Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier: dR9ZGxOnaWkd5vfDUrLHD/tcOFn0WVnBviuckppytCw=
Subject key identifier: D7:FA:2D:E9:72:88:DD:EF:B4:AB:68:5B:91:8D:FB:AC:B9:1A:2F:57
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 019A22F7105C06F13943B54D0711AAD558F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number: 06D5
Signing time: Mon 27 Oct 2025 00:00:08 +0000
Manifest this update: Mon 27 Oct 2025 00:00:08 +0000
Manifest next update: Tue 28 Oct 2025 00:00:08 +0000
Files and hashes: 1: 3klZTNM9YhJqZUNp3PJkFRczFX8.roa (hash: OyXgZ5l4rO5Wt2TcoTvX9gJZ0hgPAdu2wTU0n6/gZoU=)
2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: osyfRAbjWrumHhA31YB+WiPKXVWAtqc7mSguKvvuT0I=)
3: W0AAJRLr6gi2r74kS95DxTYGfTw.roa (hash: MH+HQqYFMBeGJJqR0jYHA1u1MAdvWa+AHHutk6W2MvA=)
4: r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa (hash: xjRrpFDO8g9sZNIp8GQ1hogAG1em04ZcPXgm2d8N7a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:10:5c:06:f1:39:43:b5:4d:07:11:aa:d5:58:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Oct 27 00:00:08 2025 GMT
Not After : Oct 28 00:00:08 2025 GMT
Subject: CN=d7fa2de97288ddefb4ab685b918dfbacb91a2f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:08:45:1b:9a:f5:85:20:a4:29:5e:1e:b1:
55:aa:72:43:4a:1f:3b:c6:53:be:4d:4c:6b:aa:99:
ba:21:67:4b:cc:56:77:4a:7f:a6:43:14:17:b4:0c:
66:79:20:a8:e8:80:b4:ff:82:25:d3:3d:6a:e1:6a:
06:53:08:d2:fb:03:ef:76:ed:db:c5:35:71:b6:62:
2c:8f:f5:5b:10:18:3a:76:9e:04:f3:f9:f8:6d:53:
20:52:47:0e:2f:7d:ac:55:80:ed:d3:b8:1c:37:20:
27:b0:1c:b6:a6:b7:83:21:c1:03:26:05:f2:57:2e:
fc:f7:a7:b5:77:bd:5a:af:db:d0:54:44:83:cd:e7:
4c:51:e1:7d:a8:f5:4f:56:9c:98:e4:ee:77:9c:8c:
78:8a:fc:f7:96:ea:3b:26:30:ef:f2:b7:14:d0:2b:
f1:9f:31:7f:48:d8:63:70:1f:95:1c:24:91:75:9b:
eb:94:69:2e:54:4f:55:4c:5d:d5:2d:6d:f6:39:de:
41:ee:96:7f:9a:ff:f2:8d:42:63:75:fe:fa:6b:08:
23:3f:45:38:67:0a:4f:e3:ec:c0:5e:f0:e9:47:9d:
4f:20:ef:c7:e7:5d:25:89:68:ae:35:6e:01:28:44:
3c:8a:b9:cb:6f:95:1c:3d:24:1c:b3:2c:63:21:74:
6d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FA:2D:E9:72:88:DD:EF:B4:AB:68:5B:91:8D:FB:AC:B9:1A:2F:57
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:13:2a:67:78:d2:c2:30:cc:1c:43:44:64:1a:78:e2:a9:b9:
5d:0a:10:be:b4:56:fb:6b:ca:2f:b1:e9:a1:70:5d:dc:0b:6d:
64:f4:1e:a8:0c:dc:b5:f9:2f:04:5a:85:b1:98:bf:a0:5b:4a:
73:42:e3:cc:4d:90:dd:c6:34:95:df:db:0d:eb:d3:21:9f:3f:
12:fa:83:a8:89:72:d4:2a:75:83:a1:5c:dc:6e:67:fb:76:d7:
8b:35:be:c5:1d:49:75:c1:fb:be:02:c2:c5:39:21:8c:7d:94:
ca:eb:9c:a5:fa:28:06:af:1a:84:36:cb:bd:5d:7c:f2:8a:43:
66:ca:f7:d4:46:5d:de:7e:51:f6:ac:1a:61:30:9a:83:96:be:
39:10:42:61:ee:44:7d:55:07:d4:d8:d8:d1:2b:9c:a5:1a:1b:
59:ef:8f:61:14:39:97:f4:45:05:72:43:a4:41:d8:78:75:da:
92:e6:60:04:a6:ea:25:e3:67:02:76:ff:2c:7d:60:8f:40:3b:
2e:cd:ce:e2:e0:5f:9f:c9:96:8b:e6:6f:06:25:28:d6:d0:47:
3a:17:86:a0:88:b2:55:a3:c6:b2:c8:79:94:38:77:6c:f5:c4:
49:e8:7c:bf:99:8b:1e:93:65:9c:63:12:32:e6:21:4f:51:d3:
0c:47:f1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:46:38 2025 by rpki-client