Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
File: sffQCUrcmNmwMnIOgePbWqdYHHQ.mft (raw, json)
Hash identifier: zffZIIOZfNpDeftGLfKSgyuyAHKlCdVqNTlG+1EcERY=
Subject key identifier: 26:7A:72:9F:AE:E0:04:A3:D4:9D:E3:3D:29:36:D5:F2:57:0F:4E:AC
Authority key identifier: B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
Certificate issuer: /CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Certificate serial: 019A711333D9CC488605B0D46EF09114FBEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
Manifest number: 0CA6
Signing time: Tue 11 Nov 2025 04:01:14 +0000
Manifest this update: Tue 11 Nov 2025 04:01:14 +0000
Manifest next update: Wed 12 Nov 2025 04:01:14 +0000
Files and hashes: 1: sffQCUrcmNmwMnIOgePbWqdYHHQ.crl (hash: jV7vyBS6xVePQBmdOp7/pahR7pXhNM+SwiGg9OtGkMQ=)
2: tkngR5wwQ6qh3iGid8LqkeZO0Sg.roa (hash: XAoboSbFoG6N+OZ4mfDqaXa/N9sFsWbZUGbRzqL5oH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:33:d9:cc:48:86:05:b0:d4:6e:f0:91:14:fb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Validity
Not Before: Nov 11 04:01:14 2025 GMT
Not After : Nov 12 04:01:14 2025 GMT
Subject: CN=267a729faee004a3d49de33d2936d5f2570f4eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:8a:62:30:08:97:44:38:fd:52:65:94:35:
af:f3:6f:26:37:3d:f7:b7:da:a0:87:a1:cf:fd:4f:
e4:d9:a4:c6:64:92:72:07:5e:45:1d:91:d2:60:a4:
0f:11:9d:03:75:81:27:01:1a:6d:f7:66:d6:52:dc:
e7:cf:70:9c:08:71:70:b4:15:93:a0:e1:d6:c7:f8:
55:45:e3:17:00:fe:e3:e8:35:ea:f3:1d:1a:76:de:
3f:aa:1c:56:dc:9b:48:f4:22:48:55:c1:4f:b5:ae:
05:ac:e5:d8:32:5b:9b:5e:1c:41:6a:52:8b:fc:79:
15:c7:a5:e8:1e:09:d7:87:72:2b:d8:a9:8a:70:15:
d2:04:89:50:51:26:47:ff:d3:09:0d:b9:9e:b5:f2:
38:88:11:8f:c2:bf:73:93:09:49:18:3c:44:25:49:
5d:40:82:e6:13:37:db:07:20:58:ac:ee:2a:eb:48:
27:12:14:37:15:50:9b:5e:c1:f3:b0:ce:cf:67:83:
67:1e:41:10:66:e6:19:a3:3d:ab:b7:aa:6b:99:28:
7e:24:49:b7:6d:f1:92:96:04:2e:93:0c:67:f5:7b:
f2:6e:f4:c4:c5:e6:73:61:b0:86:23:c1:84:54:8b:
8e:c6:70:21:0c:6f:56:e3:92:a2:98:50:a2:e2:3c:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7A:72:9F:AE:E0:04:A3:D4:9D:E3:3D:29:36:D5:F2:57:0F:4E:AC
X509v3 Authority Key Identifier:
keyid:B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5a:7d:9d:de:ec:a0:b4:9a:1f:e1:1c:52:53:18:9c:4c:c6:
22:2d:69:29:c7:ba:32:fb:ad:e7:cb:30:40:42:1b:37:ac:6b:
92:b6:04:c5:14:50:f6:70:6e:26:b9:a6:b7:58:b9:7a:39:db:
66:e4:8c:fb:59:e7:9f:e5:22:94:d0:9b:1c:a4:7c:3a:2a:04:
10:ba:e1:ba:13:93:bc:13:42:f1:8a:53:5e:31:ca:bf:26:47:
46:50:44:a9:eb:c7:68:99:0e:76:3c:b1:2b:e4:01:93:19:9b:
6e:a4:9b:aa:20:ce:54:ab:08:a1:65:87:ac:ef:26:10:41:6b:
76:ae:d0:5d:1e:39:77:07:08:28:98:c4:60:12:57:37:27:02:
72:96:4e:b9:58:d8:61:6b:ef:2c:a4:4a:42:d7:6f:c7:af:76:
26:d5:57:42:f4:7b:1e:26:c3:d3:1a:98:bb:e6:de:df:3a:32:
99:1c:77:a4:fe:e6:08:82:4f:f3:66:99:af:d6:06:87:87:6e:
c7:b7:7f:ff:18:9f:b1:68:43:6a:4d:c5:3f:94:1b:62:94:18:
7e:51:c3:db:3b:5c:a9:dd:b3:94:6a:f7:fd:ff:82:78:2e:c6:
9f:58:2a:c3:1e:f0:08:e3:8c:ad:1d:a3:64:3e:41:ec:d6:46:
3a:30:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:24 2025 by rpki-client