Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
File: sWmklwDgw7jjmnkTDJh6UADM_-I.mft (raw, json)
Hash identifier: JE8xWKDXS8ASUxhR5j613/pBEIsneAKHKK6JHIAIci8=
Subject key identifier: 38:4D:0F:12:AD:98:34:1A:25:3A:4E:08:0A:7D:B1:03:CE:EF:42:8D
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial: 019A71137614FB005FFA1FCBA581B6FF0B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
Manifest number: 12A7
Signing time: Tue 11 Nov 2025 04:01:32 +0000
Manifest this update: Tue 11 Nov 2025 04:01:32 +0000
Manifest next update: Wed 12 Nov 2025 04:01:32 +0000
Files and hashes: 1: 1-ThtHy19ctjaQuYuBhqSQqIE9WU.roa (hash: V9qRoZ+PC8g7OlSlh2fBbc43/EN/zOPrb+QtN2UkltA=)
2: 30Dio0Gszjx6FTAe-4VlPrqwyTc.roa (hash: psw6/BxDCb7H27J6+J3WPOwk2OKgWYIKlnVQ23OKdwQ=)
3: sWmklwDgw7jjmnkTDJh6UADM_-I.crl (hash: l+e2HcKf0SqW4UrLDm7Ut/AJRigyNraKqeNcCKe4VCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:76:14:fb:00:5f:fa:1f:cb:a5:81:b6:ff:0b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Validity
Not Before: Nov 11 04:01:32 2025 GMT
Not After : Nov 12 04:01:32 2025 GMT
Subject: CN=384d0f12ad98341a253a4e080a7db103ceef428d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:27:cd:b6:96:69:a6:db:26:a8:c8:58:81:
32:1f:5b:dc:cb:63:45:00:ae:e3:67:ca:e0:9e:85:
d5:a6:0d:bc:9f:4b:69:a0:27:c3:6b:87:6d:5d:2e:
69:7b:ac:a2:46:30:ff:3a:57:7f:fc:7d:fb:f5:74:
5b:40:42:6d:62:18:ea:b5:0e:8a:a8:69:8f:ef:9f:
f7:69:c4:9b:9c:08:e6:53:78:eb:32:45:96:b9:e4:
19:0e:99:40:bb:40:0b:1b:03:84:44:40:1d:cf:08:
6d:62:78:b4:de:e7:9d:c8:ae:a2:0a:ac:a8:52:14:
32:5a:a8:03:b2:64:e5:c6:c8:ba:a0:34:0f:0e:0f:
e1:52:89:02:f9:de:4a:2a:b8:e3:e3:97:73:13:4e:
28:2a:1e:4a:71:8d:53:59:69:38:14:11:cf:b2:28:
0b:74:b1:80:ef:b5:9d:5f:b1:84:a9:50:85:2d:54:
f7:cc:d4:76:f8:51:f4:fb:06:0b:6d:f4:dd:5d:2d:
61:88:e9:81:0a:ce:7c:ed:ad:12:1b:ed:48:ce:a2:
ad:5c:ff:43:82:2a:8b:0b:73:47:c2:c2:f5:d3:5e:
d5:ff:9d:ef:bd:a7:29:40:54:66:b3:ab:a6:d6:ce:
72:7b:3c:9e:04:6b:57:20:bc:db:fb:6e:bd:7b:27:
29:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4D:0F:12:AD:98:34:1A:25:3A:4E:08:0A:7D:B1:03:CE:EF:42:8D
X509v3 Authority Key Identifier:
keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:88:fc:cc:f4:f6:9e:55:4f:c4:ce:6e:1d:4c:0e:64:f5:5f:
b3:48:d3:b8:c0:ac:c9:69:3f:fb:b3:c9:a2:2f:30:a3:13:5c:
9b:d1:be:64:a1:d6:54:fe:f5:0a:09:e5:64:14:72:4f:45:3c:
c6:fe:47:ac:8a:88:08:fa:0b:a7:c6:77:f1:12:2a:ca:e9:4f:
ba:43:00:66:e9:5c:c8:c4:d2:2a:44:dc:46:1a:e1:78:aa:39:
00:0b:6f:4f:b1:bd:b6:9c:79:48:ea:a2:65:f9:ac:04:17:3c:
30:de:0b:c2:b3:83:8e:01:8c:36:e2:ea:03:64:46:e8:d5:91:
49:cb:34:3d:d8:cf:3d:25:e5:ad:bd:bb:8b:fd:82:3d:01:55:
a7:df:ac:3d:49:78:42:a8:ec:b2:7f:f7:61:32:67:f9:12:06:
f7:13:42:58:ec:a6:5b:e8:c7:33:26:57:59:2a:5d:24:fb:02:
77:a3:1e:6d:e5:36:1e:03:65:2d:37:25:c0:f4:ea:e9:62:cc:
8d:f0:b0:13:17:6f:a6:c8:02:da:a7:f0:b8:81:b1:15:8f:65:
f5:56:f1:45:a9:5b:13:91:a6:47:73:ac:a0:a9:ca:41:48:02:
ca:80:c9:d0:33:dc:2a:dc:6f:b9:3a:c0:9f:df:9e:ef:68:40:
60:b9:d2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:36 2025 by rpki-client