Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
File: S11Foqu5YNK851js5zOxJtyn5xs.mft (raw, json)
Hash identifier: knwJZrOfkhpo/1ZqVpL1nXHybPJluhQAi4uAaBNUh7U=
Subject key identifier: 47:A6:A6:6A:89:C7:A1:4F:45:AF:D4:95:27:B2:44:44:FF:45:AF:35
Authority key identifier: 4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B
Certificate issuer: /CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
Certificate serial: 019A4DE1ADF69D3FC98F754CE71F368AEAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
Manifest number: 15D6
Signing time: Tue 04 Nov 2025 08:00:26 +0000
Manifest this update: Tue 04 Nov 2025 08:00:26 +0000
Manifest next update: Wed 05 Nov 2025 08:00:26 +0000
Files and hashes: 1: S11Foqu5YNK851js5zOxJtyn5xs.crl (hash: 3UYJ3dH9uh0R8Vn10pYcUyB0EQd3wU3LQ52o0xqAu6M=)
2: u4XkgPABKlmzAjFlFb35_bSOoZM.roa (hash: 5OhzujGDvwa+oBk89U1CXUeSGEyZAhhsIH31ZmjrM8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ad:f6:9d:3f:c9:8f:75:4c:e7:1f:36:8a:ea:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
Validity
Not Before: Nov 4 08:00:26 2025 GMT
Not After : Nov 5 08:00:26 2025 GMT
Subject: CN=47a6a66a89c7a14f45afd49527b24444ff45af35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:32:3e:bf:c0:a8:21:ad:56:99:4f:3a:89:
9f:40:85:4d:1c:21:73:8b:5c:94:dd:28:c0:1c:cf:
ff:be:af:75:4d:3f:6e:07:b0:8b:58:4d:64:4b:e0:
20:07:6e:50:8c:27:52:d6:cb:b3:e2:a9:22:9d:2c:
68:cb:f1:50:1c:e0:c1:f2:65:51:a9:29:bc:1c:51:
04:27:22:24:91:89:99:74:06:cc:5c:1e:97:be:c6:
52:a0:e6:fa:c3:2d:34:2c:8a:15:fb:ac:3b:9d:45:
b7:70:6f:64:6f:0a:c3:7d:5e:d8:26:db:c8:31:12:
cb:64:03:55:84:b0:ea:b0:7c:25:ea:6d:d7:51:28:
27:dc:c8:2f:3e:2e:5e:66:c1:45:0b:31:e2:d3:f4:
69:88:81:b5:e4:02:7e:49:44:70:cb:8a:6f:9c:3c:
75:01:df:eb:6a:9e:a4:49:29:d7:e7:88:56:04:80:
2b:66:a7:d6:89:85:77:ad:ce:82:b2:7a:cb:3d:0a:
ca:18:fa:58:a2:b1:ea:98:35:f5:bc:36:41:b8:20:
cf:fd:f5:89:cd:3f:52:1c:3e:c3:46:49:8c:b0:d7:
71:ef:84:0c:81:10:86:2e:fe:03:f0:95:d3:a2:b2:
b2:07:43:74:68:00:cc:02:66:f3:1c:b6:fa:64:84:
fc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A6:A6:6A:89:C7:A1:4F:45:AF:D4:95:27:B2:44:44:FF:45:AF:35
X509v3 Authority Key Identifier:
keyid:4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4e:f0:1f:a3:32:08:66:3e:27:8a:61:c1:01:72:7f:a2:9a:
4a:9a:ad:53:8e:5f:f2:29:68:fb:96:85:0e:d6:94:ef:55:04:
23:8d:31:e9:66:b6:a1:3d:77:93:81:51:6f:30:77:f7:b4:c9:
42:7f:f5:d7:f4:0b:b6:cd:8d:15:a0:aa:4e:33:9e:b2:15:74:
71:af:95:8d:cb:ea:79:af:5f:e9:18:12:a4:cc:a3:20:bf:a1:
a4:63:fd:73:4f:76:8b:c3:45:ab:e9:da:b7:00:9f:31:25:fd:
24:8e:fa:1b:0f:bb:6d:06:f7:25:96:68:a1:2e:91:4c:c7:f4:
68:f4:fc:a0:e1:58:38:80:b9:3f:ff:21:d7:a4:e3:88:93:cc:
c4:fb:70:b8:5e:c2:5c:a8:3e:9b:19:81:22:87:52:a6:b8:2f:
d7:ae:7e:59:70:34:fb:e8:75:35:b1:09:ca:68:a9:36:a0:ff:
ae:2c:3f:32:19:f5:90:f1:37:a1:18:26:b8:78:d1:bf:eb:1a:
d2:b2:3d:ae:8e:f2:74:67:15:2f:92:10:f3:03:d8:1b:c0:bd:
d4:88:f0:df:06:0a:50:8b:7b:69:48:06:c0:fb:98:2a:53:44:
71:4e:79:c3:36:75:15:cd:cd:76:a2:a0:e1:01:9a:41:41:22:
67:f9:ce:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:21 2025 by rpki-client