Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
File: sA09NPYeSEaIv_-cxwN1WCN3WZg.mft (raw, json)
Hash identifier: 4T7KBzNJSuu7eFyKoh9K816rq2GsquClw9wG/GbAblQ=
Subject key identifier: 91:6B:84:B3:47:69:8C:B9:69:B7:DE:5E:C6:54:EC:A9:EE:02:08:67
Authority key identifier: B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
Certificate issuer: /CN=b00d3d34f61e484688bfff9cc703755823775998
Certificate serial: 019A7225B02302292D7E3E752010ED9C4C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
Manifest number: 13D3
Signing time: Tue 11 Nov 2025 09:01:03 +0000
Manifest this update: Tue 11 Nov 2025 09:01:03 +0000
Manifest next update: Wed 12 Nov 2025 09:01:03 +0000
Files and hashes: 1: LKbJBE8NWEbtvlmwjvUv8EH6lzg.roa (hash: OvzM1ONuWDYGL3UTKmOuYTSxh3U96Ifed1WChkSuccI=)
2: sA09NPYeSEaIv_-cxwN1WCN3WZg.crl (hash: GVS9OVZqBuRlLZFsFUqZfE1Yip5GuXo3u+oLqqps3Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b0:23:02:29:2d:7e:3e:75:20:10:ed:9c:4c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00d3d34f61e484688bfff9cc703755823775998
Validity
Not Before: Nov 11 09:01:03 2025 GMT
Not After : Nov 12 09:01:03 2025 GMT
Subject: CN=916b84b347698cb969b7de5ec654eca9ee020867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:13:32:42:2e:c5:80:82:be:c5:b3:ad:30:3d:
6f:9b:a2:7e:b9:7d:9f:c8:51:f9:b1:99:96:30:04:
70:04:bb:2b:b7:54:d4:fd:66:cb:3c:cf:15:1a:d9:
f2:71:ba:07:ff:aa:3b:87:fd:f9:53:7e:cf:ff:f5:
e2:28:34:bf:01:63:3f:c9:b3:62:16:9b:d0:5a:b7:
32:12:95:90:be:06:c7:49:c7:00:4a:64:71:7e:05:
57:b2:96:7f:4d:db:ba:40:39:1b:52:11:ad:aa:ff:
a2:1b:8c:17:ae:cb:54:3b:68:72:66:b2:68:2c:b1:
93:f3:4b:fd:c2:06:d3:5d:4e:3f:b2:79:69:13:48:
83:8e:85:82:3b:03:be:4b:98:da:62:77:2a:2c:45:
23:17:db:81:9b:19:c1:2d:21:73:4b:13:6e:8b:0b:
6b:c6:d0:11:72:3e:2f:b4:64:03:45:9a:1a:35:bf:
96:df:b3:ff:f6:ba:82:09:a7:af:6e:1f:47:6b:da:
8d:20:43:55:1c:80:e0:46:b6:9c:7f:93:6a:f7:1d:
98:28:0a:ef:59:c3:af:f2:7f:7e:7d:ee:46:59:a6:
d7:cf:f8:e4:a9:bb:a0:1b:a1:e9:91:4f:54:4e:81:
e4:75:1e:27:c8:ac:40:96:b8:96:32:da:93:a6:7e:
03:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6B:84:B3:47:69:8C:B9:69:B7:DE:5E:C6:54:EC:A9:EE:02:08:67
X509v3 Authority Key Identifier:
keyid:B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7e:e6:9f:0a:a2:70:2a:a5:98:ef:3f:41:32:eb:2c:40:59:
64:7f:83:de:5a:31:f4:e8:82:f6:0e:7b:a0:2d:d6:19:10:96:
bf:86:2e:0f:90:df:4c:4c:c9:a0:c0:5a:7a:4a:85:a0:1b:e1:
36:35:a6:89:2a:1f:36:ee:89:69:4e:90:2a:a1:5f:98:7a:5a:
9a:76:96:3b:65:7f:3e:c9:ec:0c:27:3c:2f:1e:a6:95:ee:97:
13:00:16:a7:7c:da:01:8e:e5:35:b2:5c:ac:9d:20:a1:fe:3f:
52:14:c4:19:da:d6:3d:3d:19:32:e7:2b:9c:87:42:f4:ed:fe:
eb:82:cf:e5:a9:12:eb:2e:8c:1c:72:8c:46:79:62:9b:c8:1e:
94:42:d2:78:2d:35:ae:52:56:59:81:c8:e8:70:d2:1a:0f:59:
33:fe:4c:55:48:ac:d6:2a:dc:b1:b1:a3:33:67:78:be:d2:6e:
fd:79:4a:82:18:47:38:3f:e2:17:8b:b5:de:bd:25:26:81:3b:
7b:06:de:5d:fa:4b:3f:f7:65:4b:b7:47:e1:da:87:2b:94:d5:
61:49:0b:53:6c:17:8e:ac:45:54:bd:47:64:88:8d:63:66:ec:
ec:63:75:9a:05:2a:38:0c:4d:75:3c:13:fd:59:34:6f:05:3a:
c7:41:82:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:51 2025 by rpki-client