Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
File: sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json)
Hash identifier: 1YhsdfL6+8fVJrmiriPvMy7roOiwbnaWbX2+NzeQtRw=
Subject key identifier: 14:F6:AC:98:7C:F7:9E:6D:45:5C:D6:FC:06:E7:5F:5D:B9:D7:E4:9A
Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
Certificate issuer: /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Certificate serial: 019A240A0AFA35606393ED91B4DCD53E08A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
Manifest number: 1433
Signing time: Mon 27 Oct 2025 05:00:29 +0000
Manifest this update: Mon 27 Oct 2025 05:00:29 +0000
Manifest next update: Tue 28 Oct 2025 05:00:29 +0000
Files and hashes: 1: SX7CKkNX5ke670AWCb1741Boh3c.roa (hash: /+lvUIY6Nj8pitkJ880DAygWMpOJMtNOHpSYINj0dno=)
2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: QyoPhHLYqai9GietwdmIaSZNOLo5zu20c52bQGBnKqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:0a:fa:35:60:63:93:ed:91:b4:dc:d5:3e:08:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Validity
Not Before: Oct 27 05:00:29 2025 GMT
Not After : Oct 28 05:00:29 2025 GMT
Subject: CN=14f6ac987cf79e6d455cd6fc06e75f5db9d7e49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:37:a4:02:6f:49:fb:79:65:80:66:fc:76:41:
48:5e:58:68:4b:d9:f4:b2:15:99:76:22:6a:59:c0:
c6:89:55:4b:80:12:7a:da:e0:6c:98:42:ad:00:b1:
a5:05:c9:45:05:80:76:93:c0:97:8e:5a:94:c3:b3:
1e:cf:87:65:b6:af:4b:7d:f7:d5:90:81:2b:19:8f:
da:7d:68:fb:18:5f:67:e3:9f:34:00:55:2b:53:67:
aa:4e:13:65:0d:1b:18:fc:e3:f5:a9:e1:f8:ad:53:
79:5e:b9:4f:b4:cb:2c:09:d7:ae:82:f0:8d:9d:e4:
54:16:e0:45:95:00:cc:6f:6a:d4:66:21:bc:a3:b8:
a7:54:f9:1c:b2:3f:2b:86:6e:89:59:d5:d0:42:21:
6b:9e:85:d7:aa:9a:1e:47:a1:a3:19:3f:de:c0:3b:
de:f2:64:f3:de:f6:96:04:0c:f3:c4:9a:37:8a:22:
bd:ef:12:3f:e2:99:ec:6e:96:85:d6:4f:84:3b:cb:
91:71:eb:49:fb:d8:07:92:a1:33:24:47:b9:7c:49:
e3:2b:1d:d1:1f:57:06:37:57:95:dd:1c:ca:6f:bb:
65:d2:03:2b:4f:33:27:8c:78:b4:e9:1b:1b:94:15:
95:9b:90:ad:3d:f9:2a:a6:95:51:12:80:87:2e:99:
40:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F6:AC:98:7C:F7:9E:6D:45:5C:D6:FC:06:E7:5F:5D:B9:D7:E4:9A
X509v3 Authority Key Identifier:
keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:bd:c9:fc:82:60:36:1c:41:b7:5f:98:3d:82:25:4f:1f:c9:
b9:eb:02:87:ea:98:c4:83:55:bd:82:dd:52:2e:a2:ac:2b:b6:
d1:eb:77:47:36:37:30:62:bd:61:17:f1:da:bb:09:ca:b0:9d:
e8:6d:75:27:50:ef:e3:bc:2f:17:e8:a0:38:04:2a:df:fc:c9:
c7:ec:48:b6:9f:d7:01:dc:6a:04:11:50:3d:b9:5d:9a:8a:70:
24:de:3f:0e:1a:f4:7a:de:1f:0d:ed:ec:4d:e6:26:ed:8d:a8:
bf:88:6c:b2:3d:33:44:30:3d:20:ab:17:9e:fd:a4:96:50:a6:
7c:0c:42:6b:b8:5a:33:13:40:3c:f3:fb:d9:77:e9:cf:7d:d1:
77:28:d6:6c:52:e1:5e:94:b6:7f:35:e5:31:22:aa:6e:20:55:
27:1d:39:b4:e7:d4:06:88:6f:c4:59:de:b0:bb:67:af:cc:cb:
11:19:3c:98:75:3f:1b:34:32:42:62:92:d1:d5:d3:a7:26:32:
10:cb:e3:03:a9:06:55:b4:88:e8:72:e1:1f:39:6d:04:86:cf:
5c:fa:b9:ae:f2:f0:84:6e:e1:8d:34:29:2f:c9:e7:f7:7d:1a:
9c:ca:8c:f9:58:e5:41:75:9b:e9:12:6d:83:85:21:5d:4c:3e:
c4:1f:eb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:38:59 2025 by rpki-client