Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
File: sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft (raw, json)
Hash identifier: qq9KyyKyIU5kek3o2cFuk9Xm5/7kcUQJtIJAVm6GlyY=
Subject key identifier: 1E:88:8A:6A:54:49:DA:10:04:E1:F4:3C:20:D5:77:A0:37:05:88:EB
Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Certificate serial: 019A24AEA8A736E978806926B56F75683145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
Manifest number: 5C
Signing time: Mon 27 Oct 2025 08:00:17 +0000
Manifest this update: Mon 27 Oct 2025 08:00:17 +0000
Manifest next update: Tue 28 Oct 2025 08:00:17 +0000
Files and hashes: 1: 96LYebW41F9cWbiRR3tXv_5JTlA.roa (hash: E9I1sWzxYkdu6eno5OeViMQO2tf/PXjG/rZzNUHedvQ=)
2: qXbxlLviK9DJSOPQYHU6ZWE-Sa4.roa (hash: QbsyxqNuQBIITsu3wvPWziWsrz31D70A9kksDR3tVno=)
3: sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl (hash: A05F6dkRU1zA/QPHBj6lRmLzLcBtOBvKBk9u1B+UKMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:a8:a7:36:e9:78:80:69:26:b5:6f:75:68:31:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Validity
Not Before: Oct 27 08:00:17 2025 GMT
Not After : Oct 28 08:00:17 2025 GMT
Subject: CN=1e888a6a5449da1004e1f43c20d577a0370588eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:12:43:91:2c:54:9f:1d:0c:11:9e:6a:f9:0e:
2b:c5:bd:63:c3:78:c1:0a:ae:46:bd:65:e5:52:63:
ff:92:fd:df:01:44:eb:96:d4:b5:1d:96:3a:25:a2:
28:de:5f:e9:ec:97:31:b4:50:76:87:02:9b:9d:70:
2d:95:3a:dc:06:63:c1:0d:58:c8:dc:0f:1c:80:2e:
27:a3:54:23:f5:6a:df:91:d5:10:6a:9e:3e:ba:f0:
24:9f:da:44:94:71:81:dc:91:36:20:86:db:17:a5:
71:f7:b9:b2:e4:79:16:31:e8:de:8c:c7:3c:6b:5f:
88:ec:c7:53:31:eb:7b:bc:1b:57:ed:87:cd:95:9b:
0c:a3:6d:af:83:7c:3c:be:95:bd:d8:e7:38:8f:a1:
c3:57:e5:ed:53:47:8b:a2:2f:4c:7f:35:a9:ae:2c:
b2:90:fc:eb:b1:1c:62:fe:a2:07:f4:4a:ab:8f:19:
a8:dc:ef:ef:41:91:88:1b:0d:ce:da:9f:96:6e:8c:
a5:16:15:d2:fd:c4:4c:a8:a4:5e:86:a3:2d:91:a4:
54:81:f5:00:35:e4:07:3e:34:57:7f:c8:9d:5b:41:
d3:9a:07:c4:ae:a8:66:47:97:bb:c5:ec:97:3b:25:
62:c2:f2:c6:96:49:92:64:cf:36:9f:43:ff:d6:3b:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:88:8A:6A:54:49:DA:10:04:E1:F4:3C:20:D5:77:A0:37:05:88:EB
X509v3 Authority Key Identifier:
keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cd:e8:b7:9c:47:20:90:5c:51:fd:b2:d3:d6:06:23:fa:21:
94:3c:78:72:63:bd:99:17:27:c1:9c:dc:76:18:eb:14:cd:19:
50:07:c6:de:6c:c2:b5:fd:dc:62:d8:f5:39:17:6d:a8:4a:ee:
64:68:37:b2:d9:7d:37:28:bf:cc:a9:5b:54:ec:3c:83:7b:2b:
3b:97:16:f8:95:32:6c:b7:d8:c9:b5:05:07:fb:74:c5:fc:5b:
0f:bd:98:5f:5c:0a:35:6f:82:42:bf:0a:84:e4:25:27:93:78:
45:99:07:22:d1:52:d5:77:8c:7b:7b:53:0c:e8:f5:5b:1a:39:
fa:b1:05:74:ae:1e:20:2a:9a:70:80:65:d6:75:a2:d0:84:c8:
24:b0:d9:6a:0e:0a:17:68:57:15:73:62:ff:5d:b7:8d:c1:ee:
10:f2:a0:3b:8f:56:e1:4a:7a:cc:b6:0f:fd:70:f1:1f:fd:d5:
9b:b4:72:c7:ec:94:e2:b0:08:bf:76:7a:f7:61:61:b0:a2:02:
e9:f5:51:ce:89:a0:2a:40:79:73:86:f5:d8:b9:57:f3:64:0d:
9a:84:ce:1b:43:64:ed:b9:2f:04:8c:00:be:f9:93:e2:53:7a:
69:d0:a6:0e:e8:ef:8d:3c:03:3f:81:04:3e:7b:f8:46:79:3c:
42:d5:cb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:52:08 2025 by rpki-client