Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
File: SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json)
Hash identifier: Z6rTg478eBQJOiwaP3JCvXQ3dcnQqiAe6HQTVL6x+i0=
Subject key identifier: CC:DF:79:27:9B:2E:04:BA:A2:EB:A7:13:90:03:EE:22:FA:B4:C9:B6
Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Certificate serial: 019A24782BE9CCCC51DC03486809E19C9AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
Manifest number: 0A35
Signing time: Mon 27 Oct 2025 07:00:46 +0000
Manifest this update: Mon 27 Oct 2025 07:00:46 +0000
Manifest next update: Tue 28 Oct 2025 07:00:46 +0000
Files and hashes: 1: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: eQK71IFnUhzioZUOVLnaa9tGuzNcW/TqBEc2AyPv8Rw=)
2: sTQX2j9_L-RKxKJ-gpSAUcHW26c.roa (hash: SMZ74eYXgCBYRpcaMVOmXChoRcbWwRauRrg3+g+Vya0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:2b:e9:cc:cc:51:dc:03:48:68:09:e1:9c:9a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Validity
Not Before: Oct 27 07:00:46 2025 GMT
Not After : Oct 28 07:00:46 2025 GMT
Subject: CN=ccdf79279b2e04baa2eba7139003ee22fab4c9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:85:06:de:7f:df:55:1e:e5:f2:76:d3:40:0f:
d1:1f:e3:36:87:ef:2e:b7:6c:3c:da:3e:f7:3a:88:
83:cd:76:1c:c5:e7:12:a7:a9:da:6e:31:5b:30:19:
4e:73:1f:e3:31:b8:41:f0:83:a5:31:59:66:b1:8a:
76:b7:02:c8:df:36:a3:9f:33:c2:b4:3f:d7:18:ec:
ba:b1:6b:9b:0d:73:28:a4:47:02:05:bc:68:7b:dc:
74:65:bd:87:c4:12:08:0c:39:d0:c3:c5:02:33:d7:
46:4c:ca:5a:58:2c:17:28:2f:e3:63:17:a9:48:eb:
c1:a0:b5:41:37:c3:68:ec:64:a5:dc:21:f6:62:fa:
f2:79:f0:6c:6a:21:26:e0:cf:1a:f2:c0:10:2b:9d:
62:c8:15:3a:69:55:ff:79:65:ea:29:7d:f6:6d:23:
78:51:64:85:70:bc:74:cf:ab:fa:54:d3:60:f2:26:
5b:8f:87:dc:fd:bf:86:67:99:f7:9a:b3:fd:63:b8:
85:4c:c0:a1:b1:16:f2:8b:94:5b:ec:6f:67:08:a3:
c3:d0:bf:9b:88:c6:f7:52:ea:99:6b:7d:94:4f:bb:
cb:4c:c3:14:a7:55:0a:7d:36:5a:27:cd:cf:3a:a0:
4c:75:ee:78:8d:21:c7:f9:60:d0:7a:5e:7a:b4:2a:
30:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DF:79:27:9B:2E:04:BA:A2:EB:A7:13:90:03:EE:22:FA:B4:C9:B6
X509v3 Authority Key Identifier:
keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:aa:65:aa:07:3e:ac:70:fa:45:2d:b9:c0:ee:4d:0c:8e:77:
07:7b:9f:5f:0b:2c:4e:98:4e:38:1a:2f:28:5b:1f:25:1b:9d:
04:fd:e5:09:74:ba:a2:5c:65:25:72:99:d7:27:3f:1b:f1:ee:
0d:51:47:3d:3b:a0:6f:db:79:4f:fc:5c:36:85:82:6f:80:85:
bb:15:97:ce:23:77:04:a2:76:49:52:06:72:dd:51:f2:ec:bd:
0a:d2:9e:f0:b9:26:b4:15:ae:d7:80:3a:9a:49:9d:1c:ba:c0:
48:f7:09:7a:50:55:08:f0:05:7a:df:04:71:e2:4b:9a:1c:ee:
05:e4:2e:c1:45:11:6c:d9:93:a1:ea:55:fe:58:0d:33:bf:bd:
63:a4:36:bb:b4:76:72:f2:30:1e:2d:28:46:d6:f9:bb:1f:17:
f8:69:48:2f:32:a5:ad:0b:2f:36:30:f1:98:f0:7c:6a:c0:21:
37:a8:3c:0c:ce:d4:6d:38:6e:d1:c3:eb:1e:50:70:73:df:6a:
ef:17:66:1d:9c:b6:a3:63:08:31:5a:25:3f:69:cf:9c:f3:b7:
ec:3e:ed:66:94:ef:d1:c9:44:83:d4:01:8e:48:10:01:1a:54:
0e:7e:00:6b:d4:9d:ac:df:26:e3:42:df:7a:76:83:b5:84:0c:
f4:84:fa:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:29:38 2025 by rpki-client