Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
File: S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft (raw, json)
Hash identifier: FoGcCpCIhVkWytmEO0K8yFi00beoP+t8pvZ7ZNL/Zr4=
Subject key identifier: EE:1B:A4:4F:2B:F5:E1:FF:E0:5E:AE:0F:57:10:C6:9E:3E:D7:95:1A
Authority key identifier: 4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
Certificate issuer: /CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Certificate serial: 019A52D21A134FC2BD405E6C0AB4954DE3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 07:01:32 +0000
Manifest this update: Wed 05 Nov 2025 07:01:32 +0000
Manifest next update: Thu 06 Nov 2025 07:01:32 +0000
Files and hashes: 1: 3pyVDwp0x3hY9oRPcp-pG8Phtr0.roa (hash: Qs6GoxmPBIC7HGNuig2kfn3Fl73wnKTFpil8h4rBNO4=)
2: 7NbESzXRMNmvEomT-Mf8me7h-5o.roa (hash: sP5JFPjYHopQ7eTPfJ05mH6EJsqFFPFigu0p8AF8Ees=)
3: S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl (hash: TYxWFKE7IxTbOd8kuaHcGtb3ZL4RR/pNZQ04N4m2tEA=)
4: _8kwQM-X6Z8iQPUFtkn5eqJVuxI.roa (hash: euBW9IpgTvtCum/UZd3emtTuwK2uZ78wnCtDCEVJf2A=)
5: c4bLrKnAkTRBkWnGAk0rUMNmNi0.roa (hash: MeURMVUFI1PNljAcbfvTNPtm4Rnq7dMhBu12jSOQpgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:1a:13:4f:c2:bd:40:5e:6c:0a:b4:95:4d:e3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Validity
Not Before: Nov 5 07:01:32 2025 GMT
Not After : Nov 6 07:01:32 2025 GMT
Subject: CN=ee1ba44f2bf5e1ffe05eae0f5710c69e3ed7951a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:98:a4:3f:e2:9d:6f:cd:d8:70:81:64:0a:
96:e0:c2:40:7d:48:12:c3:b0:56:94:64:f1:e3:18:
cf:69:30:83:0c:16:54:8e:b7:c3:06:27:60:cc:ec:
cc:51:c2:6e:3b:ec:ac:94:7f:22:9b:7d:be:41:c5:
60:dd:76:18:5d:ca:72:be:54:e5:92:90:a8:07:c6:
fe:69:96:77:08:05:d3:55:c9:36:e0:52:7e:4b:78:
7c:39:8c:e1:14:dc:62:e6:47:e7:c2:d1:a0:dd:b7:
35:81:8b:85:75:d7:00:9b:4a:e5:b5:f6:2a:dd:04:
60:af:fe:90:c9:e3:07:38:bb:e9:f1:69:5f:36:4e:
0a:d4:c4:8e:1c:b2:e3:1d:e0:8c:9b:c4:39:c6:b0:
e1:f8:f3:07:0f:6f:30:67:39:54:e1:6a:a7:b4:62:
e6:25:79:a7:e0:02:b4:1a:0c:19:2c:b8:5b:67:a4:
11:f6:78:b4:01:3f:e0:aa:ac:49:66:9a:d9:aa:c6:
a7:b0:71:fc:f6:6b:12:ae:30:20:8c:58:6b:c1:2e:
2a:d1:42:b5:2d:60:29:eb:46:68:fe:2d:41:f1:4e:
d9:92:21:07:ca:29:46:06:88:19:ef:78:1b:6b:ee:
2c:b6:f5:8e:2a:a9:c9:74:b1:1c:43:d0:3b:02:45:
88:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1B:A4:4F:2B:F5:E1:FF:E0:5E:AE:0F:57:10:C6:9E:3E:D7:95:1A
X509v3 Authority Key Identifier:
keyid:4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ff:d2:bf:eb:e4:99:09:19:20:8e:51:79:43:c5:b0:e2:56:
83:68:4f:89:22:e8:4c:c8:0a:68:39:ef:a3:63:19:f7:cc:da:
cf:43:a4:ca:01:3f:3a:0f:c0:7c:5d:51:d5:aa:14:f9:8d:b3:
b6:d9:4a:23:6a:08:a9:75:bb:92:ec:9b:1c:71:df:50:5c:f1:
87:7b:13:78:84:ec:01:67:34:1e:fe:3a:7e:95:67:99:8d:c8:
88:92:94:04:66:a7:8b:80:27:2b:94:bc:28:e6:62:a7:bc:32:
a1:9a:99:44:ba:bc:54:b8:5b:3d:d5:f7:0d:9d:52:50:5e:69:
b1:17:1a:e1:6e:6d:77:09:ac:5f:8e:66:4a:81:d5:7f:2f:5b:
4a:0a:91:c2:c2:95:87:85:df:ef:94:8a:6e:3f:a1:e5:4a:9b:
5f:57:aa:ea:2b:15:4d:7a:51:18:55:3d:94:22:4e:9b:3b:48:
9a:d0:dc:e0:ec:ee:72:d8:c6:ea:49:07:f1:fa:16:45:3a:ef:
72:d9:15:e5:64:a3:f2:2c:9f:eb:3b:92:c8:fe:9a:16:78:55:
fa:ae:c1:60:c4:cb:13:d8:f1:91:6f:8e:60:12:2e:49:bc:6e:
0a:18:a3:33:36:fc:7b:8d:fe:c2:49:d6:9c:ec:c7:5e:c0:56:
a5:69:5c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:59:56 2025 by rpki-client