Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
File: SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft (raw, json)
Hash identifier: 5hJD2NnCUwwZt4dmfBGA4RXXUI0MlX31Q2pULFAb3Yw=
Subject key identifier: 31:E5:B5:79:D7:00:AC:FB:64:B5:80:F7:75:29:59:09:8B:77:AF:6F
Authority key identifier: 49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
Certificate issuer: /CN=4978d328bcde5294f372765c11aeef28155b0f02
Certificate serial: 019A71B826AE44E04B42D2CEB21CDF8BF196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: 2TabSpltHUMp_5ejqOpWZde5yuo.roa (hash: 3/hdPalq/aa4mw4O394+y1isU6rPiSjjsa/MhWeedzA=)
2: SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl (hash: nIfGbpgJ/tnc/yC4NEp5HoqgHGkYNNBG3XyNAoQdtAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:26:ae:44:e0:4b:42:d2:ce:b2:1c:df:8b:f1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978d328bcde5294f372765c11aeef28155b0f02
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=31e5b579d700acfb64b580f7752959098b77af6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:7f:04:4e:32:2c:b5:57:7d:77:e8:30:c8:
04:e1:d0:cb:d7:5d:10:0e:9d:e8:73:85:26:f0:ed:
2e:44:b1:20:78:16:bf:5e:24:ca:89:7e:d8:97:27:
48:bd:61:94:ac:b4:b1:fe:55:13:52:8b:8b:ae:be:
39:19:49:87:9d:43:af:5d:ee:ab:7e:06:68:87:5f:
85:53:92:4f:1c:e8:ef:65:8e:9d:79:76:7a:90:ca:
27:4e:1d:b9:13:2b:6c:5c:0c:2f:e2:00:14:6e:1e:
9e:80:21:7c:39:74:d4:fc:fa:81:f5:6e:f5:66:fb:
6e:14:3c:fa:8b:3b:1e:1e:3b:3f:b1:41:2b:b3:dd:
d4:71:e9:e3:ca:f2:15:ca:05:74:9b:2d:20:80:61:
2a:a6:1f:35:94:1b:66:80:2c:a5:f1:ff:91:73:ca:
53:7a:04:f9:08:d1:7a:f5:51:de:e9:d1:48:71:ab:
93:64:97:1d:cd:74:7d:94:09:19:ce:47:f8:fd:de:
16:4f:58:33:63:74:ec:51:dd:f1:4e:aa:dd:43:18:
37:a4:24:16:b1:91:63:93:9a:96:b0:17:8b:89:39:
87:30:20:27:e4:d0:af:f3:54:5f:36:69:74:09:98:
83:54:04:43:61:e8:bf:eb:e5:67:8a:5c:c4:a3:68:
29:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E5:B5:79:D7:00:AC:FB:64:B5:80:F7:75:29:59:09:8B:77:AF:6F
X509v3 Authority Key Identifier:
keyid:49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:1f:10:a2:c6:bc:b7:d3:74:cf:88:de:4c:f6:99:34:c9:8f:
3b:40:ea:b0:1e:9b:88:05:89:69:32:e9:80:6b:c9:30:f8:85:
06:4f:8e:b0:82:00:e0:d5:38:3e:fc:cc:8f:bc:b5:f5:14:e0:
d4:32:c8:5b:99:96:13:a5:54:0e:61:b3:1b:1e:f1:d3:25:45:
ba:a8:43:48:ef:2f:d2:1c:45:2e:2b:6f:7b:8d:1b:30:84:a8:
e0:3e:5b:90:69:53:cb:d7:3f:8f:b2:d7:4b:af:8a:b7:1e:8b:
80:d7:22:40:17:aa:57:09:df:15:be:02:f5:5c:be:b3:c8:a1:
43:06:e2:c4:7e:ce:6a:15:69:c6:85:56:86:ca:8a:47:b2:da:
2d:4b:cc:ac:72:51:5d:59:31:d7:14:c5:84:31:0c:79:26:b4:
b8:82:ad:b6:c7:5c:41:6e:d0:72:90:b1:f4:74:23:76:35:d4:
f6:24:16:f5:db:b0:6f:af:1d:1e:be:82:77:fe:a6:60:be:8d:
71:2f:fb:c4:0d:7c:59:b5:e0:cd:56:cc:5a:b5:20:89:ff:9b:
99:43:b8:89:c1:76:01:1a:12:43:0f:b5:de:78:21:8c:68:3d:
0c:86:3a:bf:44:1e:d5:1d:39:f0:1d:f2:cd:9d:4a:9d:1f:78:
a0:c6:07:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:19 2025 by rpki-client