Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
File: S92aEzqSSGoU7cTnYlsk-V04kcw.mft (raw, json)
Hash identifier: mq1xslvFx+5BtITfBJgD34lmw5OZzxE05va90HBDOis=
Subject key identifier: A6:B9:0F:8D:4A:37:9C:42:AC:C5:96:AD:E7:DC:38:7B:A8:6A:7E:3E
Authority key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
Certificate issuer: /CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Certificate serial: 019A7225A6EFCB622A148675A7C87A8FDD65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
Manifest number: 090A
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: S92aEzqSSGoU7cTnYlsk-V04kcw.crl (hash: 2SMlWJohBlxJOy6Dd25iBpE6m+gSlKrVIjrNUPMNF4I=)
2: takXMVWWq86gQFEdW1EUOBKN5bA.roa (hash: aj1iYELR5J1LrrkI2DJAheQdQ03iRDb31bSm3xq1fzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a6:ef:cb:62:2a:14:86:75:a7:c8:7a:8f:dd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=a6b90f8d4a379c42acc596ade7dc387ba86a7e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4f:97:fa:4d:84:1c:a4:82:36:b3:b6:2d:d2:
db:b6:09:33:7c:01:0a:62:b3:49:2b:3d:e1:26:cb:
12:cb:e0:0d:07:6d:6f:0c:b4:5c:bf:50:8b:47:d4:
e3:ba:c1:c4:47:99:3a:a3:e6:5b:ab:10:a4:98:a5:
e6:b6:4d:8f:2d:7a:01:2d:b9:28:06:d0:cd:bd:50:
3a:6e:ae:01:f2:bc:b2:a2:08:28:c8:aa:48:b7:c0:
aa:94:a0:32:a6:bf:67:3a:19:36:ff:a2:b5:ee:ce:
55:0d:17:77:e6:2e:5f:09:ae:52:0e:9d:ce:ff:9f:
f5:3b:76:d0:a3:f3:f3:3e:e8:26:7a:29:48:cd:27:
1a:f3:b4:16:3e:ac:76:9a:b4:c0:f6:18:ec:80:53:
cb:0b:ff:17:fa:cc:de:7e:55:5a:44:af:ab:2c:cd:
64:b9:28:07:9e:58:64:dc:fc:5b:03:28:5c:ad:e1:
67:43:be:74:d0:96:81:7f:40:f9:43:6b:1c:f1:8a:
b9:34:72:be:17:ee:4f:8b:2d:ce:19:3d:02:e2:6a:
9d:dc:fe:6f:86:c3:94:19:ad:1c:6c:a3:e4:38:97:
b3:e7:65:dd:fd:e5:76:c4:96:f1:7f:6a:b4:c6:15:
ae:be:ce:99:e3:66:7c:fe:54:d5:53:7a:46:bc:2b:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B9:0F:8D:4A:37:9C:42:AC:C5:96:AD:E7:DC:38:7B:A8:6A:7E:3E
X509v3 Authority Key Identifier:
keyid:4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:89:46:13:c9:11:20:72:09:67:ba:89:cb:55:b1:46:22:64:
45:e4:d8:09:1e:34:16:15:9f:f5:64:2c:c4:60:b2:2e:49:7f:
98:aa:80:4e:0f:6d:1e:d1:81:33:6a:d0:1e:7a:da:64:a1:83:
93:11:aa:a6:64:a7:c6:d4:ee:c7:a5:d1:1b:75:d1:6f:3a:85:
0b:e8:c4:18:37:69:15:5c:45:c9:69:75:cc:54:a8:ff:1a:fe:
8d:e9:ba:db:5f:3f:bf:0c:32:1f:b3:0b:35:13:df:e1:bf:31:
b0:df:dc:21:5c:17:da:9d:b3:fe:a5:37:4f:76:b7:45:4b:6b:
80:6b:c4:9d:0e:1f:e5:07:d8:c0:e9:ab:aa:3c:b5:f6:a7:cf:
11:a3:a6:1c:f9:05:ca:74:ed:8f:72:9f:ac:24:5b:8a:e5:54:
42:b5:78:13:56:57:96:99:c7:e9:d9:a7:36:5c:b5:52:b4:89:
6f:13:fd:99:79:c1:82:0a:33:f4:bd:e4:ce:e5:bb:da:35:12:
57:8f:25:20:77:22:21:6d:bf:35:ef:0e:04:e5:f0:07:66:c2:
6c:ed:57:51:f5:25:06:43:fc:67:17:cc:99:22:43:7d:67:57:
da:f2:07:04:99:6f:40:0c:66:f8:94:aa:e6:58:07:d0:58:2f:
0a:8e:53:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:57 2025 by rpki-client