Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier: lNM4Jwn0e6cbU9GJ5E+7O1lR/9dy6n7L5dpDnB/XHg4=
Subject key identifier: 7F:3E:DE:3F:91:2C:60:2C:1C:01:F6:CC:8A:FC:64:B8:A8:E7:F1:48
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 0199E1BD301CDC2A496FE10C497DF39AA071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number: 168C
Signing time: Tue 14 Oct 2025 08:01:36 +0000
Manifest this update: Tue 14 Oct 2025 08:01:36 +0000
Manifest next update: Wed 15 Oct 2025 08:01:36 +0000
Files and hashes: 1: 2_e31xA0ke3Styc34JcGbffddwc.roa (hash: SiZtRmCeZumulAZS0QR6GtmaGOYbZYgtQLDnc2RPi2w=)
2: N3VmvFOmqCre_Lx0IfYjn2v2b6w.roa (hash: bp1wfw2pyxZJdYCZm2jvav72UAXwLNhJfCLzE6u3iuo=)
3: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: dRS0RVnjdLlLVc9Mgpjddab/SatOGcrH+elBF2umbHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Oct 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:bd:30:1c:dc:2a:49:6f:e1:0c:49:7d:f3:9a:a0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Oct 14 08:01:36 2025 GMT
Not After : Oct 15 08:01:36 2025 GMT
Subject: CN=7f3ede3f912c602c1c01f6cc8afc64b8a8e7f148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:1b:61:6b:01:ab:9c:dc:4f:fd:3a:ae:dc:
1b:a2:22:6a:d3:53:4a:d7:fc:5b:5d:89:e8:c1:3d:
3c:ad:71:52:51:ca:37:a2:a3:dc:e4:81:43:ab:91:
57:31:e8:87:27:c6:f1:ca:f0:d9:07:71:8d:39:1d:
5c:31:cc:24:a9:bc:b8:ba:e7:de:be:e6:a1:4e:21:
9e:98:e7:e2:e5:4f:2d:37:55:41:f5:02:6e:a5:4c:
1b:d0:52:88:d6:59:42:5b:ae:63:44:be:f7:d1:be:
96:c1:d8:f0:5e:62:10:4d:9b:dc:d5:11:5b:e4:67:
08:13:e8:05:d5:ea:cf:00:65:81:82:ac:6b:47:6e:
d1:19:12:d2:6e:02:60:22:7d:0c:9a:21:d1:99:d0:
23:66:0b:78:f9:7d:b8:88:d0:bc:d8:13:a1:98:b9:
a6:e3:37:f5:7e:40:e6:e7:64:e1:31:2a:4e:46:de:
8b:8c:09:c6:68:7f:8f:a6:73:6c:ec:35:fb:06:17:
5e:85:93:c6:83:6e:1f:6d:dd:4a:10:44:3f:7a:97:
ba:cc:ff:18:1e:1a:10:90:50:ed:80:9d:2f:7f:a3:
27:26:49:9e:ae:92:6f:0d:3d:9f:59:4c:87:c7:82:
47:3b:f1:41:5c:ad:36:00:35:0c:f5:40:7c:4d:1b:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3E:DE:3F:91:2C:60:2C:1C:01:F6:CC:8A:FC:64:B8:A8:E7:F1:48
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:dc:7f:60:61:e5:8d:e8:23:f4:3d:1e:4d:86:e5:1c:25:0f:
8f:38:18:f1:48:3e:55:94:56:2e:06:25:e0:bb:2c:8d:b5:1a:
6c:a1:9d:c5:dd:ab:08:41:d7:9f:30:42:41:02:ac:8b:15:8c:
29:80:f2:da:2c:52:29:c4:e5:13:cf:c2:ff:d1:d3:aa:8d:5f:
ac:96:70:50:af:ae:dd:cf:8e:c6:dc:42:c3:57:05:c9:0c:07:
48:cc:0b:13:09:9b:a7:4a:48:90:fd:2a:34:4c:8b:a9:6b:78:
d7:81:9b:98:3b:4d:e2:3e:cc:27:7d:c9:e0:6f:c6:1b:6b:2d:
5f:8f:ff:93:9b:e0:18:b4:86:80:de:2a:53:0a:f0:86:36:04:
32:8d:d3:aa:01:d6:c2:28:fe:15:11:73:90:6b:ea:47:55:93:
51:ef:ee:ec:c5:85:cd:f1:d2:5f:4a:27:3e:5d:15:f4:c3:3a:
49:a0:0d:00:78:ee:57:46:bd:b0:cb:fa:ac:f4:c1:10:09:66:
82:b1:4c:68:76:cd:91:00:4a:bf:3c:84:c9:42:72:1e:d1:9c:
80:dd:76:71:0b:e6:f8:d6:52:77:d5:01:48:97:88:aa:5e:c3:
09:93:9d:3c:7d:7b:38:e2:6b:82:c5:13:71:fb:46:02:54:43:
48:d3:61:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 11:24:25 2025 by rpki-client