Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: KTBCg6cZY5uvROFgVzGvNpDxpTuaKNZNWE/MD2WuePY=
Subject key identifier: 05:1F:0B:D6:73:0B:FC:21:17:1F:F3:37:89:F7:36:37:82:96:5F:DB
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 019A19BD4A65EE004CCA8D2A6722E209A63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 1686
Signing time: Sat 25 Oct 2025 05:00:27 +0000
Manifest this update: Sat 25 Oct 2025 05:00:27 +0000
Manifest next update: Sun 26 Oct 2025 05:00:27 +0000
Files and hashes: 1: aXSOEWx3tVF7ynpp-Q3fBbDZg50.roa (hash: RSnTxORBukbARx6FRTZpYXAyjlGDaMBXkz61tBk9AhY=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: OvdLC0m7EE44ex8i4k1WoR4QM9t2Bxn+8Bi/egnpvCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:bd:4a:65:ee:00:4c:ca:8d:2a:67:22:e2:09:a6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Oct 25 05:00:27 2025 GMT
Not After : Oct 26 05:00:27 2025 GMT
Subject: CN=051f0bd6730bfc21171ff33789f7363782965fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:6e:96:96:2f:27:87:79:01:fe:9b:6f:3e:
81:8c:85:35:fd:44:e6:b7:c3:b7:fb:44:da:1b:f4:
6b:39:de:4b:5e:05:38:07:68:95:5c:fc:7c:8d:aa:
94:87:63:b5:0f:ed:01:46:9a:f3:75:e7:72:b2:3c:
21:b1:10:64:0b:41:53:cf:f5:d7:e0:46:48:a8:06:
a5:ae:fe:42:2c:6c:fc:40:56:4e:a4:46:27:26:24:
02:74:4b:31:fa:49:69:5f:74:66:bf:fa:da:71:bf:
62:fd:b0:c9:8e:85:7e:74:19:63:f6:71:e1:40:04:
28:70:f8:ec:ea:b9:57:78:bc:af:d9:bf:ba:19:81:
46:fd:5e:2e:a7:e7:39:8e:e2:2b:d3:c4:ba:b8:ff:
c0:69:7b:a7:fe:ed:b6:cc:b9:45:fc:91:4c:78:58:
1c:dd:14:98:b1:aa:0b:d7:4f:73:67:3c:38:83:11:
b8:31:8f:09:98:b8:49:31:78:ae:c3:84:0a:86:d1:
d7:5b:a1:e8:e4:dd:55:59:da:6d:a7:85:f1:0b:81:
d2:31:b7:7f:fc:c7:7e:d1:e1:4f:37:42:c2:95:78:
41:7d:31:a7:44:90:77:5e:e8:05:86:ba:33:13:8f:
54:ec:70:b0:78:ae:21:35:18:a2:02:45:e2:aa:3a:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1F:0B:D6:73:0B:FC:21:17:1F:F3:37:89:F7:36:37:82:96:5F:DB
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8a:58:23:43:7d:44:be:d1:58:7b:83:f5:ac:f5:1f:ad:2d:
85:37:97:f8:3e:01:ec:67:4a:20:8b:de:49:32:51:e5:dc:f5:
c2:ad:86:af:94:c7:48:88:51:29:2f:cf:af:47:af:97:d3:e0:
45:36:93:3f:ae:5a:76:5b:b3:cc:80:87:ef:61:90:20:f3:ef:
82:b4:b9:8a:90:b6:15:4c:bb:af:06:9d:83:b7:14:fc:69:08:
cb:67:37:3d:90:e6:0e:29:23:cb:1a:da:05:a3:d6:7d:8f:cc:
6a:06:30:07:b7:3c:ec:53:d4:25:7a:96:30:04:f1:3c:49:75:
12:62:78:4a:69:3e:5e:dc:ce:e7:9a:a7:53:ac:04:e6:60:7d:
cf:47:aa:9c:f3:26:17:e9:43:c3:82:7d:32:bd:bd:1e:25:69:
7e:52:74:7a:db:9e:c1:c8:e1:9a:cf:18:cb:b9:8b:83:ff:49:
f5:bc:d0:f1:e9:cd:3d:0a:b3:62:d2:49:db:a7:50:f0:c3:6d:
ea:0d:a1:e9:83:09:80:71:ab:7e:f8:fb:54:e3:f7:fa:fe:a3:
93:b4:97:95:26:67:1c:cd:8e:fa:27:2f:d9:a3:3c:ef:fe:14:
70:23:27:27:9f:11:5e:63:84:35:6e:a3:79:04:98:16:ed:dd:
32:e2:75:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:40:22 2025 by rpki-client