Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
File: rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json)
Hash identifier: WsGAQvJ0z3TRny+/y3J2XxwPMNjl9Iv+UvF6LTIQMPQ=
Subject key identifier: 54:DF:B6:73:DE:E1:EE:A1:9B:A9:C8:33:47:33:32:67:C0:EE:46:D2
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial: 019A4E8660DD7B5186FAD9B58646F9DF8E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 11:00:20 +0000
Manifest this update: Tue 04 Nov 2025 11:00:20 +0000
Manifest next update: Wed 05 Nov 2025 11:00:20 +0000
Files and hashes: 1: XH6XsDF8vVMB4yLkTc4gmvEkmhY.roa (hash: BZ//lXT/BiGxDhs4SPUIq0AZAxNe5OpvjPNDUL8DbFg=)
2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: iOH3EnFYvWcZhx1XQ+4qdGDlabi7mxj5pgvRLSCwOVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:60:dd:7b:51:86:fa:d9:b5:86:46:f9:df:8e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Validity
Not Before: Nov 4 11:00:20 2025 GMT
Not After : Nov 5 11:00:20 2025 GMT
Subject: CN=54dfb673dee1eea19ba9c83347333267c0ee46d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:d7:40:c2:27:0c:d2:89:bc:82:51:4c:46:
74:6a:47:9f:28:e2:70:59:97:04:51:e5:64:31:18:
55:5c:b6:ad:be:df:75:e8:b4:19:76:dc:bb:b8:ad:
9e:0e:59:c1:eb:36:37:06:c0:3f:17:a8:0f:0d:e1:
d5:32:d2:db:5c:1b:4a:9d:35:0a:d0:dc:43:08:e9:
d3:4a:57:65:62:35:2b:25:49:23:36:76:92:86:3c:
fe:c6:8c:7a:42:83:73:b9:58:d5:73:5f:74:30:e5:
80:bc:7d:26:ce:9f:b7:1a:a6:47:d1:b3:39:20:a4:
22:b9:94:71:ac:c9:fe:1b:4d:b9:96:0d:56:0e:80:
81:a4:03:b5:95:80:bb:b6:be:65:24:18:71:90:18:
75:08:79:03:fd:25:1a:83:e2:64:cd:85:c4:96:58:
46:19:a0:3d:47:bb:93:90:33:e5:43:a8:63:90:78:
88:83:c1:0e:f1:2d:c8:73:87:01:e0:b4:97:35:20:
73:4e:15:b8:3c:55:53:14:f4:8a:00:bb:d0:12:2c:
a4:25:b0:ca:dd:aa:03:58:0d:bb:c7:29:a8:b7:2b:
0a:47:09:85:e7:75:bd:69:a3:d8:86:35:8c:75:84:
92:b7:eb:d2:d9:d7:4a:14:41:af:75:6d:7d:7d:c8:
3a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DF:B6:73:DE:E1:EE:A1:9B:A9:C8:33:47:33:32:67:C0:EE:46:D2
X509v3 Authority Key Identifier:
keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1b:f6:30:63:17:f8:22:fe:15:0c:35:33:92:d5:4b:cd:e4:
b3:f3:ff:4e:4b:a9:8c:38:c9:a8:34:e8:8d:0c:9c:a4:c8:80:
4f:1d:75:0d:c8:22:f4:50:59:2f:97:80:26:d1:eb:12:dd:1f:
e4:88:60:18:be:0e:d9:16:a4:5d:06:f8:45:1a:d6:07:5b:90:
9f:06:e4:85:a8:db:14:12:81:cd:74:04:9a:74:35:04:dc:25:
61:01:f7:c1:a2:9c:04:33:6f:f7:05:f7:33:74:56:2d:6c:58:
a6:f6:e0:ef:3b:6c:4c:6c:f4:43:79:5f:3c:6d:f6:77:8d:69:
93:77:e2:23:6b:9f:c3:03:0a:50:62:0e:4b:c7:9b:24:93:93:
7f:fe:61:ab:ff:04:0a:c1:e3:b2:e9:76:d3:b9:98:11:b5:a0:
99:38:c9:25:ed:99:3d:fe:18:df:0b:33:29:70:2a:01:0d:a4:
ea:51:f7:a9:c5:8d:08:26:b2:d9:70:96:a7:20:ba:8f:e4:d2:
ad:15:56:dd:c1:98:cc:dc:1c:bc:0a:72:97:8b:a6:c0:24:63:
14:ae:73:10:c8:dc:24:f3:0f:21:7d:4c:7d:37:27:4a:7a:3a:
f7:0d:dd:02:09:c9:4a:b6:05:d8:8e:02:3f:a2:26:a0:28:06:
36:6c:28:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:53 2025 by rpki-client