Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
File: sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json)
Hash identifier: +BJQxokx1P1IgavzRqfSWPE7wZOhdptUl6xskpQU4gI=
Subject key identifier: CE:33:E9:06:BB:1F:4B:F7:95:50:D3:75:0A:0A:59:1D:E3:1B:E4:51
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Certificate issuer: /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial: 019A2A7A1F5F94C6DD5B309D0BA06697A32D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
Manifest number: 1306
Signing time: Tue 28 Oct 2025 11:00:37 +0000
Manifest this update: Tue 28 Oct 2025 11:00:37 +0000
Manifest next update: Wed 29 Oct 2025 11:00:37 +0000
Files and hashes: 1: IQVuYRD39w1eDGvQI5n6qd53zJ0.roa (hash: YMuLKblQhuUFH21p6Ke9CEB5Y7GrJ0BpmU+txXFqoC4=)
2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: QY2OypXSPJGuNCC9dfRZCr10nS+j1pIk5x6XOhc9fik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:7a:1f:5f:94:c6:dd:5b:30:9d:0b:a0:66:97:a3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
Validity
Not Before: Oct 28 11:00:37 2025 GMT
Not After : Oct 29 11:00:37 2025 GMT
Subject: CN=ce33e906bb1f4bf79550d3750a0a591de31be451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a7:ba:0c:77:43:9b:42:78:dd:ba:c6:b4:cd:
f4:85:80:a3:cb:4e:ed:04:03:e2:18:4a:47:01:a6:
8e:9d:22:db:40:40:b5:b8:ec:8e:88:2b:35:67:a1:
95:de:82:bf:98:ee:82:12:9c:3e:f8:83:6f:8c:1a:
27:b8:1e:6c:fa:2c:4c:55:a8:87:ec:8a:62:19:62:
53:ea:22:c0:51:56:4a:e0:4e:10:28:03:eb:7f:fc:
dc:ce:fb:b6:e5:e8:9a:15:69:28:69:af:dc:ff:2c:
10:38:9e:7b:5c:d9:e1:23:0d:c2:e2:f6:5b:4e:ee:
e6:f8:f8:9c:7f:f4:2f:4f:33:18:2a:21:79:4e:06:
0a:4f:ac:37:d8:6d:77:fd:fe:a0:56:f0:c7:e0:57:
53:de:60:c5:fc:dd:68:04:19:e8:40:cc:30:06:c6:
91:c2:8a:17:85:a4:5b:25:0f:21:ca:16:7d:fa:4f:
f8:d5:6e:31:8a:f1:ac:57:a3:50:e4:4c:e3:23:0d:
2b:e5:02:6d:de:a9:c3:a0:3a:62:55:0c:f8:6c:04:
d4:23:f2:bd:f9:a7:97:7d:55:29:18:37:f0:88:99:
35:2c:19:41:8c:c3:03:7b:33:47:cb:ce:2b:d1:0b:
05:ab:b8:fe:84:8b:33:18:b0:f4:81:da:cd:03:b0:
45:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:33:E9:06:BB:1F:4B:F7:95:50:D3:75:0A:0A:59:1D:E3:1B:E4:51
X509v3 Authority Key Identifier:
keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5f:2e:8d:a0:1a:ac:2c:41:e5:3f:7b:de:e4:32:bf:a8:2c:
23:0f:c9:65:04:bd:8a:26:21:42:41:c9:02:01:af:a2:22:98:
60:76:17:fb:e2:86:49:cf:fd:90:f2:64:5e:9d:b1:9c:c2:6c:
02:c0:21:26:e3:2e:e9:d5:ae:ec:1e:ab:4e:6f:0c:f6:35:af:
24:e8:46:3a:cb:4d:88:77:d2:45:a7:64:27:bb:20:47:be:f2:
5a:b8:61:b6:84:ae:8b:e7:0a:07:c3:c4:87:fd:93:ef:65:6d:
f5:0d:6d:b2:77:90:dc:9d:47:a2:71:9c:ef:1d:c4:2a:18:4d:
a6:7e:7a:03:ce:42:f3:e4:c3:14:27:05:41:39:47:03:38:6e:
11:24:f7:51:14:41:b3:8a:69:a6:eb:87:00:3f:fe:92:69:f7:
9d:4c:5c:59:ee:72:3b:cf:38:76:99:ee:4c:52:ef:ef:89:54:
e0:4d:3c:9e:b6:f7:23:7a:8a:27:2c:aa:63:d2:2a:49:a1:1f:
a2:76:ec:ad:31:f0:04:82:b2:79:59:29:9f:a4:a2:be:36:b6:
2d:7d:c0:ef:36:4f:b0:23:05:93:1e:69:b7:1c:23:d9:d0:21:
94:ee:a3:e6:d6:95:b9:74:d5:96:16:0c:c9:f5:4a:b8:fa:88:
d4:5e:55:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:16:43 2025 by rpki-client