Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
File: sUP6cD--4Eu9kc5joyFIs2uOVao.mft (raw, json)
Hash identifier: w6Z7V3gKSkFqFanBfbXLFI6NLW5uE/G1qXclySDZpsA=
Subject key identifier: CA:10:AC:62:B5:4D:C3:2A:7E:82:86:2B:BF:77:2F:28:D8:7B:08:20
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Certificate issuer: /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial: 019A706DE710E6A17B6C5CA17247ECE2BC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 01:00:42 +0000
Manifest this update: Tue 11 Nov 2025 01:00:42 +0000
Manifest next update: Wed 12 Nov 2025 01:00:42 +0000
Files and hashes: 1: 58fbPOFYsvSvpunLR9rNMDG4HkA.roa (hash: ReuETm25IMaI+/tSCMwYNSlxDNomkPKvSSM3DvSw9hM=)
2: 5bh70NDw7zp64NXJ_51b90SAuu4.roa (hash: 4ywVwFnAjMHvhsAsLPg1qryIBj6T959YwjsSeW0RTBc=)
3: bmIFkmc46wZv6ewcgJwZwj1cvlM.roa (hash: t+xCiPV9KaRJxGAZeXjb1sny70g09pMUXGWJ9TkswqI=)
4: sUP6cD--4Eu9kc5joyFIs2uOVao.crl (hash: qqyvj8u9pcsQYzopuz5CxmBvtpiaI+RZZMzwhA6nQik=)
5: uQ91Nqx0wJ0hnu7-KkzAQL_V-cs.roa (hash: /lYRhYLBo69SAVI30wQHJh+caFfwu0pd662lIZiJCC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:e7:10:e6:a1:7b:6c:5c:a1:72:47:ec:e2:bc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Validity
Not Before: Nov 11 01:00:42 2025 GMT
Not After : Nov 12 01:00:42 2025 GMT
Subject: CN=ca10ac62b54dc32a7e82862bbf772f28d87b0820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:49:15:f7:50:4a:dc:fb:45:a4:d4:1e:25:
2b:d2:52:e4:70:81:29:08:f4:74:a4:6a:54:44:0f:
f3:4e:a0:c9:c2:e9:58:09:0d:73:e1:61:5d:b0:8f:
d2:ef:8a:f6:3c:5f:a1:4c:01:4a:bc:ad:00:bb:43:
d6:b4:b1:ec:a9:9b:fa:f4:20:9d:46:9c:15:2d:16:
0e:e2:70:53:4f:d2:71:56:b6:e7:cf:2e:4e:e5:e4:
af:79:e0:59:47:da:78:c4:24:79:79:c2:33:a1:8b:
8a:93:61:56:14:50:af:a6:94:cb:36:f3:5e:2c:55:
02:f4:9c:72:d7:d8:71:0e:37:9c:cf:ea:d4:0d:99:
a5:ec:d4:45:38:04:b0:cc:2b:98:61:e5:78:38:a4:
2b:e0:c8:85:ba:26:23:8b:44:9c:1b:1a:d1:bb:d3:
3b:6b:63:4f:28:8e:73:17:16:95:11:57:8b:1f:72:
72:81:59:0d:fd:91:aa:93:72:aa:6f:66:64:e5:f6:
ed:be:d3:bb:7b:ef:0f:06:3d:1b:d5:49:51:ca:68:
df:f7:da:ad:d6:7c:60:aa:2c:27:ad:3e:10:c9:41:
c1:9a:cc:80:d4:45:36:43:7c:e8:34:88:9a:f7:e1:
6d:ea:14:c6:bd:77:b2:5b:ff:00:e7:90:2a:11:08:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:10:AC:62:B5:4D:C3:2A:7E:82:86:2B:BF:77:2F:28:D8:7B:08:20
X509v3 Authority Key Identifier:
keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:bb:d2:7b:16:64:6f:71:a1:b1:dd:cc:31:8f:f1:82:a2:9a:
bb:ce:89:38:0e:55:f6:38:c4:1a:97:db:03:a0:ae:34:50:51:
d9:ca:18:72:ed:93:82:5f:d9:98:92:39:1a:56:7e:51:87:7b:
c5:5b:2b:43:e6:db:a8:35:66:49:f1:7f:24:c2:f6:7c:e6:f1:
1c:ab:a2:b1:ec:a1:75:d8:51:8b:78:35:89:d8:50:25:15:73:
2d:97:d4:66:95:15:e0:7f:55:18:c6:a2:92:8d:56:d6:14:61:
a0:03:90:7c:8f:52:dc:ba:77:89:3c:d9:b9:c4:37:5f:31:05:
75:a8:5d:6b:7b:9d:40:64:9d:1b:12:35:61:6a:0c:38:66:2b:
08:4a:25:d1:08:74:64:5f:58:e8:9b:91:5f:89:eb:69:e0:c6:
21:fa:90:c0:30:da:8b:dc:f2:b9:70:0f:0e:af:fb:2b:5f:09:
70:3e:c8:2f:03:99:cb:32:8e:73:6c:d3:1b:e5:a4:0c:29:c5:
a1:17:5f:27:b0:d6:ea:3f:8a:2a:6d:cd:ad:d5:60:45:68:45:
f9:36:43:e4:8a:a6:e4:f8:ad:72:51:31:37:7e:38:44:fa:ea:
29:b8:8b:1d:a1:72:ab:43:1f:e7:7c:35:ea:2f:20:6a:d4:89:
d2:53:61:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:26 2025 by rpki-client