Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
File: SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft (raw, json)
Hash identifier: 1UqNBauLukwvMImKJEF2H/OEdFDPVrxBAWaqG1ggjUY=
Subject key identifier: 7B:6D:9B:C0:B3:51:03:2E:A7:9A:0D:D9:0B:21:8E:56:F8:BC:32:F8
Authority key identifier: 49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
Certificate issuer: /CN=4999010bbb1f48709aeac02e84338a49b7774611
Certificate serial: 019A7226384C5236913CEF7780FF4186546D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
Manifest number: 11E2
Signing time: Tue 11 Nov 2025 09:01:38 +0000
Manifest this update: Tue 11 Nov 2025 09:01:38 +0000
Manifest next update: Wed 12 Nov 2025 09:01:38 +0000
Files and hashes: 1: MfMkCUr7HQ6KxqyWEzQVmKSbin8.roa (hash: 15XIx+4E6jpmVYTgDMId5DLCY/biXmoyIZeEQt1OExE=)
2: SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl (hash: STHYWUKOc3YgslhTfTsue+LIqzuLTTemuDq8E44i/+Q=)
3: V7TwuQchFJyj3FzgSo-quNHM3vk.roa (hash: hjNtsrFF5n1yKl43GjiftBGk4/SSn0HVl0kFwJ8ePwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:38:4c:52:36:91:3c:ef:77:80:ff:41:86:54:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4999010bbb1f48709aeac02e84338a49b7774611
Validity
Not Before: Nov 11 09:01:38 2025 GMT
Not After : Nov 12 09:01:38 2025 GMT
Subject: CN=7b6d9bc0b351032ea79a0dd90b218e56f8bc32f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:e3:c0:39:90:df:42:57:67:88:aa:76:4e:
16:bd:89:8b:c3:2e:a3:ab:b7:a6:c8:ef:39:cc:c1:
22:e0:fb:49:2b:ee:e3:53:7a:4c:9e:dc:94:39:b5:
be:d8:50:e1:fd:84:df:5f:68:4c:63:0a:0d:75:0f:
2c:e7:42:9c:02:bf:5d:82:e9:24:7a:1a:53:9b:ce:
ed:0c:93:49:96:7f:61:c5:d7:74:73:c3:44:0b:d3:
e8:3b:8b:39:8c:5f:73:a3:35:22:c5:b1:a4:11:05:
96:71:f7:b8:38:9e:a7:0d:2a:c3:98:fe:01:5d:ff:
68:2c:f1:59:c5:5f:4e:24:c0:a0:b4:f6:b5:5b:ea:
b1:27:de:71:60:8a:00:b1:71:12:56:ad:25:e2:ab:
ec:7c:9b:ad:ad:28:5f:c0:6a:ea:6c:a9:f1:14:85:
f6:1b:1e:2e:f5:84:8a:86:a7:24:4a:70:28:b2:83:
1e:36:48:48:85:b5:29:19:bd:78:63:0a:80:1b:8b:
bc:04:a0:69:aa:fa:55:e6:f3:f7:a0:6f:60:e9:f9:
ae:c2:d2:6d:89:e9:0f:ce:42:6a:38:49:af:5f:93:
dd:2d:0f:8f:5b:c6:f0:5d:34:3f:82:18:b2:9a:72:
e1:e6:eb:74:05:84:42:d6:3b:a4:f2:f0:c3:7d:63:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6D:9B:C0:B3:51:03:2E:A7:9A:0D:D9:0B:21:8E:56:F8:BC:32:F8
X509v3 Authority Key Identifier:
keyid:49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:92:ea:30:02:8d:5c:f7:be:42:79:7f:d6:6e:19:04:a1:54:
9d:36:14:f7:47:c9:ee:4f:8e:22:61:b8:a6:86:e9:f0:9b:c5:
f6:3a:29:da:9e:a5:f2:d3:6f:de:65:7c:9a:8d:58:da:56:38:
01:b8:f8:08:c0:d4:18:ec:d3:f5:ed:de:d8:5d:81:d6:e1:a4:
fa:6e:44:32:d2:58:07:b3:a6:a2:c3:6b:bd:11:ae:88:20:4d:
ab:16:af:96:8f:1a:53:4d:56:9f:69:e6:84:2d:9a:88:78:f6:
74:8b:de:bd:cc:04:de:7c:ac:ca:0c:33:1f:bb:8c:f1:6a:b5:
0b:2c:48:d6:82:da:a3:52:a5:66:93:d3:c4:b1:b4:c6:2b:b5:
50:64:37:c1:1f:bf:e4:c2:15:6b:c2:fb:f8:92:68:0a:13:0a:
18:c3:ed:cc:42:15:b0:3f:fb:11:af:4b:cb:12:9c:47:c0:67:
74:31:53:c8:cc:c6:1f:c1:26:1e:13:1d:6b:ae:37:cc:24:9c:
41:21:74:7c:83:88:54:70:50:dc:d5:28:56:23:be:2d:a4:e2:
9c:26:6b:77:ed:e3:d8:75:bb:5b:9c:77:23:03:10:99:99:79:
41:f1:09:ca:c3:f0:d3:58:22:c4:ef:91:67:37:a5:a9:22:f9:
04:00:de:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:11 2025 by rpki-client