Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
File: SGeaItDbyYDV1ZszNnn5ObmuPyU.mft (raw, json)
Hash identifier: qFehw2GAdBB65lZwGkJKtFm82JqBFsXHVsQmlGSV+NY=
Subject key identifier: 7A:74:7E:D0:A3:BB:BD:BF:EB:48:15:97:33:F1:05:D5:F0:69:DF:C1
Authority key identifier: 48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
Certificate issuer: /CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Certificate serial: 019A71499FF811D33AA8D1FF5AA56ADF3CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:00:41 +0000
Manifest this update: Tue 11 Nov 2025 05:00:41 +0000
Manifest next update: Wed 12 Nov 2025 05:00:41 +0000
Files and hashes: 1: SGeaItDbyYDV1ZszNnn5ObmuPyU.crl (hash: IE0uA20BgX2OIStN3Pclvz1I2kbbUYRxparQYizCKPs=)
2: lSVuH4_qT7VO0FFfSg8D4f45UxY.roa (hash: 9ZtD0p1FuMWX60A/XbYYtr6hffE/KiTmy0aXZ7EMf+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:9f:f8:11:d3:3a:a8:d1:ff:5a:a5:6a:df:3c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Validity
Not Before: Nov 11 05:00:41 2025 GMT
Not After : Nov 12 05:00:41 2025 GMT
Subject: CN=7a747ed0a3bbbdbfeb48159733f105d5f069dfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:62:82:c0:38:63:5d:6c:d6:e4:8d:fe:e7:
e2:62:ca:f3:e2:3f:e3:c9:87:8f:1a:97:69:f2:c7:
02:04:b8:07:b5:5b:7e:16:b0:df:e3:73:ba:b9:77:
28:54:61:da:73:c7:06:07:68:f6:64:84:50:4f:36:
ab:8b:9a:64:9b:7c:ab:41:38:6b:53:7a:02:3d:5a:
1e:4b:0c:3f:ed:02:39:3b:12:0a:90:2c:65:3a:ed:
b4:69:77:86:31:c7:20:64:ce:14:e0:aa:d8:4c:ea:
af:32:8b:2a:a7:61:be:0b:71:10:07:d8:c5:c5:ea:
80:81:07:cc:51:da:ba:a1:aa:92:a5:1b:29:bc:15:
4b:82:fd:a5:c6:71:2d:ce:6f:2d:0b:4d:d7:d7:a8:
37:1a:49:0e:1a:04:cd:a4:18:ac:b0:a5:e9:c1:e7:
3f:4d:f5:e6:d5:3e:b7:63:41:5c:c3:5a:07:d7:6e:
5f:18:88:ca:84:0d:02:05:5d:dd:04:a1:0d:93:80:
7f:3d:0a:f5:f6:da:6a:f3:ee:92:cd:e5:f1:f2:65:
5f:49:38:a2:33:47:fa:5f:cb:eb:76:30:f2:b9:50:
51:09:6d:0e:08:12:33:bb:9d:e4:16:1b:f2:a5:af:
b5:06:67:a1:ae:31:aa:54:51:ce:2c:fd:0e:6b:1e:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:74:7E:D0:A3:BB:BD:BF:EB:48:15:97:33:F1:05:D5:F0:69:DF:C1
X509v3 Authority Key Identifier:
keyid:48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5c:7d:4a:b2:66:dc:0b:09:59:02:b9:fd:0c:0c:fd:d6:6e:
28:55:41:93:4a:d7:d1:ec:0e:76:30:04:c5:c7:c9:35:7c:db:
e9:b3:20:17:37:d3:3b:6c:33:ba:2b:db:94:42:e2:d9:19:cb:
5e:6f:f8:e0:c5:53:b8:e6:c5:25:b8:a3:54:82:3a:fc:75:b7:
6a:89:40:db:c9:d8:8c:fc:1a:05:3f:f2:8e:d4:31:02:81:85:
61:f2:95:6c:e3:9e:6e:80:e0:45:92:e8:ed:8f:be:54:69:cc:
25:03:65:7e:bf:85:61:54:5e:ae:68:22:df:69:58:f8:af:70:
a4:23:8a:18:f2:7e:f0:e9:59:28:e2:11:59:4a:9d:41:cd:aa:
7e:0c:1c:87:e5:28:17:14:ba:bb:52:d5:7a:c0:81:99:87:db:
01:96:25:cb:83:d9:8b:79:5f:d0:35:2e:09:87:85:19:94:6e:
77:7a:c3:3a:05:ef:da:98:a5:d8:57:80:a4:59:2d:e8:e3:1b:
41:1a:75:74:af:03:c9:df:2f:cf:60:47:12:47:6a:9c:2a:f8:
2b:6d:64:fd:94:2b:37:10:70:d4:c0:03:67:c3:da:71:13:18:
d4:23:44:76:bd:7d:61:5f:70:f1:9d:cc:d7:37:c9:0c:03:54:
ce:92:93:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:49 2025 by rpki-client