Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft
File: srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft (raw, json)
Hash identifier: H1qG42P5YkeeJhe+afADpgTLu5HvYLew+TdzAHqTBKQ=
Subject key identifier: 66:A8:63:26:87:43:0E:C3:76:C3:56:4A:01:38:98:5C:F0:05:69:6B
Authority key identifier: B2:B5:DF:65:05:2C:E9:4A:37:A8:50:79:47:C5:27:F0:CC:FF:A5:22
Certificate issuer: /CN=b2b5df65052ce94a37a8507947c527f0ccffa522
Certificate serial: 019A71B8E2CD0986D6A0D9FB9D7268F60353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft
Manifest number: 11
Signing time: Tue 11 Nov 2025 07:02:13 +0000
Manifest this update: Tue 11 Nov 2025 07:02:13 +0000
Manifest next update: Wed 12 Nov 2025 07:02:13 +0000
Files and hashes: 1: srXfZQUs6Uo3qFB5R8Un8Mz_pSI.crl (hash: mACN+AWQSlNQfF4dllfaOySe+yPaumwlyJxr1Hts5rA=)
2: zXAq3vkN_gcHOS3Bhh3xlgW3vM4.roa (hash: Udoboc8aZE7E7SL94DHmtXVyLEipg3wZ7Pa2hKpsaLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e2:cd:09:86:d6:a0:d9:fb:9d:72:68:f6:03:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2b5df65052ce94a37a8507947c527f0ccffa522
Validity
Not Before: Nov 11 07:02:13 2025 GMT
Not After : Nov 12 07:02:13 2025 GMT
Subject: CN=66a8632687430ec376c3564a0138985cf005696b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:af:a5:d9:a7:0b:ca:c7:2f:9d:7b:06:b8:
db:39:73:23:7a:d9:ed:c5:16:9b:47:14:2b:da:bf:
ea:56:b1:eb:85:1c:35:22:9b:2b:db:bc:45:e4:7d:
f5:d1:aa:33:c7:82:f2:01:d4:6b:d4:9e:ee:78:d6:
4a:cb:dd:35:c0:a7:9f:84:bd:20:0f:54:a0:55:3b:
50:01:41:7c:03:de:79:a0:64:5d:50:d7:31:63:f3:
92:94:40:09:6e:2e:4f:4b:ae:ed:2e:86:6e:9a:42:
3c:1b:56:fc:79:17:78:ea:eb:44:94:40:d2:54:c7:
41:f9:e7:b6:62:6e:31:ca:d4:b4:d5:29:f0:4d:a1:
ca:3e:6d:86:b6:da:eb:6f:d4:77:d3:91:8b:10:44:
31:ae:e9:c2:7f:20:4f:d0:f3:3e:f3:2b:e9:8c:6d:
93:f1:e0:0d:95:45:b3:76:97:b0:bd:c9:75:98:a0:
93:b9:ac:e5:cf:06:37:f7:16:9c:fe:f5:db:51:87:
e1:64:7a:e8:f6:16:e7:b7:21:ee:23:a6:30:3f:e9:
15:07:1c:3b:bc:b0:21:3c:26:8f:bc:64:96:46:ae:
f2:c6:52:bb:c0:1d:45:40:9a:c0:80:79:3b:f8:e2:
08:97:45:45:c9:50:71:cc:3c:a4:73:fa:06:bd:41:
08:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A8:63:26:87:43:0E:C3:76:C3:56:4A:01:38:98:5C:F0:05:69:6B
X509v3 Authority Key Identifier:
keyid:B2:B5:DF:65:05:2C:E9:4A:37:A8:50:79:47:C5:27:F0:CC:FF:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2b:b9:c4:f5:99:fa:a6:b2:7b:e2:0d:10:c7:6d:aa:bc:f9:
cc:a3:fc:e1:b4:92:fc:62:4b:13:23:1a:5d:7e:07:5e:bc:45:
30:57:cc:3c:dd:11:fe:82:78:5c:08:48:de:05:bc:db:3e:4a:
3c:d2:f1:6b:20:5b:86:09:1f:93:a9:cf:5f:11:8f:de:8b:43:
6f:15:c0:97:e4:63:7c:6d:39:c7:4c:d6:14:7d:0d:7d:1c:3a:
d4:26:3c:8f:75:e1:cc:84:c4:ed:93:9e:0e:50:ec:eb:0c:55:
03:44:ae:e8:06:79:0a:6f:43:7d:64:e2:df:4c:65:ca:e6:ae:
75:1e:f6:aa:6f:35:8b:7d:0a:93:04:b6:2c:6d:42:a6:b7:f7:
15:7d:13:e8:a1:42:f4:72:51:e6:12:3c:c8:a3:84:c4:ab:00:
7e:70:01:59:c9:e3:67:7b:f6:a4:8b:7e:92:70:ea:c8:b0:00:
16:0b:85:82:53:02:3c:5d:07:ab:e9:83:54:e8:2d:2d:cd:fb:
3b:02:a7:f4:4e:0a:c9:7e:38:7b:75:b7:bc:0d:fd:ff:79:9d:
f5:35:68:77:0c:0f:35:bb:2e:1b:c7:dc:4c:60:fa:41:08:4d:
be:29:7f:1b:62:7b:68:6b:4d:a5:d9:67:65:94:52:42:f2:13:
d4:54:86:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:25 2025 by rpki-client