Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
File: sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json)
Hash identifier: sV3BtherZKmd8rFp4+RzLsx9wVutsJFh8Or4tTP+uX4=
Subject key identifier: BD:DA:C6:FB:2E:84:4E:69:F0:67:46:EA:17:8B:24:D5:77:00:A6:DE
Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
Certificate issuer: /CN=b085804db153eb724c58557c79359c4408205550
Certificate serial: 019A70DC38755CABE2318F26A690FD1F169B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
Manifest number: 05FA
Signing time: Tue 11 Nov 2025 03:01:11 +0000
Manifest this update: Tue 11 Nov 2025 03:01:11 +0000
Manifest next update: Wed 12 Nov 2025 03:01:11 +0000
Files and hashes: 1: 18TNS4gBaAj1nBKZLGQyvBGXDAA.roa (hash: yG6kNp39rMwW08RfUJ3Cw47Eb4R/ZRHq/FbYcN4tnj0=)
2: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: 0gbdMqpBRfI4p+Za78zXpn9wD+6+MB3RSJhwaBx619g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:38:75:5c:ab:e2:31:8f:26:a6:90:fd:1f:16:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b085804db153eb724c58557c79359c4408205550
Validity
Not Before: Nov 11 03:01:11 2025 GMT
Not After : Nov 12 03:01:11 2025 GMT
Subject: CN=bddac6fb2e844e69f06746ea178b24d57700a6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:12:f5:15:83:3f:d6:6a:51:97:72:0c:5c:
4e:01:39:9b:05:86:5a:5a:94:cb:e1:7f:db:a3:38:
2a:45:2f:e8:6a:e8:be:d2:b0:88:f1:8b:f8:73:0a:
41:00:3b:94:48:97:8f:70:71:b8:8a:27:b4:73:f4:
11:bc:c4:b9:34:42:7f:a2:0b:61:1f:75:07:e5:41:
24:60:ff:c5:51:6e:e1:34:fc:9d:e7:45:ed:f7:dd:
1e:f2:c6:21:20:a0:cf:12:7b:8a:45:ee:2a:d4:9f:
02:9a:20:7c:b6:c3:12:8e:cb:2f:54:41:33:8a:12:
5d:b7:98:0f:89:cd:79:8d:4b:d7:49:ff:63:0b:5b:
74:80:7c:c1:64:3f:9e:5e:84:a6:69:3e:ad:5b:b5:
0d:0c:e3:42:dd:15:63:bf:ab:7f:ce:37:d3:ab:8d:
18:51:9d:fd:82:65:31:84:03:0b:2b:8f:64:a9:0d:
2a:05:18:e6:b8:cf:5b:20:f2:4d:a8:a5:ef:0b:63:
0f:ce:f1:c7:b1:15:ec:75:65:cc:ea:41:fc:b3:b2:
10:50:05:93:d1:9c:73:be:d8:74:2e:f2:ed:55:ad:
89:81:7b:20:38:27:fe:7e:a6:ac:bc:7d:68:5a:39:
9f:ed:ad:f1:62:9f:10:98:a9:69:76:18:86:f1:c1:
ae:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DA:C6:FB:2E:84:4E:69:F0:67:46:EA:17:8B:24:D5:77:00:A6:DE
X509v3 Authority Key Identifier:
keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1d:d3:86:a8:2e:90:0e:04:66:27:9a:dc:17:ac:70:cf:40:
90:59:7d:96:ca:9c:41:a6:2b:b7:42:ca:7c:e7:57:f9:18:59:
04:68:68:1f:0d:7f:36:03:f6:2f:90:03:ae:08:0c:cf:25:15:
c9:63:03:ac:07:3a:6f:8a:6b:b9:0f:46:5b:a6:6e:af:a6:b5:
c7:75:20:75:92:f9:5c:4f:01:ed:68:95:71:12:81:b7:9b:35:
18:33:ad:7e:bd:8c:5e:82:8b:20:2d:35:4a:17:24:37:e2:52:
39:cc:0c:21:7a:11:28:b3:56:0f:6e:85:ca:5c:aa:62:dc:47:
85:c7:f8:d7:ef:7e:42:c2:c2:78:48:96:f5:7a:cb:1b:88:0f:
06:78:55:2a:09:91:dc:69:c5:2a:ab:05:10:df:02:d2:77:d5:
25:4d:82:05:79:aa:2e:96:32:d5:79:a7:31:ae:62:37:91:da:
d6:77:71:e2:ab:3e:67:b7:81:18:0c:90:df:2c:16:5a:b8:3e:
2a:c7:65:61:6f:ec:65:d8:81:41:0e:c6:68:be:f1:3f:b5:b0:
37:2f:97:d3:e9:40:7b:ab:62:30:15:0a:e7:92:81:f6:01:88:
94:98:33:90:a6:7f:c4:ac:71:bb:f4:65:5e:a3:f7:73:d3:da:
c9:b2:68:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:58 2025 by rpki-client