Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
File: sWrUSceuS9Isau5fvcCCMEL_-Pw.mft (raw, json)
Hash identifier: jzLUWB3qDUrKCFMTAYOE0hZ1jLjwSSSWJSihOCh/fPI=
Subject key identifier: 86:97:44:AC:EC:48:62:E5:C6:F5:85:7A:85:4D:5E:85:C6:E2:4D:1C
Authority key identifier: B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
Certificate issuer: /CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Certificate serial: 019A71B7C004048FBF78746D8D8BDD4A9A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
Manifest number: 0A9E
Signing time: Tue 11 Nov 2025 07:00:58 +0000
Manifest this update: Tue 11 Nov 2025 07:00:58 +0000
Manifest next update: Wed 12 Nov 2025 07:00:58 +0000
Files and hashes: 1: _KRug4UjC_BJD-8BnustHPPdTrM.roa (hash: 9gRSSq2OhYrBQVFH3hvus35c9k0k20JUe3qcgY8xpt0=)
2: sWrUSceuS9Isau5fvcCCMEL_-Pw.crl (hash: ygt7wiPVgfSrgurK2P9jVYjF5VxNmT1JrTyYUTiJqx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c0:04:04:8f:bf:78:74:6d:8d:8b:dd:4a:9a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Validity
Not Before: Nov 11 07:00:58 2025 GMT
Not After : Nov 12 07:00:58 2025 GMT
Subject: CN=869744acec4862e5c6f5857a854d5e85c6e24d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:a1:5c:8d:b5:cf:59:cd:10:1f:8d:3c:3c:
30:96:7a:dc:6a:f4:2d:f8:6b:71:60:2f:c7:27:37:
0c:a3:4e:5f:d0:bb:19:b4:36:0d:88:fe:02:bb:d4:
06:59:7d:13:1d:c7:4b:99:75:00:76:c1:7c:94:62:
ae:32:c1:ec:af:4d:42:97:34:9a:08:ae:cd:86:7f:
d4:75:ec:12:84:9c:8a:f5:70:60:26:16:60:99:5b:
f7:82:79:9a:e1:c5:f3:e1:17:3b:b7:d0:9c:98:54:
45:37:36:af:3a:02:bb:96:21:31:43:3a:61:35:9e:
d6:40:66:85:09:d0:b5:52:c1:85:82:4c:a6:8a:2b:
36:e8:d2:c8:d5:5f:60:51:47:a9:0d:c7:04:40:28:
f9:fc:e4:9b:dc:2f:34:bd:5c:6f:8d:99:1d:b0:ab:
19:21:e7:8c:89:1a:71:f2:93:06:08:3c:48:e5:1a:
f4:f1:af:4a:d6:6c:a1:f7:a3:f2:fd:eb:9d:eb:25:
b2:71:44:1a:cc:2d:05:15:04:79:81:36:d2:5a:a6:
b6:ed:d4:f4:07:a1:1f:0f:4b:54:22:b8:02:0d:8a:
b3:a4:47:85:d2:11:ac:dc:8d:e3:a3:c9:0e:48:b2:
da:9f:b5:d7:6c:ee:af:44:3d:02:40:2a:0d:d6:c8:
8b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:97:44:AC:EC:48:62:E5:C6:F5:85:7A:85:4D:5E:85:C6:E2:4D:1C
X509v3 Authority Key Identifier:
keyid:B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0f:08:dd:b3:d3:02:c8:da:fc:53:90:7b:c5:fe:27:34:37:
d9:79:40:d6:2d:45:db:35:2e:50:25:b3:ad:72:b7:41:9b:03:
7e:c0:9d:2a:83:75:30:22:75:8d:21:8f:48:e7:17:c3:b7:9c:
4a:cb:ea:23:83:7f:a1:a0:bc:c3:eb:fc:1a:b9:c0:6b:9a:15:
90:43:d1:67:e8:53:01:01:2f:f7:fe:99:03:bb:4e:6d:16:79:
75:f8:01:81:37:79:d4:e7:4b:ac:a4:82:7b:f9:6a:b5:46:b2:
16:73:38:f2:2b:38:f6:7c:fd:95:f0:16:18:97:56:70:c4:d5:
38:ab:56:b7:0f:5a:92:a7:dd:77:6e:dc:d5:fa:90:8d:5d:57:
9e:af:1c:8d:91:38:56:70:51:e3:1e:e4:4b:a3:8a:3a:0c:55:
a9:2a:e4:40:1e:e4:d7:1e:6c:13:fd:1d:c6:67:35:8d:de:37:
97:d6:6d:26:09:f3:fd:63:8e:05:d1:fe:3e:52:e0:84:b0:e1:
3d:c5:a7:f8:f9:98:c8:82:eb:5e:2e:49:e7:00:7b:05:2b:6b:
fa:a4:59:c6:39:0b:e7:0b:d3:2b:49:43:be:bf:fc:87:32:50:
ee:d3:18:44:7b:9a:30:18:85:bb:22:c3:21:c5:8d:0a:c4:f1:
c0:38:54:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:48 2025 by rpki-client