Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
File: Sn94dtTFVUt3Klfn8cTO03-14Z4.mft (raw, json)
Hash identifier: MsRIXFNHitB4tzIhRKpuG8TN0vNRj04krqUVHsnK/Cg=
Subject key identifier: DA:A4:7B:07:AC:2A:93:DD:F1:56:81:D4:1A:34:F2:DB:E2:48:85:4B
Authority key identifier: 4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E
Certificate issuer: /CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e
Certificate serial: 019A71B7D93E04DCD15A1309C85375372B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
Manifest number: 099A
Signing time: Tue 11 Nov 2025 07:01:05 +0000
Manifest this update: Tue 11 Nov 2025 07:01:05 +0000
Manifest next update: Wed 12 Nov 2025 07:01:05 +0000
Files and hashes: 1: 8dRpFL3Tx6_eHYDV0GF9jVjNRKU.roa (hash: CYL1YeCCG8xFxfjQulVKl6xa2WJtFP2ORTHbcUggMA4=)
2: Sn94dtTFVUt3Klfn8cTO03-14Z4.crl (hash: 7i2wgXrNrVXIy0Iyuk5HVhYwMVZ1qMzrk/q6nDrq3aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d9:3e:04:dc:d1:5a:13:09:c8:53:75:37:2b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e
Validity
Not Before: Nov 11 07:01:05 2025 GMT
Not After : Nov 12 07:01:05 2025 GMT
Subject: CN=daa47b07ac2a93ddf15681d41a34f2dbe248854b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:19:0c:df:63:8c:1e:1e:23:41:41:d8:de:30:
72:ef:31:6a:e1:40:75:8c:eb:1c:63:d3:16:47:fa:
a2:72:b6:c9:87:96:12:dd:54:07:34:ec:e9:4b:4b:
e2:6f:98:5c:fb:5f:38:fa:24:9f:aa:8d:ff:6f:d2:
e5:f8:13:c6:9f:e8:c6:68:dc:83:d8:43:09:2e:ba:
b7:fb:b2:48:85:c5:2a:c4:b0:6d:df:61:7e:c6:7a:
5f:0b:b4:14:db:f8:af:75:af:19:49:22:ba:11:dd:
53:3c:99:72:34:05:5b:b3:d7:00:a8:d4:9e:21:ce:
32:f3:1c:fe:5f:a7:63:f0:e9:58:40:94:c6:b7:50:
a8:52:b5:e7:27:71:f2:d4:71:5d:e0:50:26:31:79:
43:2c:13:40:e4:94:7b:90:83:c1:16:58:cb:97:07:
d9:3f:40:3f:34:a0:1a:f3:5c:3d:94:93:f5:b9:bc:
5c:74:c8:e8:d3:11:11:2e:7c:09:fb:c8:93:b5:51:
98:8c:dc:34:b5:fa:ea:f9:4d:d5:34:b1:56:5c:0d:
b2:54:22:17:24:88:d7:86:2f:08:9c:f4:c2:c9:79:
c8:77:d3:b6:62:71:00:b3:32:40:50:b8:fc:cb:93:
56:dc:3c:42:5e:55:92:1d:12:7a:01:0b:31:c1:3a:
03:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A4:7B:07:AC:2A:93:DD:F1:56:81:D4:1A:34:F2:DB:E2:48:85:4B
X509v3 Authority Key Identifier:
keyid:4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ac:d4:ab:e1:ef:92:81:39:11:ad:e4:c9:60:8c:de:19:86:
55:3f:dd:e2:7f:96:a6:96:31:8f:d4:87:9d:b2:12:ac:b3:44:
a8:0b:ad:cf:29:78:3b:b4:72:28:39:b9:f0:ea:37:b4:37:94:
f9:b3:9b:8e:f0:1a:1b:6c:a8:c6:9b:cb:3e:41:ed:e9:64:12:
82:e2:d1:fe:82:60:e8:37:2b:48:b3:6f:8d:b6:49:93:f7:e9:
de:99:e8:04:6d:2b:fe:1b:d8:93:aa:08:55:89:1c:3e:e6:bc:
c2:b0:ce:86:e0:45:e1:34:05:5b:f1:5f:d8:b7:be:1a:8b:a8:
d7:e3:52:25:6a:eb:d4:1d:c6:16:31:24:81:86:dc:eb:14:9d:
91:b2:e3:d5:c8:1a:07:18:d9:41:b0:88:29:8e:74:cf:e4:c7:
3f:28:28:0e:80:9e:58:13:0d:78:f0:11:27:ba:f4:7d:6e:6f:
2d:3b:9d:a5:48:bb:41:03:46:dc:bc:56:a7:40:de:8b:bc:ab:
aa:c3:d7:60:5e:dc:ec:8a:50:fb:9e:ab:11:d1:9d:a4:32:55:
54:2d:4e:d8:66:c0:fc:61:f1:62:d0:0e:a0:bd:04:91:65:22:
4d:54:6d:82:77:17:18:9e:9e:f4:b8:03:cb:68:9d:bf:78:44:
d8:0a:f3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:08 2025 by rpki-client