Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
File: sQeA3za1uUL2YOQDov5ginXk5X0.mft (raw, json)
Hash identifier: kf1g75j1TpKYQPDVv6zZlLGldVJTYMzsMg0Vwp5cglM=
Subject key identifier: 8B:2C:A7:D1:4F:F5:61:74:47:EF:9A:C9:1E:06:B7:5C:71:42:B3:17
Authority key identifier: B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
Certificate issuer: /CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Certificate serial: 019A2B1EC23A83DAD6BFA310AA5888F5D81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
Manifest number: 168C
Signing time: Tue 28 Oct 2025 14:00:27 +0000
Manifest this update: Tue 28 Oct 2025 14:00:27 +0000
Manifest next update: Wed 29 Oct 2025 14:00:27 +0000
Files and hashes: 1: dc2u-8bkbufd4cw_d9F3xDaopuc.roa (hash: Umyl5IxYyTMcYEGSrVHWEMRSVhNtzrLiUEYgvIObXig=)
2: sQeA3za1uUL2YOQDov5ginXk5X0.crl (hash: vuB5vqmUsXSbb7b5UeffXVSxkk9+bq+McNc0BY2tee0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1e:c2:3a:83:da:d6:bf:a3:10:aa:58:88:f5:d8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Validity
Not Before: Oct 28 14:00:27 2025 GMT
Not After : Oct 29 14:00:27 2025 GMT
Subject: CN=8b2ca7d14ff5617447ef9ac91e06b75c7142b317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:01:e7:02:44:0d:4d:5d:55:f4:6c:1a:b3:
97:d6:f0:8a:1d:2b:3e:97:0f:66:1a:85:94:91:8d:
43:23:e6:c5:4f:43:4c:00:56:e4:30:57:a7:2c:59:
da:3a:3e:76:ab:dc:4c:85:21:f2:0b:e8:ef:d3:0b:
a5:3c:84:8f:3a:81:d2:a2:eb:e4:50:66:49:03:40:
70:55:86:f1:4d:c6:57:57:5f:f0:59:44:fc:52:94:
88:29:7d:49:00:4f:d4:ba:f4:f8:1d:f0:42:75:19:
5b:ee:ee:69:35:a4:eb:28:96:06:5c:d3:3f:66:1a:
4d:4c:ea:35:c7:d1:1f:48:0f:a4:27:b7:f5:a0:d8:
e4:f6:c8:ef:ba:c7:d6:03:50:f4:16:dd:d8:46:3a:
86:db:ab:ec:2b:06:89:93:4c:83:35:ac:90:5e:58:
9c:be:f9:68:f2:ca:cc:f9:58:9d:33:0a:29:27:51:
01:9e:a5:43:57:9d:9c:68:2e:46:22:9f:8c:fc:cb:
34:bc:7e:5b:c1:0f:f6:49:e4:7b:80:b5:f1:bd:0b:
ce:99:03:bf:f0:94:1b:48:d8:cc:97:7a:a1:d4:17:
9e:bc:48:3c:de:31:b9:0b:ad:c3:44:7d:27:0a:91:
74:3f:60:b9:ea:bb:3d:cc:44:15:33:92:59:b3:f1:
ab:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2C:A7:D1:4F:F5:61:74:47:EF:9A:C9:1E:06:B7:5C:71:42:B3:17
X509v3 Authority Key Identifier:
keyid:B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a0:dc:79:a0:d0:6d:2f:a6:22:da:50:40:a5:9d:43:c2:82:
0c:da:c1:a1:e6:dd:50:6f:b0:70:1f:22:c1:66:e9:7a:ef:bb:
d6:e7:03:41:75:b9:9a:ba:48:eb:1d:e8:7b:04:4e:12:ce:98:
6d:65:32:84:ce:8d:c2:45:7c:7e:59:11:2e:df:6e:27:74:c9:
2d:1e:ee:76:74:05:35:b8:a0:e1:b1:0b:01:5c:7b:aa:17:d0:
a3:79:80:30:5c:90:43:39:d3:92:08:12:7f:fa:53:8e:b6:98:
71:33:87:4a:d8:3a:b4:d9:a0:9a:3f:a2:34:91:f7:3a:49:f9:
80:8e:e7:96:92:3b:1a:a1:12:cd:6d:8c:ae:7e:87:93:9f:b7:
e7:da:07:57:e9:70:53:8e:70:69:88:d2:71:bc:43:50:02:1b:
fb:97:8a:df:9c:db:9b:e1:ab:20:c0:27:55:d2:69:af:0d:e4:
e2:4f:3e:1c:f8:d8:07:b4:88:c2:92:3e:ed:d8:51:3f:4c:52:
62:4a:48:14:3a:ca:eb:3b:a3:a4:5d:b4:38:3c:e6:bf:84:54:
4c:35:f4:4f:80:ae:ca:ad:3c:14:fc:43:16:d4:2c:bd:25:17:
d3:fc:21:ff:e2:65:95:f2:7d:08:79:f9:58:3c:e6:52:5f:3e:
49:d6:61:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:12:30 2025 by rpki-client