Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
File: sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json)
Hash identifier: lLmYldTJNebZo5brYUR78Q1X+7X7bsb8Z7n+Mz5+5jo=
Subject key identifier: 7E:24:E5:06:B2:F9:A1:65:B3:C7:73:5C:C2:E7:87:E9:1F:A3:A2:B2
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Certificate issuer: /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial: 019A41DD4C998E7B00B4FE3BA2B67D61AE2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
Manifest number: 1708
Signing time: Sun 02 Nov 2025 00:00:13 +0000
Manifest this update: Sun 02 Nov 2025 00:00:13 +0000
Manifest next update: Mon 03 Nov 2025 00:00:13 +0000
Files and hashes: 1: QXyQtT8qy7cZkdePrzNkoMkFsLI.roa (hash: p4NnT1oNWa0lNXGn9ql046BScEcNjINqPaeSDpvSus0=)
2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: ivuSL16OeBgh5v1F25JbdUchR7hIQc/ZTgLij6Lrem8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 21:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:41:dd:4c:99:8e:7b:00:b4:fe:3b:a2:b6:7d:61:ae:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
Validity
Not Before: Nov 2 00:00:13 2025 GMT
Not After : Nov 3 00:00:13 2025 GMT
Subject: CN=7e24e506b2f9a165b3c7735cc2e787e91fa3a2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:08:5e:31:e3:31:f2:e1:c1:24:b7:d1:66:
2f:9e:d4:73:c8:9e:d0:a6:2f:cd:26:e4:1f:c7:0b:
25:54:19:0d:46:f7:83:f8:ed:87:b4:99:9b:6d:77:
1e:e2:bc:c9:78:ab:1a:99:5d:45:0d:c2:9b:19:3a:
bc:81:73:62:19:d3:8d:8d:97:69:19:df:39:a2:5b:
9e:10:74:66:38:b6:e0:dd:5b:e5:51:1e:ea:32:f2:
27:f3:eb:6d:8d:f4:8f:08:64:4b:fa:ef:46:f1:4a:
a0:7a:c5:88:9f:45:91:9f:cb:94:ca:54:29:44:b6:
41:c5:d8:7a:7b:b0:a5:22:d4:d9:ea:0b:05:eb:72:
a9:41:d4:64:83:b7:ce:83:e9:e2:29:04:0d:a6:34:
2f:ba:8d:ca:0d:66:9b:0b:80:ed:9e:37:1d:df:df:
d3:a9:79:15:90:fe:da:a1:69:77:2c:d5:d4:7e:9b:
60:26:ef:9c:ad:0d:65:c4:40:9a:b6:8d:47:db:70:
04:3b:52:43:35:66:16:9d:2f:ab:a5:0d:21:a4:08:
6f:4e:4f:0f:94:30:08:94:0b:e2:f0:d7:ff:32:e2:
9f:9d:4f:ec:ec:44:a0:82:58:a1:d3:22:68:80:a7:
42:90:04:45:4b:7c:a1:c1:95:82:63:45:20:0a:69:
2d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:24:E5:06:B2:F9:A1:65:B3:C7:73:5C:C2:E7:87:E9:1F:A3:A2:B2
X509v3 Authority Key Identifier:
keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:90:7f:6a:f6:db:56:ca:fc:45:70:4e:4a:b2:e6:e6:1c:26:
6b:d1:d0:fe:ac:d6:70:6d:da:83:eb:6b:b7:c7:f8:9d:81:08:
2e:aa:11:fe:64:b2:fd:d9:f8:bf:6d:eb:5d:75:6f:86:91:a0:
b3:b8:c5:2f:d2:91:2d:07:16:93:f0:8b:65:8d:d2:b5:33:83:
7d:de:11:cd:34:a1:f3:71:c9:cd:73:21:dd:39:dc:06:7b:9a:
86:ab:55:a4:7c:62:cd:3f:45:93:b1:62:ea:74:0d:1d:4b:74:
d4:39:d3:ed:66:46:89:3e:a6:90:65:05:d6:c7:a5:ef:60:c9:
c5:d1:75:07:a4:02:d2:01:27:b3:8c:c9:b6:dc:b5:bd:60:47:
32:fb:2b:e3:8a:86:b0:8e:05:1b:4e:94:d7:17:17:28:6e:ef:
9e:66:d3:eb:e8:b8:25:19:57:de:2f:e2:ec:9e:ee:1b:4c:cd:
a1:58:fa:7f:dc:b5:b4:b5:d6:a3:12:ff:87:2d:c0:ff:59:e2:
17:64:af:da:e1:ef:f0:4f:73:a4:36:01:f0:04:8d:2c:cb:eb:
0a:8c:1c:62:d6:72:ea:ae:35:bc:00:bd:2c:45:e6:cf:c6:ed:
a3:55:88:13:52:4e:48:aa:74:f0:10:0c:d2:de:c2:85:9f:b2:
d5:f5:3f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 05:46:22 2025 by rpki-client