Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
File: SZ8D5I7WKpaEDrLy15w-whon8c4.mft (raw, json)
Hash identifier: JMK6MuiWaG4rEe7nRWsaU7RMjaORNJXsFP31jsPBgUM=
Subject key identifier: 9D:F3:50:8A:B6:93:DE:DF:4F:BD:F8:15:E6:56:2D:5F:1A:F8:88:4A
Authority key identifier: 49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
Certificate issuer: /CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Certificate serial: 019A725C8DCD114507E3CC8C5A6D26C3C16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 10:00:59 +0000
Manifest this update: Tue 11 Nov 2025 10:00:59 +0000
Manifest next update: Wed 12 Nov 2025 10:00:59 +0000
Files and hashes: 1: SZ8D5I7WKpaEDrLy15w-whon8c4.crl (hash: 3UmFAFoulJnExiwumMuH1ujPNpk8H22VpfkpJDwDMLc=)
2: yzTNOCEQUyiIncYM071wY64qAlg.roa (hash: hLDsFeTn5OhhHpxN9Rt6KZxw/jMGMbLdQEqz1BHAxCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:8d:cd:11:45:07:e3:cc:8c:5a:6d:26:c3:c1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Validity
Not Before: Nov 11 10:00:59 2025 GMT
Not After : Nov 12 10:00:59 2025 GMT
Subject: CN=9df3508ab693dedf4fbdf815e6562d5f1af8884a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:05:2e:06:ed:e8:53:08:f6:ec:2c:30:8e:
ba:05:ed:8c:be:d9:da:63:91:dc:02:64:b3:16:d9:
fa:98:2a:18:f6:be:e0:b8:ba:dd:27:50:88:df:c6:
ba:c1:58:a0:26:6d:33:d5:86:52:3a:d2:ec:45:06:
71:bd:15:d3:59:a0:5a:a4:44:1b:9d:09:30:94:c7:
10:5d:bc:d3:33:42:91:7d:ca:02:71:7c:12:56:d3:
c6:a2:38:e8:31:73:fd:d6:8c:0d:e1:8c:0d:9d:86:
ce:b3:28:73:87:6a:24:90:38:13:a8:d5:2f:4c:98:
b6:0e:fd:69:6a:a1:43:d0:10:b8:b1:51:32:05:d3:
2a:32:00:ac:da:5b:7e:ef:ab:bf:9a:b4:37:48:b3:
e7:4b:2d:9c:11:62:0c:a7:83:f9:62:26:89:5d:bc:
a1:8a:7c:2c:72:32:45:f8:b3:0d:27:01:5a:8b:e7:
af:b4:90:00:41:a1:e1:70:b9:c1:45:e6:b1:69:c8:
5e:b1:d2:4f:c3:e5:a3:ba:a6:35:de:78:c9:33:1d:
cc:b3:e7:94:32:fb:66:e1:8f:dc:0d:7c:c3:92:8d:
f7:e3:5b:27:5c:d4:ee:e2:b1:61:4e:fa:45:2c:d3:
8b:5f:4d:13:a6:42:ee:41:f5:38:21:8d:e7:14:b6:
82:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F3:50:8A:B6:93:DE:DF:4F:BD:F8:15:E6:56:2D:5F:1A:F8:88:4A
X509v3 Authority Key Identifier:
keyid:49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:27:38:15:d2:e4:18:03:bb:a0:50:49:64:68:b2:1e:61:04:
bf:82:f9:8d:73:cb:be:20:4f:67:68:a7:36:9e:ce:18:5c:d3:
0a:7f:56:6c:19:a6:e6:6e:3a:65:95:e1:f2:ab:d9:d6:61:83:
f5:54:11:1d:03:ad:a9:46:db:ab:d1:c4:fb:9e:c3:e8:66:db:
05:be:d3:42:11:7a:07:cd:39:49:7c:21:4e:7c:20:d9:9c:aa:
d8:4a:14:42:91:b6:c0:58:1a:65:b4:45:5d:23:9b:2d:2c:67:
d7:41:24:63:67:60:51:b5:56:83:6d:cd:31:d4:9d:f7:02:ee:
9b:76:09:ae:03:cc:4e:42:94:19:63:99:85:95:b2:32:9d:c1:
ca:6a:c2:f7:97:29:f4:e7:af:05:c9:b9:dd:3c:11:67:65:d1:
04:73:33:a5:34:08:56:77:2d:41:4d:dd:de:2b:71:63:ec:2a:
b0:a5:44:be:99:d0:73:c4:31:f7:73:27:b2:8e:ff:af:6e:4e:
5a:24:c7:3c:04:89:19:81:ad:fd:e1:a3:bc:0c:d7:01:87:dc:
a0:a1:55:99:2a:2a:37:d3:99:df:d0:5f:34:c5:77:63:01:43:
1b:bf:d5:28:e4:b4:b8:8f:cf:61:e1:ce:74:2b:5a:71:73:9a:
ad:46:8c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:12 2025 by rpki-client