Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier: GGpHyr8mIllzB5AZuhUX0UA6Hw1/fN92tcassxCwucI=
Subject key identifier: 94:61:5C:EF:8E:71:E8:84:C1:6F:37:E7:8E:1F:E1:9D:3E:78:CB:74
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 019921E7BC1FED8FC65F3FB3E2F7B3F95011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 02:00:59 +0000
Manifest this update: Sun 07 Sep 2025 02:00:59 +0000
Manifest next update: Mon 08 Sep 2025 02:00:59 +0000
Files and hashes: 1: LYWNFEM4isLrMZkcPOtofB7wrtQ.roa (hash: 3L7ng+8G15KKO1VpRMLBS9WLq4qDKG/BjuMPbzD+J28=)
2: gPGcyQrRSC47MoDcNvHUCHgMy9I.roa (hash: MmytL0w6XbyXL7UhT0pH40kUdOSvBJ5woyxf0GcUHwU=)
3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: 5jA8VDAnsFQZJ/k2LZGXyf2c6lW1SQbtHYwT6q9xXd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:bc:1f:ed:8f:c6:5f:3f:b3:e2:f7:b3:f9:50:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Sep 7 02:00:59 2025 GMT
Not After : Sep 8 02:00:59 2025 GMT
Subject: CN=94615cef8e71e884c16f37e78e1fe19d3e78cb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d6:7c:c9:c2:97:09:e2:de:04:ec:53:a2:70:
6b:09:b8:83:d7:4f:ef:6e:1c:6c:23:a5:40:d2:1b:
71:58:4f:e1:b8:df:1c:af:fd:b7:77:35:b5:32:76:
81:40:a4:b9:59:0d:f7:63:db:0f:f7:f1:c3:89:9c:
ac:16:b7:40:1d:03:7c:c0:b5:67:79:cf:79:b7:98:
63:49:77:89:b4:74:b0:f7:22:43:09:85:69:1c:f6:
c1:b6:7b:10:99:5f:48:9f:bf:d2:c9:09:1d:d9:e6:
62:d3:ac:fd:ef:88:23:64:e0:ea:02:98:a2:3c:ad:
61:98:8e:0f:7c:94:ad:d9:30:59:6b:e0:52:af:99:
74:9d:29:06:be:b6:86:e9:5b:af:df:fd:32:5d:42:
1e:93:09:2f:0f:57:d4:17:51:eb:e9:30:56:a5:5e:
b9:27:e4:10:c1:16:3d:33:2d:d1:9b:09:64:c9:28:
1b:c8:67:12:09:b2:a0:a1:0b:ee:07:63:53:fd:4e:
05:2f:af:ed:73:6d:0e:af:c8:24:88:ca:1a:2f:b3:
bf:f4:ef:49:33:4c:90:62:79:e0:25:fc:8d:69:23:
ec:fc:d0:44:23:4e:ea:0e:1b:fb:0d:b3:3e:7b:9c:
54:05:9e:36:0a:1f:7a:96:0c:3f:94:de:09:56:7d:
c8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:61:5C:EF:8E:71:E8:84:C1:6F:37:E7:8E:1F:E1:9D:3E:78:CB:74
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e8:30:6f:81:f9:1d:74:1f:cf:56:6b:31:66:2c:d2:1b:ce:
33:eb:6b:ec:0c:2b:2a:91:fc:ed:1d:b3:3a:fc:d1:6f:16:ed:
dd:81:b0:ac:9d:be:49:b5:70:f6:fd:69:18:5a:a8:e7:86:a7:
80:44:95:5f:6d:7f:28:21:67:8d:ce:56:2c:eb:dc:e0:1a:24:
2d:40:c6:36:d5:da:38:aa:c3:c3:fc:b4:43:e7:fe:47:2c:c7:
22:0c:0b:48:2a:a6:95:36:4c:7d:df:e0:91:4c:0f:43:8a:75:
b1:cf:9a:ca:48:00:5a:4d:30:36:8f:08:f8:91:28:f6:ee:63:
30:b3:b1:01:63:fc:ab:13:d9:21:16:0e:14:9f:06:a6:e6:27:
ad:2c:29:ff:1e:07:29:86:a1:66:99:ad:b3:1e:9c:88:81:3a:
75:12:78:71:62:ce:21:a5:f4:04:d2:4a:fc:e5:35:34:be:f5:
85:8f:78:ef:5e:68:72:e0:6a:8f:7c:aa:73:32:88:b0:59:34:
ca:f2:89:0f:be:2b:43:f5:bc:28:94:df:22:7d:b0:0c:24:8f:
97:c5:51:69:b7:e4:4a:50:88:b8:96:99:ff:e5:2a:d6:51:8f:
5b:5d:1a:d9:54:fd:04:0c:46:7b:d0:f8:db:f5:0f:93:d5:de:
3b:eb:a0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:16 2025 by rpki-client