Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
File: sl2FaYjGKmAgc-wpOFgd1KWG-48.mft (raw, json)
Hash identifier: s0VVRBEUzYJ17+xUWfjNs+RtevPDI2ajPIdYrD4tDE8=
Subject key identifier: BE:1F:83:A9:06:52:2B:5A:46:53:50:A2:1D:D0:65:63:9A:B0:3D:63
Authority key identifier: B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
Certificate issuer: /CN=b25d856988c62a602073ec2938581dd4a586fb8f
Certificate serial: 019A50E39BBC0BE08DE0466A1BFB1DAB5090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:01:25 +0000
Manifest this update: Tue 04 Nov 2025 22:01:25 +0000
Manifest next update: Wed 05 Nov 2025 22:01:25 +0000
Files and hashes: 1: 7ywY44F6W0hS7hjw1JX0UehS46M.roa (hash: EOy9avDsf7nOFq98ToM6bXsJvV8/Sd2CzZitSl4gKrE=)
2: sl2FaYjGKmAgc-wpOFgd1KWG-48.crl (hash: uuTpwV8ga/+sUz7/G1Z8Q/NW61dIu46sIrkXSDLXuBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:9b:bc:0b:e0:8d:e0:46:6a:1b:fb:1d:ab:50:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25d856988c62a602073ec2938581dd4a586fb8f
Validity
Not Before: Nov 4 22:01:25 2025 GMT
Not After : Nov 5 22:01:25 2025 GMT
Subject: CN=be1f83a906522b5a465350a21dd065639ab03d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:14:80:eb:a0:e1:1a:16:a5:33:b3:46:3d:
9f:ab:d5:8d:75:3e:02:87:83:00:ea:3e:1c:a2:38:
ec:4a:e5:56:a8:87:0f:3e:ef:4c:4f:00:de:52:e7:
de:d4:0c:57:d9:2a:0e:85:54:35:bd:4e:89:a9:21:
c2:02:3a:de:23:f0:2f:37:59:a1:af:5c:b8:5c:7a:
ed:48:34:bf:3c:da:e2:cb:40:af:2a:22:11:51:d0:
0b:af:c3:92:14:4e:96:bc:c3:fe:32:ed:8a:e3:b6:
f9:60:15:e2:92:16:db:9e:f0:1d:56:ee:a6:5d:af:
06:eb:69:41:c1:28:18:77:f1:be:94:3f:03:58:dc:
20:ac:5f:06:b8:57:60:44:94:b4:68:3f:c8:f4:53:
8e:83:03:04:25:0e:f4:76:87:c4:12:4d:ae:c0:ee:
b2:11:a0:1f:d2:43:c1:ee:67:d7:1e:6b:e6:5c:aa:
a1:ca:3d:35:9d:43:d6:7f:4f:ce:68:55:79:b4:30:
ba:0c:aa:e2:59:00:8b:29:fb:f4:ab:8e:0f:82:5c:
b3:14:f8:bc:35:e9:46:f7:53:c3:e7:25:a7:95:88:
51:ca:3c:f6:f2:44:db:ca:3a:96:3b:42:7f:bc:db:
5c:b0:d6:bc:8d:29:68:bb:63:9b:28:a6:12:e3:25:
14:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1F:83:A9:06:52:2B:5A:46:53:50:A2:1D:D0:65:63:9A:B0:3D:63
X509v3 Authority Key Identifier:
keyid:B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:22:98:d3:79:52:68:79:e3:b0:f8:a9:99:a9:e2:ce:fd:6a:
3a:bc:52:cf:66:af:9b:89:23:f4:e2:33:4d:fc:a4:6f:c1:44:
ec:e7:e8:35:22:65:1f:1d:18:0f:09:8e:cd:5b:4e:aa:a2:f1:
e2:11:d8:61:ff:72:39:ce:80:aa:97:54:23:1a:6b:7b:00:77:
37:1b:9c:12:c5:c4:8a:c4:0b:33:4d:e7:6f:81:01:05:4c:96:
7b:7b:69:e7:05:23:3d:9f:cb:74:6a:58:48:8e:b2:16:11:e8:
aa:af:6c:0f:ae:9f:2c:f3:a7:6a:be:a6:d0:77:1e:56:e0:5a:
82:2a:56:13:24:39:a7:56:90:4e:97:5f:9c:7a:05:ec:33:4e:
13:49:92:b9:71:23:04:04:04:3d:9e:15:00:25:58:77:38:13:
a7:cb:1e:09:39:ce:36:cd:35:88:01:0a:8f:53:a6:03:56:3b:
44:6d:b6:3c:14:9d:5e:b1:85:fd:33:6c:89:34:0e:5f:c3:94:
1b:39:d7:92:cb:c6:27:37:94:33:a3:a8:ed:23:c4:00:3b:48:
ca:3b:1d:2a:2f:4f:91:14:43:ad:a0:bb:ee:eb:88:4a:08:75:
99:74:91:42:a9:c7:0c:b7:cd:bc:8e:9e:11:a1:99:3f:77:2d:
91:86:28:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:54:18 2025 by rpki-client