Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
File: SAtOZTD1jbM45B1DTlwkjri0nrU.mft (raw, json)
Hash identifier: /Vvx88VTndN3o2ON4oQ+3NtK6r5kQhYpedG9D+nFOHQ=
Subject key identifier: 01:BB:DE:50:DA:91:3D:FE:01:49:0A:F6:9F:C0:94:E2:F4:FD:25:4C
Authority key identifier: 48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5
Certificate issuer: /CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
Certificate serial: 019A7149925832E4AD56C18C13A59C7A5484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
Manifest number: 0E7D
Signing time: Tue 11 Nov 2025 05:00:38 +0000
Manifest this update: Tue 11 Nov 2025 05:00:38 +0000
Manifest next update: Wed 12 Nov 2025 05:00:38 +0000
Files and hashes: 1: SAtOZTD1jbM45B1DTlwkjri0nrU.crl (hash: awVaXJg5F/15BQct0upSuW9nsD3gq/z4lXnSbF42kWI=)
2: USDR-3S3Ht8uHMQ4E3_c_aswiFo.roa (hash: V2Oob57cuCUs4jtdyHi3fUFQvcz8PYQW8jqX4krUZXU=)
3: gNRsmV0XFCKJkgH1T9VLPl0qkP8.roa (hash: 7DieLwMe7vSj5T5/A8Tf5cCcPLC+4LWTW8IbIDeyX70=)
4: lKv9VTuUbeVALHwX5LLffZXiWZQ.roa (hash: QkXK3pqR7k1SpqQggKubiMioM4Ib+lqjz+VVQyAz0lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:92:58:32:e4:ad:56:c1:8c:13:a5:9c:7a:54:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
Validity
Not Before: Nov 11 05:00:38 2025 GMT
Not After : Nov 12 05:00:38 2025 GMT
Subject: CN=01bbde50da913dfe01490af69fc094e2f4fd254c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c3:9a:ee:7c:5e:f1:4c:2f:4a:9b:44:20:98:
4a:35:d5:e9:db:ff:dc:fd:db:4c:9b:0a:b8:2c:b1:
43:1f:bb:23:b9:fd:4e:e9:10:5e:04:25:6d:c3:3e:
82:25:aa:36:15:56:26:68:6f:98:32:f0:cc:d3:79:
a9:ee:ad:0b:92:e1:f9:f5:c0:38:2f:1e:18:ca:f7:
48:e5:e6:e9:4e:a9:33:4c:30:5c:c8:09:e7:ce:b4:
d2:8b:98:3d:08:08:3a:44:ed:6c:3f:3d:6e:bd:4a:
33:1f:7e:8e:c5:fd:bb:ee:1e:1c:2d:e4:8a:93:09:
e1:83:b5:79:9e:ee:ea:f9:12:3b:58:6e:64:b3:9a:
7c:6c:a7:52:ac:ea:27:93:2e:37:a9:94:58:22:89:
c7:33:fb:2c:ff:f5:f2:0c:0e:70:6e:cc:7f:2a:11:
20:24:9c:cf:04:61:04:0d:46:7a:68:ca:ea:0e:57:
5f:9c:01:75:ab:81:44:08:c5:e0:8c:05:1c:ac:2b:
ef:7b:d6:d3:de:f0:15:46:44:06:22:5b:c7:c3:b8:
37:26:f4:d9:b6:21:44:ff:5e:84:dd:00:a6:55:56:
ae:30:51:3a:65:eb:4a:75:3a:f6:6e:d3:38:cf:b0:
5a:42:8d:1c:9b:d6:2e:d4:47:a6:eb:29:38:b8:80:
05:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BB:DE:50:DA:91:3D:FE:01:49:0A:F6:9F:C0:94:E2:F4:FD:25:4C
X509v3 Authority Key Identifier:
keyid:48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:be:f1:e2:d3:da:d7:46:e9:fc:7a:72:9c:ad:d9:60:77:9e:
50:12:dd:9b:53:61:6c:d1:d3:f7:3b:b5:f4:6c:02:da:f6:47:
75:69:69:8d:3b:b8:21:fc:0c:3f:35:4d:ea:96:0e:3c:80:e6:
e9:0d:55:82:bc:61:1e:be:e6:21:e2:25:f6:b2:53:d3:5f:21:
d1:95:00:5c:6d:96:d9:05:47:b9:f8:01:4f:97:88:d9:b1:08:
08:27:24:40:b4:51:dd:fa:e6:51:8c:54:25:dc:52:74:09:4b:
f2:49:bc:84:d3:42:d6:45:03:ad:e4:32:7a:3f:06:7e:d7:8f:
29:0f:36:eb:57:9b:4a:50:ce:3c:19:ef:8d:d0:ac:58:3f:bd:
67:b8:a1:14:aa:9b:78:42:dc:b0:44:47:f6:6b:82:1a:15:cf:
73:28:fe:0a:c7:9a:53:dc:31:23:9e:cb:77:a7:43:2a:84:a7:
17:56:73:c0:a4:57:c1:95:ac:83:9a:48:21:93:6b:6d:47:14:
f2:93:fd:6d:b0:ff:bc:70:bc:bd:73:f0:05:b2:72:1e:b8:a5:
12:c8:db:43:7c:40:71:67:59:4a:1a:68:4e:c7:1c:f2:ae:d9:
96:9b:47:4e:ab:7b:6b:cf:4f:3a:da:af:c5:35:e3:6b:cf:ce:
d1:8e:e6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:00 2025 by rpki-client