Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
File: SU0Or4AlCrgkiYm-caQDlxjWk1o.mft (raw, json)
Hash identifier: 0S1lpEEx2uSApU+Zf5XHJugLXTS5VDmH+NKwrcA/dUg=
Subject key identifier: 5B:BA:33:44:36:9A:F3:99:43:94:B7:CC:35:A1:03:B1:A8:67:8A:4D
Authority key identifier: 49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
Certificate issuer: /CN=494d0eaf80250ab8248989be71a4039718d6935a
Certificate serial: 019A3D946086ED22D5107D476FD5D58D0F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
Manifest number: 1705
Signing time: Sat 01 Nov 2025 04:02:05 +0000
Manifest this update: Sat 01 Nov 2025 04:02:05 +0000
Manifest next update: Sun 02 Nov 2025 04:02:05 +0000
Files and hashes: 1: Ad7sRIt_14WqsoXSVJnhtt5pR6I.roa (hash: d1H2UkdaZjL8z/VCs5Y8T9oYvq5D7T8CQrV9qDD8uXE=)
2: SU0Or4AlCrgkiYm-caQDlxjWk1o.crl (hash: bQQhGQP3anRfPpRj0tgxWTp9KGPPQHfB+p7SUI9L1Xk=)
3: fbnqy98yfE_Lzn_9R-s84dMZn3s.roa (hash: RB1a5+/ABy4Ucs2InLVoqKGALjdVGmuLcFN8wD1kPqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3d:94:60:86:ed:22:d5:10:7d:47:6f:d5:d5:8d:0f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d0eaf80250ab8248989be71a4039718d6935a
Validity
Not Before: Nov 1 04:02:05 2025 GMT
Not After : Nov 2 04:02:05 2025 GMT
Subject: CN=5bba3344369af3994394b7cc35a103b1a8678a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:80:ea:4c:be:54:05:27:ef:0f:e2:38:d7:
36:82:b7:e3:db:db:6b:be:14:57:39:48:23:54:e8:
52:79:67:12:28:cd:d9:13:23:1b:56:c6:73:32:76:
32:18:1f:9a:2c:e7:ca:02:55:c1:53:7e:f8:06:c4:
c6:b5:69:eb:9b:04:24:00:cb:30:6b:6f:30:d4:8e:
b0:2f:44:6f:db:78:40:dc:30:7e:ed:37:c2:06:0f:
2c:80:f4:c4:18:ef:3d:6f:be:97:cf:c4:dd:cf:40:
21:21:31:66:45:7e:fa:01:f9:a4:b4:dc:13:76:c8:
3e:38:8a:1b:9d:09:5d:e2:6a:48:92:eb:36:73:8d:
40:6b:3f:c8:65:13:9b:70:63:aa:97:ff:ac:c4:42:
c4:6d:65:d6:8d:29:f7:43:bf:5e:d2:1f:c2:89:8b:
d2:44:14:33:d1:34:10:b7:49:d2:36:95:66:3d:9a:
9a:8d:01:80:be:cd:03:f2:3a:30:7c:14:7a:18:68:
5c:0c:09:05:05:33:ac:98:2a:f8:d1:91:57:b2:af:
1f:c4:db:df:81:c6:d3:1a:6a:40:8d:d2:9a:e5:e9:
49:80:34:ac:7c:40:9e:f2:9d:3c:02:2f:47:d5:d4:
0e:90:0b:0f:e0:ff:fa:5b:da:98:35:d8:b0:93:c9:
c6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BA:33:44:36:9A:F3:99:43:94:B7:CC:35:A1:03:B1:A8:67:8A:4D
X509v3 Authority Key Identifier:
keyid:49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:db:5d:6c:55:98:ce:3a:bb:30:e4:ad:3a:e1:e9:36:bb:9d:
a1:61:08:d3:73:3a:b9:fe:cc:2c:f0:f7:f0:da:49:88:62:6b:
df:35:0b:e7:80:2c:24:87:0f:df:ac:d4:ba:33:e5:4c:1a:c0:
1d:ee:b7:a5:f6:65:e0:4b:44:14:11:d6:8e:9a:4e:e3:ce:4f:
2c:d0:94:89:7a:71:94:fa:a7:5b:db:da:dc:88:b2:5e:37:f2:
36:06:41:80:78:57:0a:44:25:7f:59:15:c5:f9:0a:e5:1f:be:
ff:26:05:6b:9c:fe:d4:f7:19:23:76:67:a0:06:74:74:fa:71:
d6:d8:9c:12:eb:47:47:dc:5f:6e:34:28:88:09:b4:66:7e:54:
f4:07:c8:96:60:79:e7:bf:0a:cb:a9:57:45:56:7b:27:c4:2d:
bd:df:4c:2a:22:0c:23:5d:88:c6:8d:98:9d:96:9c:18:bd:70:
e9:55:9e:1d:1d:0c:4f:40:f0:92:02:37:5a:24:22:97:1a:aa:
8b:f5:fe:d2:78:a3:4d:c4:84:3c:12:7e:c8:55:96:94:6e:36:
25:e2:82:c2:67:58:56:ae:5a:27:a4:8c:7c:32:de:5a:76:a2:
24:09:a7:84:3c:54:7f:e4:1a:ed:c1:a4:4a:c3:8c:60:a5:40:
d0:10:30:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 07:13:22 2025 by rpki-client