Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
File: SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft (raw, json)
Hash identifier: F7fqQoempgQORVp67ydW2VEZhFkuwAnI4G9OY4rvyLs=
Subject key identifier: 07:AC:E0:9E:21:56:7D:86:3F:A8:FD:5B:32:A3:C6:12:58:08:82:43
Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31
Certificate serial: 019A51BE38FDE503A7B98050BDDF4B892C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
Manifest number: 164E
Signing time: Wed 05 Nov 2025 02:00:12 +0000
Manifest this update: Wed 05 Nov 2025 02:00:12 +0000
Manifest next update: Thu 06 Nov 2025 02:00:12 +0000
Files and hashes: 1: SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl (hash: vNY2+CKtcO1+X8qrCuO/ittuKtLTnfV+HJS0PuHYO3Y=)
2: YrgeNV0Q3t4Xw5uBv1-S6YoZvb0.roa (hash: j80OYLZ1mn+7VVYJkW8xMNJr5ib6X+eHYr4UT4vddFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:38:fd:e5:03:a7:b9:80:50:bd:df:4b:89:2c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31
Validity
Not Before: Nov 5 02:00:12 2025 GMT
Not After : Nov 6 02:00:12 2025 GMT
Subject: CN=07ace09e21567d863fa8fd5b32a3c61258088243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:32:d6:42:3f:65:bf:c8:12:8c:de:42:40:
a5:b2:71:39:30:2b:24:3e:11:f9:82:4f:bc:7b:80:
8d:3a:1e:cd:40:32:f1:c4:28:38:6c:e9:94:cd:14:
79:39:e9:24:83:c6:17:38:eb:83:9a:13:08:6a:3c:
f6:fb:15:28:9f:98:b8:4e:18:99:75:05:de:17:78:
45:1c:fb:6f:23:eb:aa:c4:49:c2:fe:02:cb:89:ed:
e0:56:ca:8b:af:a8:8d:e2:48:c7:32:71:07:9e:de:
f4:9b:e2:03:ca:0b:1e:cd:70:31:8e:71:d4:67:63:
a3:d9:19:3a:1e:ae:b8:fb:a8:6f:9b:83:0d:95:45:
99:ff:ff:03:0a:ff:07:53:2e:81:e7:94:dd:1e:9a:
ec:1c:6c:6e:c6:61:f6:eb:15:b7:16:8a:59:62:28:
6a:fb:0c:89:52:e8:11:72:54:36:22:53:35:97:50:
5d:ad:07:5a:85:66:99:6a:45:ca:f8:30:11:33:bd:
74:44:29:07:f5:0f:71:57:9f:d2:2d:87:f2:84:13:
ff:e1:e0:b5:4f:c9:fc:bf:65:09:87:00:79:4e:51:
c0:53:01:69:25:15:e4:bc:76:eb:af:5d:06:61:aa:
94:c0:e9:8d:9d:35:c8:18:f4:d4:94:60:6f:62:1a:
b6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AC:E0:9E:21:56:7D:86:3F:A8:FD:5B:32:A3:C6:12:58:08:82:43
X509v3 Authority Key Identifier:
keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0f:6b:0b:b4:53:7b:eb:b4:4d:a6:9a:a9:e3:34:ef:c1:0a:
25:2a:a8:93:f9:db:b5:40:01:33:1e:01:b0:c3:92:63:b9:26:
21:46:12:db:57:f6:7e:4b:f5:b3:73:cc:91:f0:e1:c2:73:e6:
04:b9:2e:4a:11:72:80:23:97:e1:45:3f:c5:83:88:90:24:e4:
ab:3a:ee:09:ad:97:36:81:1a:5b:16:c3:66:f6:f2:63:d7:c5:
c9:50:95:3d:cb:ae:71:9e:ed:19:4b:b5:ab:57:e6:ff:ae:f2:
93:23:85:62:04:e6:7e:55:d1:f5:9b:41:ca:17:86:0f:b0:7f:
d2:d2:ed:c0:ce:b4:bf:b6:ad:f2:0f:6f:cf:33:fd:24:ad:bc:
fc:b9:78:f1:d6:7f:50:26:d8:ff:43:09:7c:c1:e8:ef:de:2c:
ab:a0:44:ed:05:11:97:44:1e:04:e6:44:2d:f1:3d:2d:f5:fc:
b4:e4:be:ae:b6:40:e4:86:42:57:d3:95:d3:49:7a:e2:85:7e:
60:1c:e3:45:b4:2a:e1:60:df:6f:60:d4:3a:6c:bb:76:0a:17:
ff:14:51:5f:35:8e:22:c5:71:d9:cc:26:5c:23:33:d5:32:95:
de:e8:45:40:4d:e3:ff:35:34:9c:74:ed:9e:33:de:62:38:58:
46:bc:f3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:36:31 2025 by rpki-client