38:7a:c9:9c:ec:bf:42:d5:60:cf:38:62:66:cd:a6:6a:d4:7b:
9a:a7:f7:cf:4f:55:79:9b:a5:bb:c9:5b:d0:6b:ba:a2:30:d6:
41:c3:fc:af:2f:c6:81:fb:ac:4c:28:bd:00:b1:db:f6:cc:f4:
5e:bc:1f:22:8d:cb:c8:ce:f2:10:98:f6:ba:7b:e8:57:7c:4f:
36:f8:cb:8f:60:80:d7:67:5b:d6:44:97:86:6a:69:b5:82:d7:
65:dc:3f:29:95:4e:33:d8:32:7a:55:8c:2e:43:56:b2:b7:db:
5d:22:63:2c:0d:9a:bb:f6:fb:27:35:54:6f:56:8a:bc:7d:35:
b5:1f:6b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:37 2025 by rpki-client