Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File: S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier: hzhSvE4KVDFCFaYueBC305HblIG/8WBJgRRrCc7vOpA=
Subject key identifier: 1A:04:4C:7E:80:69:55:D0:74:62:76:AE:2F:9E:68:97:D9:69:A8:BE
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 019A7301925A6189C2D001562494554968C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number: 173B
Signing time: Tue 11 Nov 2025 13:01:14 +0000
Manifest this update: Tue 11 Nov 2025 13:01:14 +0000
Manifest next update: Wed 12 Nov 2025 13:01:14 +0000
Files and hashes: 1: 0hP_n0pnEZN4K6poUlA-xqEv6yE.roa (hash: F/NswoqCQCtEeweJPN7XVnbp503CyUvfgOPod22wDEM=)
2: IfSKWBwWV6QcVsRSMjJ9wGMbUUk.roa (hash: HjUM6VN/VoF4kqrbPTW3NPTllgIWYUt/BGC2HsAIgNk=)
3: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: 8v/ogU+e03KzvaGc5LMsUMcx6dm/OXBYz0Tw2oJHT3Q=)
4: eiTWJKHAu5xriuE2QvW7x5YIzOU.roa (hash: s87ilBuA43+J3H8PQ6AAVQPStmwyHIxSZQ+1oBAYKOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:92:5a:61:89:c2:d0:01:56:24:94:55:49:68:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Nov 11 13:01:14 2025 GMT
Not After : Nov 12 13:01:14 2025 GMT
Subject: CN=1a044c7e806955d0746276ae2f9e6897d969a8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:5c:ad:20:60:d2:ef:ac:7a:23:ff:b8:4a:
d8:77:f1:03:f8:30:1a:9a:b5:56:5e:ba:f4:28:78:
be:ec:da:a4:b7:47:92:aa:d4:99:fe:3f:c9:96:7f:
63:d1:25:13:c7:e5:41:73:65:7f:d5:76:83:6d:99:
1f:0e:f1:23:51:22:b3:fe:43:3e:6f:18:7f:dd:bb:
23:02:ff:67:34:1e:74:30:6d:c4:a4:ea:06:0c:10:
18:ef:93:ac:c3:f7:0f:0d:45:5a:5e:17:e6:ce:26:
6d:49:72:d2:66:ec:17:af:d5:cf:8b:49:1d:d8:46:
0d:b5:ea:5c:4c:56:40:d9:7f:ae:87:5e:e8:a3:43:
d2:0c:4b:5e:fb:8e:14:51:79:47:39:8c:ae:5e:30:
db:9e:56:ec:e5:5d:4f:9f:0d:53:d4:ee:4f:61:52:
b1:95:f1:cc:d8:6e:ea:1e:93:b4:3e:4d:03:e9:93:
69:ac:66:86:d9:14:a8:54:65:53:c9:c5:4d:37:39:
3a:f0:9c:84:9b:fa:5a:33:bf:46:99:d3:38:70:f6:
fb:03:c4:bf:81:76:27:b6:6b:87:70:f7:97:19:36:
29:20:30:ab:5c:80:84:02:59:cd:64:98:c8:41:c0:
8b:53:7f:bb:7c:ea:55:ec:3b:ce:89:75:eb:ea:e9:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:04:4C:7E:80:69:55:D0:74:62:76:AE:2F:9E:68:97:D9:69:A8:BE
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a1:c6:28:76:b8:c8:5a:1d:36:47:a9:1d:83:6d:7f:19:72:
5e:ca:58:29:72:68:82:43:fd:2d:b5:71:8a:38:49:d7:3d:28:
12:06:ee:42:76:ad:7f:3d:7f:70:a1:55:7a:41:24:a8:e7:5f:
86:3f:04:dd:6b:f1:a1:b0:89:e2:31:12:3d:42:ac:5d:6f:62:
eb:64:f7:29:79:79:a6:f0:dc:3f:24:9d:b5:55:93:bb:de:d5:
1c:f6:e5:31:ce:b9:3e:3e:f5:6e:71:db:ca:57:55:10:be:60:
30:cf:19:4c:d3:3d:23:53:19:09:ab:1f:2b:b4:66:90:dd:c3:
de:01:05:3a:42:66:77:33:33:43:11:10:26:2a:9b:c4:f5:c1:
c7:21:2a:1f:68:5d:4a:db:24:d6:20:ff:ae:c1:0a:c1:a0:aa:
c0:e1:04:1d:86:15:c0:30:0b:09:31:43:ca:da:1a:16:7f:03:
1a:91:ff:25:98:ee:05:3b:28:ef:0e:72:d3:95:93:a4:4b:1f:
58:00:51:cd:a6:28:6d:69:b5:eb:74:eb:34:f8:41:17:99:7f:
23:91:dc:9c:4b:cf:19:b0:c6:47:cd:05:77:22:9e:90:3a:1e:
67:d1:57:a8:88:16:0a:b9:96:1b:d8:d3:6e:74:ff:d6:79:38:
7b:75:d4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:44 2025 by rpki-client