Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
File: S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json)
Hash identifier: BmFuKukWQFyUJdiB3OHy+1Y5TYpOaNJ3ohqOuWZcp8c=
Subject key identifier: CA:F2:0A:B4:36:84:76:0B:66:7F:1B:44:8E:29:82:40:C8:54:9E:31
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial: 019A52D153057DE4DAA9C77E8C696B1D6768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
Manifest number: 02D4
Signing time: Wed 05 Nov 2025 07:00:41 +0000
Manifest this update: Wed 05 Nov 2025 07:00:41 +0000
Manifest next update: Thu 06 Nov 2025 07:00:41 +0000
Files and hashes: 1: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: Wl2fuTy2zD2/AFRBWVkZowAVuUgeUZ7FYKr83t5qbFo=)
2: zO8Iwb0BsWTcNVLMLIiP_wo8DJM.roa (hash: OPJwqPTjOpu2TkWSPAK04GvaPgxXe8e980q4NWTbl0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:53:05:7d:e4:da:a9:c7:7e:8c:69:6b:1d:67:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Validity
Not Before: Nov 5 07:00:41 2025 GMT
Not After : Nov 6 07:00:41 2025 GMT
Subject: CN=caf20ab43684760b667f1b448e298240c8549e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:b9:18:0b:4d:82:f0:61:98:bc:88:bc:be:
a8:c9:5b:93:c5:40:2a:7e:c1:95:da:08:e9:50:a5:
b8:96:20:a8:53:c6:2d:56:f7:04:3c:4d:30:6f:9f:
6f:b9:8e:00:86:b4:88:8c:83:27:f1:9d:ab:12:07:
d3:00:e0:98:f0:e1:f0:88:68:fc:58:97:45:aa:05:
bf:7f:71:69:66:78:4e:10:61:0c:ca:f8:3b:09:c2:
92:81:2a:e4:83:79:b8:7b:82:84:c6:30:1a:ef:e6:
40:45:2c:50:29:27:ab:1a:9a:5c:d1:f4:ee:cb:1d:
7e:8c:58:2a:5f:e1:83:88:e3:9a:ba:0c:b5:0e:55:
bc:9a:e5:ef:c8:cb:55:7b:ae:b6:5d:da:f1:4e:4d:
c9:de:62:ff:87:fd:d7:40:81:84:a0:de:ab:a9:7e:
99:d0:aa:ae:38:7b:b7:0a:b9:44:6c:3a:73:90:80:
a8:2c:74:f7:ec:b8:c6:72:11:56:07:6b:e8:ef:63:
61:46:c4:6a:a6:09:9d:27:b2:ed:4d:48:89:d1:a3:
f4:97:ee:e8:de:6e:27:5e:c4:11:e3:35:5e:6e:b9:
6a:96:10:d5:e1:43:a0:68:0f:51:86:86:99:d0:27:
52:d6:2e:da:b0:ee:51:72:e2:26:16:af:e6:61:85:
ef:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F2:0A:B4:36:84:76:0B:66:7F:1B:44:8E:29:82:40:C8:54:9E:31
X509v3 Authority Key Identifier:
keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d5:2d:7a:e0:8a:2e:dd:2d:14:32:aa:61:5d:fd:53:09:8e:
9f:f7:62:86:08:17:1f:66:38:13:2d:2f:7f:e8:a1:9d:df:54:
12:dd:25:78:b1:4f:eb:70:b4:2a:76:5b:56:b2:90:60:cb:f1:
c0:32:9d:a9:27:ca:3d:0c:dc:66:7b:95:0e:49:01:fc:01:d5:
52:13:96:ed:23:48:aa:1b:6b:6f:0f:42:96:fe:8f:27:47:03:
d1:64:10:ac:ae:ef:79:78:e6:86:a9:60:86:93:35:8d:3a:40:
dd:0b:75:7a:96:4f:93:3f:00:fa:b1:5e:05:19:ea:b1:67:2a:
8d:3b:9e:ad:1b:cc:77:95:b4:be:b4:5a:91:d6:3b:47:b1:b1:
4a:54:8a:bc:df:2d:06:74:93:a1:b6:b2:86:4c:4e:2f:c5:46:
0a:6d:59:97:8a:73:d0:84:a5:e5:97:66:ca:fc:65:15:8e:56:
29:9c:d3:25:84:cf:df:40:bb:35:60:b6:54:c6:f0:2c:23:e3:
3d:5f:2e:3d:0d:7e:e9:81:99:90:91:51:f1:ab:76:44:2f:97:
03:6b:19:af:75:1a:7a:87:bd:73:3e:ad:7d:7d:b9:d5:c6:22:
e0:5e:d7:6b:8a:4f:66:b2:1e:10:4e:0b:64:8f:b0:bc:72:7e:
06:00:9e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:51:01 2025 by rpki-client