Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier: 5nKRyet4XZzlIS0PVz2XJ8k7riNCxcdlvJvgvZ2DbWo=
Subject key identifier: BD:3B:EE:56:10:0F:34:55:5E:D5:3D:53:B0:BB:FA:7C:75:ED:21:47
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial: 019A725CC240E393E3F46DC38C530A843835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number: 0418
Signing time: Tue 11 Nov 2025 10:01:12 +0000
Manifest this update: Tue 11 Nov 2025 10:01:12 +0000
Manifest next update: Wed 12 Nov 2025 10:01:12 +0000
Files and hashes: 1: cutf0Yk4GqOLANVUSKcxrSdUxug.roa (hash: Q8Q4U3gD48zecWRmDv6Pw0MZwpRvb60BHrR0/Xs/Hmo=)
2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: suwDewzIl37lyvaVV1M4MRb+Mh3OxxpVCzNTUr39LKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c2:40:e3:93:e3:f4:6d:c3:8c:53:0a:84:38:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Validity
Not Before: Nov 11 10:01:12 2025 GMT
Not After : Nov 12 10:01:12 2025 GMT
Subject: CN=bd3bee56100f34555ed53d53b0bbfa7c75ed2147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:56:ae:2f:e9:9d:d0:8e:5e:55:6b:e3:cb:
28:cb:ba:86:47:bc:d0:c4:e8:22:db:f8:22:d2:85:
da:c5:7f:74:f5:3f:d9:72:d5:4e:f1:11:12:2f:87:
64:94:da:38:67:f6:91:6b:6c:f6:3e:cc:75:96:1f:
fa:c8:14:b3:fb:76:06:d5:e3:e7:a2:18:29:a2:94:
d0:77:0d:b6:bd:df:58:43:20:1f:41:65:d7:2a:6c:
c6:f8:31:3f:c6:01:d7:cd:cc:02:f0:7e:03:01:38:
6c:b8:d5:64:99:db:00:a6:1e:d4:de:e9:e6:fa:e6:
49:c7:66:be:90:3d:c2:8c:cd:b4:14:cd:90:37:bc:
8c:d6:9e:5a:86:e8:14:7e:47:19:6a:df:dd:68:3e:
80:8d:cd:66:1b:af:5c:8f:bf:40:58:dc:68:91:15:
1f:80:3e:a9:b6:76:bc:b0:b1:89:6f:b9:62:32:30:
01:77:1a:05:11:23:1b:f3:a0:1a:18:de:30:33:c8:
1c:bb:50:fc:c5:c8:8c:5b:0b:28:df:1b:50:e3:5d:
dc:f8:6b:c6:11:c7:0c:c7:eb:0d:fb:15:36:81:0f:
06:0b:46:8a:ab:e2:88:65:78:65:64:49:fb:1e:5f:
df:b7:7e:ed:44:ce:6b:10:8f:84:b4:c3:5b:c7:a7:
a8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3B:EE:56:10:0F:34:55:5E:D5:3D:53:B0:BB:FA:7C:75:ED:21:47
X509v3 Authority Key Identifier:
keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:14:69:7e:5c:f0:ee:24:a6:9b:53:f0:15:a8:2c:cb:d1:1d:
e9:cf:28:99:af:15:91:b3:4d:74:6b:48:dc:51:7f:7b:3f:50:
79:8d:ea:7c:c3:d0:55:8a:e6:e0:78:7a:c5:fe:90:59:77:20:
24:4c:ab:88:ff:1b:b0:93:18:7d:9b:53:c5:ed:40:33:4c:f6:
f0:19:ef:45:1a:8f:9d:71:60:83:ba:23:1b:36:63:42:aa:ed:
f6:de:46:5a:d0:81:b6:26:22:68:a6:92:ef:3e:e7:9e:50:71:
7c:cc:69:0f:30:dc:9e:03:da:ca:27:83:6a:70:86:98:5f:aa:
8c:00:07:09:84:e4:d8:05:10:22:21:74:69:f7:f8:db:e1:d5:
2a:a4:ee:8a:be:a2:b7:60:f6:bf:c5:3a:a8:29:0d:15:6d:d0:
a5:1d:20:f1:dc:21:3c:44:f9:04:19:04:64:12:e4:09:10:8c:
95:5c:70:4a:2f:42:91:a9:7d:a1:f5:bb:b5:b5:f5:f2:4a:09:
82:33:4a:0a:0c:25:43:6c:11:17:97:8b:9e:03:4c:d0:20:9e:
fe:c3:32:53:22:35:4f:73:5a:26:e2:7e:00:9f:68:19:e3:7b:
17:b6:25:0c:cc:21:7e:92:14:d6:45:e8:83:e0:bc:36:00:d8:
b2:e6:1c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:48 2025 by rpki-client