Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
File: S82iMJZ8_y7eIXfy0zKvCst-ULw.mft (raw, json)
Hash identifier: aeiwyjHQsKgCujZxoug/GkhIEHWwemUs5qftvgtn47o=
Subject key identifier: 94:6F:11:56:25:14:70:5B:34:06:5E:EA:9A:E0:CB:FD:8A:DA:87:59
Authority key identifier: 4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
Certificate issuer: /CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Certificate serial: 019A7112C9609D3857C6FAAF6B83DC4277EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:00:47 +0000
Manifest this update: Tue 11 Nov 2025 04:00:47 +0000
Manifest next update: Wed 12 Nov 2025 04:00:47 +0000
Files and hashes: 1: Fu8psE_bzNyJ-uC9sx-rTJ-3C5Y.roa (hash: reqjwr/lIQUNR5CfmDP6LbkF/9R8ba/CN2hm8CCraWc=)
2: S82iMJZ8_y7eIXfy0zKvCst-ULw.crl (hash: Cnx/fsL4gCNkTGv1a2oKzLKktN6rUge5cFKsPxovWu8=)
3: zxQl6jvGeb1c6IVFjqYVLDZ62L0.roa (hash: 1fee2j1QaONApl9ibC5gkmW09S49dKdtErXLxO2GvfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c9:60:9d:38:57:c6:fa:af:6b:83:dc:42:77:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Validity
Not Before: Nov 11 04:00:47 2025 GMT
Not After : Nov 12 04:00:47 2025 GMT
Subject: CN=946f11562514705b34065eea9ae0cbfd8ada8759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:9e:11:f7:21:e0:5f:6b:b8:27:58:02:cb:
23:21:ae:41:b2:d7:e5:98:db:a5:7e:71:2b:50:e5:
47:aa:79:cf:cb:f2:1d:c8:f7:89:3c:cd:7f:66:14:
5a:84:1c:58:a2:f2:86:f1:f9:65:63:9f:9a:82:d7:
4e:7c:23:9a:f0:e6:78:0d:bf:0d:7a:43:06:58:2b:
e4:12:e8:b3:1c:67:ae:24:c6:7e:7a:7d:c4:05:78:
83:97:21:41:c1:e3:5b:9c:cd:a5:67:15:2e:0a:3b:
55:d4:2f:c4:b9:5b:7e:c8:df:b4:2e:f2:dd:2f:f9:
3f:53:14:56:db:43:26:ab:09:33:c0:40:75:15:0e:
3f:a8:d0:62:31:60:bf:66:a0:ca:c0:75:a2:c3:a3:
02:1a:94:19:60:90:29:e8:88:14:60:03:82:86:be:
4a:58:9d:65:28:11:4e:a6:25:fb:c1:90:cf:f0:6a:
e2:1c:aa:2c:22:66:d4:ac:62:59:9e:16:2a:e0:6e:
08:1c:8f:e4:4d:13:0a:a8:6f:68:db:f9:a1:a9:d4:
3c:ae:37:fe:27:02:70:cb:e7:cf:f5:ce:1c:da:3a:
08:03:0a:8f:e4:98:12:d1:c0:ed:a1:83:60:5a:73:
a9:80:04:82:c9:84:c7:4b:b1:a0:80:40:80:47:3f:
bd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6F:11:56:25:14:70:5B:34:06:5E:EA:9A:E0:CB:FD:8A:DA:87:59
X509v3 Authority Key Identifier:
keyid:4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:30:80:ae:0a:0d:d9:2b:9d:90:8a:40:f0:f9:ea:0b:58:08:
6a:e5:d5:02:04:47:77:dc:20:fa:7e:b0:e4:95:de:68:0d:cb:
40:cb:75:ff:e9:a5:e8:a2:11:1f:f1:58:d9:99:57:2e:43:87:
5c:ca:0a:d3:af:fe:b0:aa:94:7f:49:6c:c4:91:85:54:5d:15:
81:f4:1d:59:4f:dd:05:fe:06:65:fd:ab:c5:4f:c3:ab:84:e1:
54:2d:5c:9f:58:61:a8:7e:29:11:6a:f7:79:93:3b:dc:5f:3c:
b3:29:22:0f:17:be:32:e7:40:59:00:e5:29:fd:63:f6:6f:b9:
93:fc:62:78:c5:f1:18:2d:26:78:50:21:a8:4c:63:31:59:a2:
07:b4:80:95:3b:f3:86:f1:1a:d5:e0:45:e9:36:31:42:ff:d1:
3e:74:fc:97:f1:0c:43:ad:5c:98:19:27:4f:19:39:9b:84:dc:
2b:ea:f9:9e:51:fa:8e:1a:d3:77:27:9c:80:b0:42:f0:3b:b5:
d3:8b:1f:d4:33:ed:91:72:02:04:ae:43:b1:ac:bc:5e:39:15:
cf:42:7d:54:bc:4e:99:39:e4:62:cc:39:29:b2:94:db:ff:c9:
6b:e1:14:c0:84:c3:25:dd:7f:d2:24:8b:79:bb:bc:49:c4:54:
0d:4f:ba:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:51 2025 by rpki-client