Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
File: sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft (raw, json)
Hash identifier: d8z/A/TS1PwhQxOIR/WWkZoP0Bes3+02Q8pRQE/PHGY=
Subject key identifier: 04:FD:9D:E2:11:ED:4A:CB:2B:95:35:29:30:7A:B6:8F:9E:5B:68:4F
Authority key identifier: B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18
Certificate issuer: /CN=b162156f59cfc79396e64f3342de64de3f88ee18
Certificate serial: 019922C33B1C22717464F7BB3420B8AAA5B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
Manifest number: 0621
Signing time: Sun 07 Sep 2025 06:00:43 +0000
Manifest this update: Sun 07 Sep 2025 06:00:43 +0000
Manifest next update: Mon 08 Sep 2025 06:00:43 +0000
Files and hashes: 1: bx_l27hAP8O-cN20bSgkC97xE0w.roa (hash: CvRYAhtCHrK4e4xO6GAddJnUj7IW4xcxplg1YukPV2Y=)
2: sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl (hash: CVbcFX9hUVJTuu1SYiMzSjARZW91CRLdJ/nFaicN2tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:3b:1c:22:71:74:64:f7:bb:34:20:b8:aa:a5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b162156f59cfc79396e64f3342de64de3f88ee18
Validity
Not Before: Sep 7 06:00:43 2025 GMT
Not After : Sep 8 06:00:43 2025 GMT
Subject: CN=04fd9de211ed4acb2b953529307ab68f9e5b684f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:96:3b:bb:6e:3d:81:00:ee:64:00:d5:d1:ac:
f4:4c:66:57:0c:40:5f:19:a1:21:d3:fe:31:e8:07:
29:6a:7b:75:1c:9e:43:57:58:14:9b:a9:31:ef:4e:
24:f2:4f:3a:4c:50:91:6d:a0:40:6f:8b:f9:dd:00:
a0:84:ed:92:4a:a3:26:dd:2f:aa:06:07:a7:a0:4b:
64:27:5a:46:fd:79:0a:a1:9a:ac:b7:b7:a4:8a:67:
cc:e3:df:e9:1a:85:de:83:3f:d4:df:53:cd:5d:81:
16:2b:06:12:84:cf:b7:52:37:01:77:90:33:d7:45:
16:19:73:9a:50:83:4e:a0:2e:3a:77:ca:b3:73:0a:
5f:69:4a:c2:71:ae:a8:b7:57:10:02:3c:91:fc:ae:
b4:f4:e0:fe:a9:fc:6f:f6:07:93:eb:ef:0c:4a:30:
1e:72:0d:4f:66:9c:3d:5b:80:56:9a:93:5d:bd:1f:
56:9f:bd:87:fe:0e:9b:93:72:48:b4:bd:9e:d8:0d:
0b:fe:6f:7f:72:78:8d:31:3d:7f:14:77:37:80:e2:
fd:a7:c3:1d:70:b8:fc:b7:57:40:b2:dd:81:7a:e1:
ee:e6:67:70:9d:57:77:a0:d4:c6:4d:a0:69:6d:c2:
41:76:ab:52:b8:73:25:a7:43:58:5c:37:07:7d:96:
eb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FD:9D:E2:11:ED:4A:CB:2B:95:35:29:30:7A:B6:8F:9E:5B:68:4F
X509v3 Authority Key Identifier:
keyid:B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:db:48:0b:41:79:91:e1:e9:9e:5a:db:55:2a:ce:90:c0:0e:
69:61:23:6e:b6:35:aa:0a:7c:7c:58:76:b8:eb:b9:0c:0d:97:
e8:f1:0e:ef:c7:44:5d:b8:be:84:d9:66:5d:80:7f:26:09:e0:
dc:44:ff:ef:2a:4d:d2:4a:de:db:58:f6:5a:97:dc:ae:42:92:
3c:cb:ad:de:af:c4:41:a7:33:09:bf:5c:3e:41:a1:3e:dd:5e:
45:1d:95:91:a6:72:d8:5e:af:2d:52:e7:2a:63:16:d8:21:4b:
59:58:af:22:8e:4d:d8:5a:b2:ef:07:03:6f:12:fc:88:cb:54:
bf:12:c7:3f:b6:f9:19:4c:b1:6b:42:4b:1a:08:6b:c0:cd:e5:
d9:90:51:6b:77:2d:22:fe:a4:c5:5d:0d:70:b4:be:a6:af:67:
c7:44:cd:73:30:bb:40:f7:3f:c8:38:13:58:24:1f:ae:1f:16:
af:35:3b:e4:43:10:43:b5:4d:be:32:53:7b:13:52:65:26:83:
c8:21:92:53:db:54:72:95:c5:0f:34:39:1f:1c:a3:fd:c5:7c:
d1:35:3a:42:2a:b5:f3:a8:0b:37:9b:97:9f:6c:d6:6e:99:c7:
c6:13:77:61:26:a4:89:41:36:eb:1f:1a:9e:ab:ee:f3:32:09:
68:2a:6f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:11 2025 by rpki-client