Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: ekjyvbBLL1B+E7fwWIoE1mdzZrI8UMuSa+twn6ctn/A=
Subject key identifier: CD:30:79:53:0E:B6:CC:FC:A5:0F:30:DA:15:C6:00:E5:06:74:22:7F
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 019A4E86734259D725F8F05F42FFE40AC9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 0DF1
Signing time: Tue 04 Nov 2025 11:00:25 +0000
Manifest this update: Tue 04 Nov 2025 11:00:25 +0000
Manifest next update: Wed 05 Nov 2025 11:00:25 +0000
Files and hashes: 1: WiIPyXHByzAssjj4VKSqXNq3hNo.roa (hash: zCz09ISW2vqCRWl6+kt0e/gaUd26cQmDKkxwLzxkeJQ=)
2: XLNp588BlhjTzq9wL8KooDNiDfQ.roa (hash: yqzj3pa+xK6sQ61wkjeNUDLd0sOcE9ePSDM9S9DIM0g=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: v0/J/zANF9+ZzD2HSeGv90VZZBqgJILcINZxTPDFLXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:73:42:59:d7:25:f8:f0:5f:42:ff:e4:0a:c9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Nov 4 11:00:25 2025 GMT
Not After : Nov 5 11:00:25 2025 GMT
Subject: CN=cd3079530eb6ccfca50f30da15c600e50674227f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:58:0c:2f:04:92:68:dd:8f:8b:14:ba:47:
fd:c8:52:52:43:43:65:f0:14:05:25:b5:91:06:e2:
a8:bd:96:73:7b:fb:03:3b:de:e7:3f:d4:81:e8:8e:
80:c2:de:d5:56:1c:41:c9:70:78:3c:d4:56:54:3b:
72:17:0a:46:97:df:6f:e7:dc:d0:d6:0b:7e:a1:82:
d2:dc:39:ab:cc:1e:fc:10:f5:bb:25:b1:f1:c9:84:
f6:36:08:24:3a:74:13:d7:83:b3:5f:cc:a9:e1:a1:
4f:5d:a5:4b:91:9a:ca:12:c9:ce:17:d7:ef:cc:a5:
22:61:04:13:5c:26:99:13:c9:72:49:90:f6:43:5b:
08:6d:79:99:ba:b6:71:fd:63:30:4c:44:23:a8:bf:
92:36:81:04:59:34:d3:ad:65:ff:04:30:c4:fe:19:
3f:6a:e5:0e:75:ba:5d:54:87:8a:d4:b9:28:55:49:
c5:c5:dc:79:fe:29:c8:47:ef:81:87:19:56:96:ba:
e3:2e:7f:e3:76:94:b7:b2:03:86:8e:07:5c:a1:a4:
d2:02:92:3f:4a:34:6b:2c:54:bf:82:ba:a7:25:f8:
1e:c0:30:37:06:07:49:71:5f:ba:55:23:f1:ee:64:
d8:f6:58:09:46:3a:1d:0e:db:b5:62:04:9e:c2:f3:
d1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:30:79:53:0E:B6:CC:FC:A5:0F:30:DA:15:C6:00:E5:06:74:22:7F
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:ef:b5:92:63:92:e2:52:07:79:89:13:22:b4:cd:b8:a5:b1:
a2:44:74:16:64:8d:8b:1b:d7:25:58:b6:13:61:30:43:90:3c:
13:70:a7:bc:4d:bd:78:91:51:33:02:8a:8d:b9:c6:fa:b8:5b:
51:f0:40:d1:c3:35:8e:77:1a:f9:11:0e:7b:4e:d6:51:ec:d2:
62:f9:f4:c7:78:83:7d:eb:03:12:50:8c:45:15:55:45:40:78:
43:ef:42:ad:e7:5e:59:4e:e8:cf:ed:0b:35:9e:ac:80:41:54:
b3:40:96:05:6f:ba:67:ce:0a:d8:9c:55:98:ca:21:dc:64:b3:
a8:10:58:20:fc:4a:a3:42:64:07:49:1a:37:b1:66:e4:e7:f8:
fb:f6:67:98:97:73:35:83:71:5f:21:95:d6:c2:81:8c:1e:3d:
de:30:f6:b0:40:29:df:72:01:0d:7d:ea:01:ec:3f:8e:82:16:
dc:61:45:99:4c:8d:59:24:8d:f8:cc:81:82:f6:c8:04:85:c0:
82:66:46:a9:59:18:e2:16:f4:98:56:61:b8:00:8d:d2:20:12:
26:97:8e:1d:02:53:fd:d4:76:62:2c:9a:93:22:ca:fb:21:a8:
7d:94:cd:02:bd:b0:81:e4:00:51:83:17:2f:f8:66:d6:24:33:
c0:3d:54:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:41 2025 by rpki-client