Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
File: sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft (raw, json)
Hash identifier: clDGtRcNp/4rQhgYEOCXljyTh0WP/Rfnzf4CJmFQG8g=
Subject key identifier: 90:B8:79:39:04:41:9D:7E:19:FF:FE:D0:E0:E5:5E:15:30:DA:FF:21
Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
Certificate issuer: /CN=b092425ab7d66bab711fbaa22757377807834159
Certificate serial: 019A7149938E517D5254D2699E435113BA2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
Manifest number: 1260
Signing time: Tue 11 Nov 2025 05:00:38 +0000
Manifest this update: Tue 11 Nov 2025 05:00:38 +0000
Manifest next update: Wed 12 Nov 2025 05:00:38 +0000
Files and hashes: 1: sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl (hash: ZrWb4F3MqvU3R6FR0OkjHstSMt5WixDfQgGlsaG32Ms=)
2: xpUZ10Vu1qa-MopSRwLh2bfxYj8.roa (hash: NYjloxspB8LHVTP8CX0ABP6kH8QfTSSMPoocxQ4vWls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:93:8e:51:7d:52:54:d2:69:9e:43:51:13:ba:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b092425ab7d66bab711fbaa22757377807834159
Validity
Not Before: Nov 11 05:00:38 2025 GMT
Not After : Nov 12 05:00:38 2025 GMT
Subject: CN=90b8793904419d7e19fffed0e0e55e1530daff21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:78:76:33:5d:79:b6:49:1a:41:d3:3a:12:27:
d0:65:f7:5d:2e:c5:87:01:3f:f9:cc:a0:bc:e4:b1:
ca:8a:bf:da:13:c2:ed:5a:6b:8a:e4:cd:c7:49:4b:
b2:4d:45:c6:74:e7:95:a5:61:be:c4:05:cf:65:72:
1d:ab:6a:b3:3c:18:84:33:08:30:84:ad:51:48:b1:
07:bb:8a:d3:4d:a3:f5:0c:6b:4e:14:c1:dc:fc:9c:
c8:51:fd:7a:f9:4f:7c:eb:b5:e3:d9:32:c3:e0:9c:
60:01:4f:be:bb:18:c8:87:bf:d4:ce:fa:3b:a0:f3:
61:c6:0d:3a:b6:c5:7c:3f:93:66:91:d9:7a:86:c6:
88:e9:37:b5:94:6c:57:61:fc:7f:8d:1e:e9:6e:7b:
37:56:17:2a:e7:1b:07:40:48:aa:2e:b0:1b:d7:6f:
60:9c:33:c9:88:5b:6f:17:45:5c:51:ab:7e:42:e5:
38:69:16:3b:47:82:61:b3:00:bb:5c:9f:e8:34:1f:
63:3a:89:40:79:9c:df:fe:13:96:cc:a3:f2:7b:94:
c9:1b:2b:b8:30:74:37:04:8d:e5:3d:64:ce:c7:a9:
3a:28:8e:57:e7:af:1a:58:d1:e2:23:2b:6d:3a:65:
1e:61:3a:9e:a9:ec:74:43:ae:e2:5b:62:2c:6b:b6:
cb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B8:79:39:04:41:9D:7E:19:FF:FE:D0:E0:E5:5E:15:30:DA:FF:21
X509v3 Authority Key Identifier:
keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:01:ff:ac:6e:85:4f:37:05:c0:e7:ea:88:a2:15:41:be:c2:
1c:35:55:cc:a7:09:42:8b:71:5c:e9:d8:c5:89:a3:92:6e:a3:
5b:a9:40:50:fa:13:7f:a4:26:63:64:da:a3:da:20:20:1c:40:
5d:09:1b:a2:f1:03:f4:b7:ae:e8:bf:14:9e:d1:d4:38:ed:32:
84:5e:f7:dc:0a:a4:86:69:d8:9e:5b:2e:79:86:7e:95:60:9a:
c0:2d:aa:b2:e9:6f:5b:cb:6b:1d:4a:34:8e:63:d6:69:95:aa:
6e:44:be:3f:19:a6:13:cb:b6:a8:dc:b2:1f:3e:6f:c5:d4:96:
84:81:fe:e3:2e:21:45:9b:c5:84:3b:41:89:6a:cf:bc:16:75:
a0:05:9d:c8:11:62:e9:c5:f2:d4:00:de:cf:ef:95:d4:7d:c4:
4f:70:3a:eb:1f:e4:a7:2f:36:3c:38:31:d6:7f:1b:d7:05:a0:
37:f2:ce:81:ce:09:b2:b7:74:ff:67:e6:20:4c:1f:8b:be:f6:
06:47:7a:bc:e7:fd:f9:13:67:68:b1:5d:b2:9e:9b:d2:79:29:
36:3d:6a:ec:bf:1f:03:c6:15:e5:a3:73:c0:cc:ed:8d:b7:75:
e9:3f:16:4e:d2:97:20:a7:e1:43:71:a5:77:84:7f:e8:19:21:
43:15:cf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:49 2025 by rpki-client