Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
File: sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json)
Hash identifier: tqq+hdmC9BfR4xKKFRhaoKY/lT8/qHbiBNe8yOHLZGo=
Subject key identifier: C3:B4:25:D6:FB:65:84:04:4D:C6:73:30:75:C4:BE:73:01:B9:A3:10
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Certificate issuer: /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial: 019A29672793285463D99D76E2A8BDD980FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 06:00:17 +0000
Manifest this update: Tue 28 Oct 2025 06:00:17 +0000
Manifest next update: Wed 29 Oct 2025 06:00:17 +0000
Files and hashes: 1: 2T5PZV0ykQrCqtWQsuyltR-_EP0.roa (hash: adHBBG4DTLEXzzbMMTMmfqzyorTjLSxY7EK7i8wkAJ4=)
2: fOGaYfmCbgoyUIfYq0nj6dp3ggs.roa (hash: k+pBFiGRIlpDeHFyJ2TjGWDmfTvqV2e7W4zXwUECFg0=)
3: hu6cElB5t5xLfzkwp-1E2pD6XpI.roa (hash: kdn6w5+MgRdzoZY9M3/FnbfXPKK9TjtWqwutVLtON4g=)
4: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: +Yizk9LY/Dyk994kKHgwhpBddBqHEkmNGny6WEMxtT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:27:93:28:54:63:d9:9d:76:e2:a8:bd:d9:80:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Validity
Not Before: Oct 28 06:00:17 2025 GMT
Not After : Oct 29 06:00:17 2025 GMT
Subject: CN=c3b425d6fb6584044dc6733075c4be7301b9a310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:08:77:58:ad:17:8c:c4:60:78:77:3a:d7:
f2:73:9d:09:1d:8a:61:64:79:e3:85:04:d6:27:fa:
54:52:7f:c2:0e:dc:94:35:4a:a0:11:66:79:2d:09:
db:13:eb:9f:d4:d8:c8:e8:00:37:b2:98:62:02:b1:
92:00:78:b0:d1:38:fa:5c:26:c5:6d:15:bb:9a:bc:
50:fb:d1:38:4e:f1:66:77:34:7a:ca:a9:d2:8f:e7:
37:f4:40:f4:ee:ca:65:33:47:59:0e:53:fc:db:bf:
6a:14:d6:10:17:1f:ae:15:20:a7:ef:65:7d:c3:3a:
05:3d:22:f2:1e:5d:ad:72:3f:18:7f:1a:ee:ef:a0:
9d:23:b0:e2:80:5f:0a:68:6d:ce:46:56:89:e1:80:
d7:6c:0f:1c:62:8f:6a:2f:6f:2d:2c:af:3f:7c:40:
b5:c1:92:47:fe:dd:0f:73:f0:7f:70:84:e5:31:24:
e8:aa:25:2a:4e:0c:4c:ce:d3:30:f6:cb:02:7d:c6:
14:aa:ce:8c:27:fa:51:10:45:41:68:6b:49:ab:bc:
77:7b:c2:da:76:74:a1:f4:ef:6d:51:b0:da:79:4c:
ad:c3:c7:02:64:cd:0d:48:b9:b0:f0:cc:66:bf:cc:
56:43:84:09:e6:60:67:b4:38:28:a8:15:b8:6d:f2:
c1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B4:25:D6:FB:65:84:04:4D:C6:73:30:75:C4:BE:73:01:B9:A3:10
X509v3 Authority Key Identifier:
keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c2:dc:89:5b:4e:76:57:a3:8b:51:c7:3a:4a:f7:bf:b6:6d:
e8:a9:6a:18:9b:bb:ff:54:15:a4:27:ab:d9:97:4e:c1:64:d4:
17:5d:d3:04:8f:4b:ad:c8:86:1e:06:69:87:98:57:bf:d0:37:
82:ed:50:83:f6:61:c7:1a:b9:7b:8d:58:2f:23:d5:17:59:19:
f1:bc:5c:fa:bf:6d:26:ee:1a:27:0c:a7:f2:8e:32:7e:00:61:
ae:cf:f0:97:d7:49:19:8a:09:c7:ae:6d:59:94:8e:f1:db:f5:
47:d2:3f:ce:6a:eb:7f:8b:cc:15:58:4b:67:39:b6:bb:62:fa:
bf:97:19:09:55:18:a9:dc:b0:3c:d2:4e:d2:21:aa:65:49:74:
a2:6b:a3:94:be:aa:12:b9:18:5b:c4:98:7d:c8:f8:51:34:1c:
de:4b:ad:95:d8:5d:fb:33:a2:71:76:04:54:5e:09:51:cd:b8:
e4:de:0c:01:ca:5f:4d:39:ba:d3:74:bb:b5:48:72:18:ee:87:
2c:55:1f:3e:7e:ff:71:3f:72:16:58:a2:d2:f4:91:d2:cf:0f:
24:ba:1b:9b:16:fe:f0:80:c6:e7:b6:42:ec:32:7d:7e:b8:dd:
54:a8:58:f1:b1:4d:ca:b5:94:02:c2:32:2a:73:fe:5e:9b:a2:
42:35:39:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:20:59 2025 by rpki-client