Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json)
Hash identifier: n2dFuC7gPd/ImchVKooomXrAROVRhOTC08Gw/0Shd3c=
Subject key identifier: 25:A2:FB:38:CE:52:F2:1F:7B:8D:6F:28:1A:46:6B:87:83:27:AD:F4
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial: 019A4B8590B71AB55EB9E84287AEC593412F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
Manifest number: 170E
Signing time: Mon 03 Nov 2025 21:00:35 +0000
Manifest this update: Mon 03 Nov 2025 21:00:35 +0000
Manifest next update: Tue 04 Nov 2025 21:00:35 +0000
Files and hashes: 1: 1-ltIqDmdRri_JzK-WP35nYk2cQM.roa (hash: 0bK+rteLcuTEscCNCfYnJ6bFxtebRlZJOqtPYrohMPw=)
2: Zkat7ibcLmD2h_0_XMZ8A60Ar4Y.roa (hash: S9WARRHeF7XnyVkRNyrlC/MJ9g6e/aBgMKh17IrDCTs=)
3: kLoSSyOqdGXBSQRo8VZp6L-TiaM.roa (hash: 9hIEwlHhl+bUrm5c0k44GlmKeMVBJgHOI+a/J30MoSc=)
4: kweAulzTrCvxJT9UZzTQmhyNMt0.roa (hash: 6ACNdOW4ObJspcsXRMK8EDpIbxmZVEa19iOYRQQmt+I=)
5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: ZLFLN5efEDXRatBto2AR9508VlPhPvzn+LEO6zV5Dl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:85:90:b7:1a:b5:5e:b9:e8:42:87:ae:c5:93:41:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Validity
Not Before: Nov 3 21:00:35 2025 GMT
Not After : Nov 4 21:00:35 2025 GMT
Subject: CN=25a2fb38ce52f21f7b8d6f281a466b878327adf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:c9:27:74:07:b2:54:52:33:a4:e1:86:e5:
ff:c4:1f:c5:8f:d2:12:2a:6e:03:9e:b7:b1:8c:26:
17:9d:38:88:3c:21:1c:48:bf:27:75:d0:f9:5c:25:
76:12:a2:6f:7c:46:8d:30:7c:6d:57:36:5d:b4:24:
0f:1d:68:9d:2f:60:0d:29:0a:33:ec:60:f4:bd:8e:
64:18:77:65:45:05:5f:bc:85:6b:63:b0:b9:d6:a8:
d3:7d:7c:14:f4:50:0f:8d:07:99:7a:ba:28:bf:f7:
74:2c:8e:1b:fe:29:1c:c4:ef:2b:81:66:27:00:40:
c0:dd:d3:da:ad:8b:64:96:11:f4:90:37:d1:37:6d:
c7:94:19:36:fb:eb:e3:9d:01:5b:bc:c7:e0:40:3e:
c9:58:33:56:be:3a:8e:37:10:b6:5f:b4:f7:97:3b:
d4:b2:5f:29:14:9a:0d:eb:2f:7c:04:20:53:71:a9:
b1:0f:e6:84:6d:51:f4:a7:61:f1:ba:df:f7:ac:d5:
dc:11:30:27:34:e2:d1:2b:d6:32:15:ca:4c:3b:df:
ae:ab:14:49:cf:7e:4e:dc:50:c0:31:b0:b3:fd:d2:
a3:6a:74:6b:05:af:b1:b9:be:4a:fa:85:dd:ab:96:
46:0d:93:7a:1e:61:2e:0b:da:d6:f2:1c:3d:9b:7e:
dd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A2:FB:38:CE:52:F2:1F:7B:8D:6F:28:1A:46:6B:87:83:27:AD:F4
X509v3 Authority Key Identifier:
keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b1:08:89:b2:5d:e5:c9:8a:e0:0b:03:32:63:40:c2:06:1a:
22:d1:54:44:05:2f:16:21:ab:fc:b4:2a:49:da:cb:8b:25:e3:
75:38:c2:8e:d2:77:eb:85:fb:83:8e:4e:5d:89:a8:f0:4e:99:
93:19:14:8d:79:27:17:8a:9e:06:e7:2f:f9:96:a7:93:50:f8:
a1:ad:f7:8d:9e:89:58:de:77:e2:39:13:fc:aa:80:89:ed:0d:
5d:43:04:0b:95:b6:b2:bd:fc:ad:3e:6a:b9:32:7a:16:ec:69:
a3:47:cd:d5:0d:9a:1f:a1:dc:85:ea:01:08:6a:0c:22:60:a6:
48:42:66:74:7c:13:f5:0c:e4:8f:91:8a:04:b8:b5:f9:77:26:
9c:0b:74:85:ba:53:ce:3f:c6:40:89:65:9e:d1:9b:65:55:34:
7b:77:0f:7c:bf:a0:d7:c7:b0:53:fc:b5:bb:86:65:2b:08:5e:
4b:08:48:c7:e2:5c:05:50:3f:fe:ed:d8:b9:65:5b:fa:d1:0a:
e0:ae:c8:58:46:21:69:b0:6b:54:10:2f:59:65:f9:82:8d:46:
9d:02:fa:c3:ef:38:28:80:5e:d0:4c:91:b6:91:de:1d:a9:60:
26:3f:34:11:bd:9a:fa:ad:28:01:47:fd:d6:53:e0:43:68:67:
6e:50:6f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:24:15 2025 by rpki-client