Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier: pyo/Yot71dC+UxHqmAMNCA0AdpCLiWCS1xuXPFOWgSU=
Subject key identifier: 0C:9F:AA:6B:7C:49:5E:A0:55:B4:41:2D:31:8C:B5:D0:6A:59:F0:31
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 019A71EE887701991D0708C50D581DA97C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number: 04EF
Signing time: Tue 11 Nov 2025 08:00:49 +0000
Manifest this update: Tue 11 Nov 2025 08:00:49 +0000
Manifest next update: Wed 12 Nov 2025 08:00:49 +0000
Files and hashes: 1: TtWAkSfWnAdWkPSbjWsj0bQP2Qs.roa (hash: aq+t6Xrt8tsoSTCr/VP5wkOGWF6BiCi7pgwlC8GWdxs=)
2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: 0PxRIpaGmpP+9+RNVr5D3mZO7DhRa6NImw3xnZwmHS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:88:77:01:99:1d:07:08:c5:0d:58:1d:a9:7c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: Nov 11 08:00:49 2025 GMT
Not After : Nov 12 08:00:49 2025 GMT
Subject: CN=0c9faa6b7c495ea055b4412d318cb5d06a59f031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b8:24:45:21:48:75:f9:78:13:28:e5:0e:0b:
bb:98:fd:cf:bd:09:01:2a:2e:6c:a9:ea:d3:2d:66:
ef:b5:14:dc:4f:65:73:15:7f:d3:96:ba:6b:57:a6:
5f:45:f8:4e:b4:54:7e:29:0f:20:d7:29:ba:31:29:
c3:b3:a2:a0:7d:be:c7:62:9c:3b:88:a9:7b:5d:d2:
db:b0:6b:72:1b:c5:0b:c8:92:38:a5:78:0c:f5:7f:
01:fc:de:8e:a8:b9:d9:8f:f9:fc:ae:f7:df:b4:e6:
ef:e3:a0:00:fd:d7:c2:71:04:71:a0:0f:d6:dd:d2:
2c:b9:f4:ed:fa:c7:7e:95:a1:d0:bc:17:8d:a4:e5:
22:f7:4b:b1:04:51:b9:d0:65:2b:46:63:af:5f:d7:
9d:f5:0e:26:51:c0:d3:d9:45:c4:ad:e0:b1:d9:b3:
14:da:cd:0b:f2:ec:67:61:9f:79:ab:df:1d:e2:00:
10:be:b4:b0:2f:44:93:7e:a5:87:2a:08:3a:ef:c4:
0d:40:10:e1:2e:2b:81:85:31:63:84:e9:c1:52:9c:
65:82:a7:ee:80:d9:07:da:61:f3:c9:e1:95:94:ca:
35:7b:c7:39:04:d0:02:1a:1f:24:24:eb:9b:c0:24:
c5:e4:3c:5d:bb:cc:73:f4:f6:6a:cf:5b:29:38:11:
c6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9F:AA:6B:7C:49:5E:A0:55:B4:41:2D:31:8C:B5:D0:6A:59:F0:31
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e3:f1:e7:e0:8d:fb:17:3c:34:45:4a:6f:59:af:6f:3e:7a:
cd:c3:b0:dd:31:ff:eb:86:7b:8c:65:31:50:5b:12:11:a5:b8:
ce:90:ba:21:c5:5d:c8:f6:4c:5c:f2:6b:0e:08:3a:2a:7d:7c:
ab:bf:a3:cf:d3:1f:9f:39:33:50:45:6a:eb:5d:63:1c:f8:49:
16:6c:48:d4:0f:4c:60:d9:37:f8:e6:fe:3f:8a:24:2d:dd:a1:
6c:b2:11:23:cf:ac:f0:84:6a:3d:72:97:5b:ae:45:2c:e4:fc:
d9:a7:13:53:0d:ef:a1:c8:eb:03:2b:8b:0c:00:15:dd:39:31:
68:7d:05:6c:d1:a5:ad:76:1e:31:4a:0b:3b:45:ec:0e:f6:ec:
4d:b9:de:49:8d:0e:a9:b4:58:b6:0f:19:aa:1a:da:4f:ad:91:
db:79:ad:29:62:46:04:6d:ea:98:11:c0:06:49:d4:68:fa:29:
71:c4:aa:f1:6b:10:2a:66:e4:df:61:d0:03:2f:dc:79:89:0c:
6c:8b:9b:2b:34:de:5d:73:50:42:aa:30:f3:73:2e:e5:fd:57:
c1:05:ba:b5:ac:2a:65:3d:f4:49:f2:82:1a:1c:61:fa:89:22:
a0:eb:2f:46:59:ae:44:54:33:c1:73:89:67:62:25:42:b7:41:
cf:f0:5c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:20 2025 by rpki-client