Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier: c5T/RGFJ/usksoYSNBxPDigAz3gzIQlsT2GNQc2JV18=
Subject key identifier: 43:02:85:17:DC:49:DE:60:D7:C0:5A:AB:97:41:83:36:36:43:A1:47
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 019A71EEBB78702FF1ED67E1F834D4E5E07A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:01:02 +0000
Manifest this update: Tue 11 Nov 2025 08:01:02 +0000
Manifest next update: Wed 12 Nov 2025 08:01:02 +0000
Files and hashes: 1: LYWNFEM4isLrMZkcPOtofB7wrtQ.roa (hash: 3L7ng+8G15KKO1VpRMLBS9WLq4qDKG/BjuMPbzD+J28=)
2: gPGcyQrRSC47MoDcNvHUCHgMy9I.roa (hash: MmytL0w6XbyXL7UhT0pH40kUdOSvBJ5woyxf0GcUHwU=)
3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: kw/pddPcjKm72auV01H5ViFMPEfDBWPAXoMQox1t0FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:bb:78:70:2f:f1:ed:67:e1:f8:34:d4:e5:e0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Nov 11 08:01:02 2025 GMT
Not After : Nov 12 08:01:02 2025 GMT
Subject: CN=43028517dc49de60d7c05aab974183363643a147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:0a:f7:95:f7:d1:ac:c3:22:9f:5a:32:3b:
a6:60:00:d4:57:70:51:0f:c2:0a:36:ba:cb:a1:8b:
53:56:5a:f8:ba:7d:85:ad:93:05:ad:6a:27:66:68:
2f:39:ee:14:d8:f0:ad:7b:aa:b8:7b:68:df:80:ae:
52:67:b4:68:0c:97:ca:f0:e3:cb:ea:3f:c1:3d:93:
05:a4:50:5c:58:78:39:fa:40:d9:07:79:1c:68:f8:
d2:e1:0f:9f:1a:dc:2e:de:78:f6:fd:47:69:0b:96:
fd:6d:05:e2:a0:29:84:fa:4b:bf:0a:b3:a5:14:08:
d6:5f:de:99:86:e6:d0:c6:2d:a8:f7:d8:50:52:51:
e9:c2:b1:46:37:ef:0a:55:c6:29:95:ae:44:2b:b1:
e6:8a:2d:06:54:49:82:f9:bd:35:55:5e:67:fc:56:
98:1a:b7:74:83:bc:0d:cd:c9:8f:32:a1:b7:91:cb:
e4:e8:a9:2b:df:e4:25:2b:bf:60:07:13:69:ce:59:
ea:e5:0d:9e:ea:80:d4:d7:8c:0d:fd:14:e5:2a:d6:
a3:36:b1:7b:8d:75:3e:30:f6:5c:bb:12:87:63:73:
59:36:5a:4b:ab:03:42:71:6f:b8:55:fb:56:bf:5d:
ec:11:b5:67:8c:9b:15:bf:cb:2a:f3:b9:1a:8b:7a:
fe:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:02:85:17:DC:49:DE:60:D7:C0:5A:AB:97:41:83:36:36:43:A1:47
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3e:96:19:f6:26:04:ca:8c:c6:23:81:18:a1:4b:b0:c5:06:
b8:6e:06:98:2f:45:7e:78:fa:44:53:fc:a0:6e:28:ba:35:e2:
0b:a1:a9:6e:91:18:e3:d9:52:6a:4f:2a:16:ea:71:99:d6:3c:
ac:f6:1e:04:68:e2:4c:68:2d:4d:77:ba:a2:2f:d5:c5:5d:71:
98:de:f3:58:72:57:4f:e4:b4:08:83:00:36:f4:29:8d:ce:23:
7b:21:a4:40:58:3d:ab:d6:91:e9:d8:98:22:53:a6:80:9d:de:
3b:38:4d:f4:cd:5f:65:17:2a:4a:60:43:39:15:6f:38:a8:48:
64:fa:b2:dc:da:bf:0f:11:c4:91:f9:03:3d:04:89:13:50:b1:
6e:05:b0:b7:9b:19:5d:c7:c6:a7:42:a2:0b:57:24:08:47:63:
b9:df:72:53:b9:15:92:2c:76:7a:0f:9a:a7:2f:01:68:8b:f3:
75:73:96:e5:29:2a:5e:ec:a5:dd:70:b8:5d:97:59:58:0c:5a:
90:b7:df:77:4e:9d:00:10:bb:24:1d:7a:82:9b:e7:46:1b:0b:
dd:55:b0:1c:a4:05:ed:10:b5:c3:f8:41:c3:0c:fa:e5:c4:54:
aa:53:ba:70:d8:04:f9:56:b9:50:25:f1:3e:b8:e5:fa:06:33:
a7:85:a5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:59 2025 by rpki-client