Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
File: sL_SyF5redRg5mDPlmTe5V3MyMw.mft (raw, json)
Hash identifier: gepHL8Y90UzqjtjTy4AisXfMeMFvamAtU+s/aPhmpKY=
Subject key identifier: 6F:24:25:6E:73:01:22:36:2F:64:2B:A3:27:35:59:50:48:41:35:45
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Certificate issuer: /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial: 019A71EEC320C0D0C9CEBB7D59389C283086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
Manifest number: 0FF6
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: eFmnxR7CyMxvye5-XXcMbfaAVOw.roa (hash: pZJwNCYo3S0mBXNLEIKEUXn/lY7t5TEifbuRPldd2yI=)
2: oJDEzXr7gr-7eZ1rexTjd4c8Ul8.roa (hash: xZTw5KYNf4Du9zIJjL5q6os9uQVggXiruo8qaJQJCvQ=)
3: pGZsGJVmFoYhAv5VAkXf67JcN-w.roa (hash: /j9DfbiG7O3qG1GtbIDXzJ4rJWqS+jSuNHHJIbaeKpc=)
4: sL_SyF5redRg5mDPlmTe5V3MyMw.crl (hash: 2ROcjty62hdDBD+Cix2Kky49hu+h0CCU0PDCpYqOtIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c3:20:c0:d0:c9:ce:bb:7d:59:38:9c:28:30:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=6f24256e730122362f642ba32735595048413545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:f2:27:4d:38:39:a7:d2:ef:5c:7d:6f:f5:
e7:d3:39:14:f4:d3:b9:15:87:ff:86:33:ea:12:cf:
ad:88:bf:a5:4d:2a:a2:64:aa:bd:b3:96:ae:5d:34:
26:bc:ed:9d:bb:04:5a:cc:b2:5a:3a:01:7a:8c:c0:
47:2b:d9:4e:be:10:a5:60:02:73:10:e1:5a:67:58:
36:24:a5:ef:1d:d4:38:fb:1c:92:1f:67:26:92:97:
17:6e:e0:ff:08:ea:bc:ea:74:10:c7:57:41:de:c6:
7b:e5:a4:98:6b:48:c9:5e:05:d6:51:f7:28:76:d6:
6d:b1:7e:23:da:d1:6e:30:21:75:65:83:bf:18:c8:
3c:cd:4f:43:34:8c:04:12:f0:31:31:4b:26:20:45:
36:a1:65:80:a1:6e:c3:8b:ad:a7:ea:b8:72:27:72:
75:c8:cb:7d:aa:0f:3d:00:3f:b7:8d:e3:36:e3:fa:
a8:f3:a3:e8:1e:d7:96:fc:2e:24:76:40:df:62:84:
c1:8d:71:f4:20:60:a7:95:91:29:ec:12:44:6c:ad:
ff:6c:6c:ae:89:d4:23:c6:e4:94:de:9d:d7:d2:c2:
e0:c5:e9:a1:c0:29:cf:aa:67:35:f7:e4:92:a2:21:
db:42:b4:0f:17:a7:39:57:8c:18:d2:41:25:c1:bd:
7b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:24:25:6E:73:01:22:36:2F:64:2B:A3:27:35:59:50:48:41:35:45
X509v3 Authority Key Identifier:
keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:43:b4:bd:58:42:54:a5:18:0a:49:c4:2e:bc:cc:bc:cd:07:
ea:3f:6c:47:e8:58:4e:33:2a:f2:30:54:5c:f0:eb:94:e0:63:
2d:75:44:9e:c8:19:bd:cf:3f:d6:46:64:81:91:a6:32:a2:5e:
2a:99:31:64:8e:59:38:3e:c6:7f:7f:aa:4d:40:ff:39:c3:c3:
37:ed:34:e6:8b:54:ce:e8:8f:c5:8a:27:25:50:35:04:57:94:
46:b5:0f:1c:0a:7d:03:35:75:2e:3d:33:d1:36:8c:82:a2:f1:
57:8e:ff:4e:6d:30:d3:96:9e:86:26:f3:9c:64:c6:fa:db:a5:
d8:de:a5:1c:11:27:d6:64:93:24:61:f9:42:46:5f:4c:0f:41:
44:55:ea:64:ed:1a:38:96:7c:83:b9:e3:ac:72:df:3f:f8:4d:
3f:40:4f:59:47:00:0c:41:71:bb:d2:ba:3b:8c:ce:73:11:a1:
4b:da:f6:fd:2a:8f:83:a7:71:b0:c0:52:32:ca:a9:0e:35:55:
58:2a:34:f7:25:f6:cc:6f:95:7b:d1:41:c7:24:be:ae:53:3e:
e7:bb:1c:55:4e:c7:c6:f8:d9:f8:9e:17:6a:bd:e8:e6:7c:78:
e2:9e:76:5e:07:3b:38:a1:95:65:f3:78:59:23:97:1a:2b:25:
18:61:87:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:01 2025 by rpki-client