Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File: 201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier: 1BoAfRNsu/bv99gjJ8JPJEUiSUoMIy3R2D/DzxYPAts=
Subject key identifier: 63:2F:D5:C5:60:0C:29:03:30:F6:76:3B:45:A0:36:51:E5:62:FC:2C
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer: /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial: 019A71EEF4C88AE2857F722014D6001B5DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 08:01:16 +0000
Manifest this update: Tue 11 Nov 2025 08:01:16 +0000
Manifest next update: Wed 12 Nov 2025 08:01:16 +0000
Files and hashes: 1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: c+7Os8gHwCyl0ch9jtmYVxURoX28JKTBRKC2LkaxWeE=)
2: p7ugqnkl0eeyrlpJX13_lCmtLp0.roa (hash: f1GZebrpy+RrPUG5oAnHmyhNSF3EcTIUbcYbxWqO8rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f4:c8:8a:e2:85:7f:72:20:14:d6:00:1b:5d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Validity
Not Before: Nov 11 08:01:16 2025 GMT
Not After : Nov 12 08:01:16 2025 GMT
Subject: CN=632fd5c5600c290330f6763b45a03651e562fc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ea:83:8a:44:9c:a4:30:15:ac:47:24:b0:23:
fd:09:57:70:b0:81:0b:90:78:67:40:14:6c:34:85:
ee:f1:9c:d8:cd:7d:4e:ef:f2:c2:d6:ef:72:4d:7a:
0d:48:17:7c:7f:4a:2c:30:d7:d9:7f:0e:41:ae:ed:
31:cc:33:20:cc:3a:b3:4f:e7:fe:c6:a7:51:c8:69:
c8:0d:95:d6:fd:fb:69:a8:96:42:34:4d:fb:3d:4c:
fa:29:e9:1a:29:b7:14:ab:3a:52:ec:5b:fc:e7:cc:
c0:98:fd:46:aa:98:bf:e9:3b:d5:30:f0:6a:0d:db:
3c:db:f4:41:82:09:59:f1:6e:5c:ed:0b:27:56:e6:
4c:61:79:07:09:9f:f7:e2:4b:b4:3a:4a:d2:42:47:
e0:98:c0:9b:27:07:fd:10:41:52:10:82:22:0f:28:
8c:7c:7e:69:d7:5a:09:1a:37:de:67:37:5c:19:29:
16:de:34:98:a5:b8:2b:6e:3b:46:5a:d1:c6:39:1a:
01:2b:00:33:e2:ce:73:62:0a:71:52:04:04:27:c1:
e0:b6:cb:39:d1:24:89:b2:81:20:5d:77:5b:6b:ca:
6b:3c:ef:58:f0:a1:33:6b:e2:88:5a:30:7c:97:96:
ac:91:8f:d4:d4:a7:cc:18:00:c2:f0:9b:cc:f9:f1:
e5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2F:D5:C5:60:0C:29:03:30:F6:76:3B:45:A0:36:51:E5:62:FC:2C
X509v3 Authority Key Identifier:
keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c0:86:28:44:5a:da:4a:8d:ad:c3:64:a9:72:61:c7:18:aa:
02:ed:83:80:eb:52:5b:b8:03:e2:4d:1d:c4:cf:fe:f4:a8:69:
c7:77:8c:14:45:80:a3:d6:b9:a3:41:a3:d6:20:59:df:08:2e:
78:cb:fe:9d:36:8c:56:ce:17:da:f0:d3:47:6f:ed:62:8b:fe:
5d:50:ea:2d:be:98:52:78:99:1c:c3:ae:3c:56:d9:27:66:a2:
eb:3d:2b:76:5c:56:08:b1:32:b9:6e:c1:6d:7e:20:2f:3c:66:
98:c2:7e:7d:44:28:b3:40:4e:1d:26:ad:13:bd:bd:ca:0f:8d:
fd:71:f5:78:73:fc:a0:9d:5d:09:a5:b0:c1:26:5c:21:0f:ea:
92:e7:ff:9a:6b:37:eb:1a:8e:f9:c2:fd:80:ef:aa:92:c3:5b:
d2:f1:b8:62:74:70:25:ab:94:4a:1f:b9:10:f8:48:14:fe:ce:
a1:b0:d3:bb:c4:29:95:63:fd:2b:26:0e:b8:67:c1:f2:45:93:
ca:22:3f:59:ff:0d:3e:e2:14:7a:a5:10:7c:aa:ee:db:ee:30:
e0:7e:e4:60:d5:c5:55:60:30:2f:9f:39:2e:94:b4:85:aa:85:
34:47:19:fe:36:fe:a0:de:86:06:0d:d8:7a:2c:ce:4c:dd:5c:
dc:4e:92:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:17 2025 by rpki-client