Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
File: suRItKCPDkxYooPYBzWoqAPhDU4.mft (raw, json)
Hash identifier: QYr/TrkCCt9m1Ot+/pxK+XzfcFlYFddHm+e9Wvyyn10=
Subject key identifier: 20:E9:A3:34:52:F4:9C:9B:29:10:4A:38:EC:76:5B:F1:22:BF:07:B5
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 019A7293BE3E18085BF5D39905816C14802C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
Manifest number: 1728
Signing time: Tue 11 Nov 2025 11:01:16 +0000
Manifest this update: Tue 11 Nov 2025 11:01:16 +0000
Manifest next update: Wed 12 Nov 2025 11:01:16 +0000
Files and hashes: 1: 0JGiKje1faw9lacGbk5NhV2XAbU.roa (hash: Z5RBvg80RTlugYiMNKYpsKysKI83C+571C6SNSSEK3o=)
2: 2DxKgawRIdwPHYKPKO80oLEjXnQ.roa (hash: GkiqXgjmsGCVt8nP5qXPMp6hqSSrH1HiN32NDxCXRyM=)
3: CzOVrXq8s2rQFDCGaFJZ_xM7OZ0.roa (hash: 5XAPorQnylekwHM79ynLgJVh80voKy6A8YYVF6d1gL0=)
4: DpKy84xGq4bZRMW3bg3Qqscpy-g.roa (hash: Pghneqh0rqfe/wIbx3lltKoFinQFr3Xds6By1KC5GTY=)
5: Zf4cfRQ8Yb3zaonMniOY9mHCgZU.roa (hash: 7qovkktB6alfndSsebLaLeESbLcFDoOHnNh2I5l6SkM=)
6: rJBUoTOBCbGpyq2LQ5qyqtlWDVk.roa (hash: OOOBfJlZtCKY/fNu/6lDyCNmP9uVM4ZIRjn3vJc9saw=)
7: suRItKCPDkxYooPYBzWoqAPhDU4.crl (hash: P/9chwvFG81wmkQGHJ10RISX5INGeBW7B3b1bg41c/Y=)
8: wz_TvTU1xF0eJ_9EwkVCuufFGFo.roa (hash: Vtdi4r4GuCz7NyZSMqwPceN5sJkZoRY3YKYSc4S4CjI=)
9: yDDPfOYkq9TvDo49z4rJ89YrUS8.roa (hash: h90+S4fhQ3iqdh42EvmGUJBw540N3+LmJjYWM7l7haw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:be:3e:18:08:5b:f5:d3:99:05:81:6c:14:80:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Nov 11 11:01:16 2025 GMT
Not After : Nov 12 11:01:16 2025 GMT
Subject: CN=20e9a33452f49c9b29104a38ec765bf122bf07b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:00:a2:4e:13:1d:b7:06:46:42:57:e6:06:
8a:af:2f:96:b7:07:16:91:61:9a:c9:f1:d3:19:49:
67:18:98:49:e3:bd:98:66:86:49:72:2b:89:d5:d6:
cf:7b:68:84:b7:17:3f:b6:1a:cd:f2:01:1c:43:e2:
2e:9a:aa:15:f8:79:01:8c:6a:90:4b:08:3d:b9:8f:
7a:e5:aa:af:ac:3b:3e:bd:5a:98:ee:2d:2c:93:0c:
29:42:02:21:52:5a:6d:12:c9:f3:ee:ec:dc:e9:56:
2e:75:ac:aa:36:61:68:2f:ec:3a:6b:ab:df:01:50:
6e:f5:d1:a6:9e:1c:0b:e1:d8:4e:54:c0:54:32:86:
5d:3a:80:c5:ef:c3:e0:dd:33:03:6b:a8:83:f5:75:
1d:75:9f:17:50:88:4a:33:2f:4a:00:c0:3e:8e:ed:
0c:fb:d3:e6:2a:ff:1b:4d:b2:40:31:f1:f9:b6:dc:
03:06:2b:e6:7b:fb:92:5e:6c:8c:08:fe:8d:85:d7:
af:55:87:88:b6:13:78:18:57:cf:e5:08:d9:ac:67:
f2:20:26:6e:f7:a4:ef:b6:e6:17:48:2f:f4:70:76:
58:44:05:a8:9f:6c:48:4c:09:76:d4:42:67:fd:66:
bf:18:16:4e:8b:f4:4f:7b:db:22:c1:7e:46:ec:7f:
bf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E9:A3:34:52:F4:9C:9B:29:10:4A:38:EC:76:5B:F1:22:BF:07:B5
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:51:46:76:69:9a:04:ef:50:42:6d:b7:b8:5c:97:07:14:46:
9a:cb:ac:e3:6c:82:12:38:78:ff:65:ec:20:22:99:0a:60:cd:
17:ce:62:33:79:60:e2:72:1d:aa:94:3a:1c:a3:94:5e:0e:52:
08:07:6e:a8:6a:fc:c0:b6:05:62:26:d0:37:32:12:a9:f0:42:
1f:b7:3f:28:ff:37:84:94:97:ef:79:3e:24:55:04:60:31:e1:
61:3f:2f:48:ee:c5:17:8e:94:24:c6:d2:27:b1:ba:34:db:8f:
ab:bc:65:cb:f2:6c:9d:f1:bb:11:e0:e3:7b:8a:af:65:0f:d2:
d9:69:5b:a6:41:5a:fa:f0:51:55:fa:42:67:d6:7b:85:f8:c4:
32:4d:4f:a2:cb:1c:d3:7b:4e:46:23:b5:49:10:50:3d:59:96:
14:b3:f4:08:5e:6e:cf:0b:47:ae:4b:a4:58:36:cf:a3:8d:c6:
df:20:3c:ad:18:0f:e1:39:9d:4d:6e:72:54:0f:3e:09:4c:bc:
68:a2:f1:35:06:d1:58:e4:ea:d3:85:85:b4:c1:e7:50:bd:23:
ab:07:3e:ed:fa:0c:13:03:0b:a3:06:31:e9:6f:4b:7f:e4:64:
ad:22:63:9f:30:fe:d5:97:28:27:5f:60:69:ba:b6:07:69:c3:
ad:73:b5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:45 2025 by rpki-client