Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
File: SiIu0bilM4WPRljF0lOfr1Kr2qc.mft (raw, json)
Hash identifier: vbFvURf63QSafb/kRybJ1R+IdAkkpPlIge9lCeWxYUA=
Subject key identifier: AA:51:82:37:B6:A2:CF:0A:3F:A0:EB:5B:8D:C3:C8:DB:97:B9:6F:11
Authority key identifier: 4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
Certificate issuer: /CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Certificate serial: 019A725C8DDE3753143FBD0097AA63F1398F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:00:59 +0000
Manifest this update: Tue 11 Nov 2025 10:00:59 +0000
Manifest next update: Wed 12 Nov 2025 10:00:59 +0000
Files and hashes: 1: SiIu0bilM4WPRljF0lOfr1Kr2qc.crl (hash: gf4Zpizj6/Km4Joy0RWW4gYZuNod4XV0rLzBUBdVY2A=)
2: bpYsiF18QRf5QtGXZ_iQjax9NTk.roa (hash: sxWNeli2Kw0W0CpyWRBKMIXDOOMhbuvbRuOafrwk3qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:8d:de:37:53:14:3f:bd:00:97:aa:63:f1:39:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Validity
Not Before: Nov 11 10:00:59 2025 GMT
Not After : Nov 12 10:00:59 2025 GMT
Subject: CN=aa518237b6a2cf0a3fa0eb5b8dc3c8db97b96f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:82:ed:d2:11:58:88:bb:be:36:e0:82:f7:
c2:80:08:84:d7:0d:3e:ea:f5:9a:fc:86:dc:e0:01:
8f:9e:34:ca:e6:ca:eb:e4:23:de:8e:c9:87:90:41:
a7:cc:64:b7:af:92:59:c5:9a:dc:60:79:96:4e:d0:
d9:11:37:95:92:9d:c0:7b:04:af:0a:1b:ba:45:d8:
19:01:97:e9:7a:2d:54:13:d4:6f:36:3b:37:4a:42:
72:e3:3c:6e:87:0d:1b:c5:ee:cc:67:60:54:01:cf:
e9:01:66:be:56:49:58:41:4d:5a:3b:a3:55:13:d9:
52:31:d8:d3:8a:6c:bc:64:d5:a5:ce:ce:14:c3:34:
52:93:35:9c:bc:17:e8:1c:34:c3:60:38:3a:20:72:
d8:d5:f3:1a:e9:50:21:50:68:4a:08:d8:32:89:ff:
c2:2e:d7:27:88:02:73:12:9e:15:44:5d:3f:98:af:
18:27:e5:9e:b4:c6:d1:3f:02:18:f8:c8:39:58:9f:
f0:d5:5f:b3:a0:44:8f:cc:d2:b5:3f:91:61:b4:c3:
46:37:b7:a7:22:25:c9:6a:71:ba:87:73:89:a1:ff:
62:98:7b:64:69:a6:39:87:75:c8:c7:27:d6:9a:24:
83:36:54:44:5a:e1:65:92:14:6b:df:b2:a7:1e:a6:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:51:82:37:B6:A2:CF:0A:3F:A0:EB:5B:8D:C3:C8:DB:97:B9:6F:11
X509v3 Authority Key Identifier:
keyid:4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ae:e1:95:3a:38:95:fc:2b:84:99:81:5a:9c:68:0e:ae:02:
1a:93:1f:a4:77:bb:26:97:96:8c:ad:27:f9:4b:79:a6:cf:58:
76:a5:9d:88:5c:a3:62:50:b8:25:12:c2:91:cd:ea:ac:21:1f:
82:70:c9:a2:75:d6:d1:76:fa:e9:88:05:a9:9e:12:38:00:fa:
9b:ac:f3:47:ca:6f:53:3a:5b:fa:32:5d:2f:fb:71:f5:11:00:
cd:94:bd:bc:32:97:39:79:ad:2f:45:30:31:25:8b:1d:46:50:
60:20:fe:87:80:1e:e7:85:95:43:15:9a:d7:42:10:7d:2a:ff:
c4:7f:d6:17:bc:c8:c6:8a:93:65:fc:12:26:0b:09:d9:f6:06:
fc:79:f7:bd:76:b4:f9:a8:fa:96:b5:ce:a2:f9:7d:54:b5:c6:
7a:ba:12:0a:97:4d:79:49:ea:da:b9:e8:ad:3b:61:7a:d9:7b:
38:50:04:3b:2c:61:24:96:a4:ec:0d:14:4d:06:31:55:02:72:
26:7f:df:96:5e:df:46:f5:e5:d9:a5:28:f5:41:a6:ce:f2:a2:
43:72:2b:3b:2c:f4:40:08:3a:5b:cc:70:d8:2f:67:34:56:68:
01:bf:17:69:4e:54:ba:9b:dd:c8:0f:9e:fa:22:1d:c6:08:09:
15:68:e5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:43:00 2025 by rpki-client