Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json)
Hash identifier: tgv6cKjZChp6kBWfz7xdExh3sVdadIH8d4gHgKucDT4=
Subject key identifier: 79:71:97:1A:D7:42:8F:7F:2B:D9:AA:25:C0:7B:14:8A:21:F6:FE:2C
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 019A71B8FD1649FE534E0CC2623C78EC4776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
Manifest number: 0DD7
Signing time: Tue 11 Nov 2025 07:02:20 +0000
Manifest this update: Tue 11 Nov 2025 07:02:20 +0000
Manifest next update: Wed 12 Nov 2025 07:02:20 +0000
Files and hashes: 1: 1-ghy1_BSABsGI7akBKLZbOuS5vM.roa (hash: 5f9usyUF6Ob7YmYVFXsGfm7dIcSCmT5Qe4VX7r7TJaU=)
2: E6OOQJWtbwPShTOPUyvmcydvlvo.roa (hash: v0Y/AFu8fz1isgKhX2mzBaqCN/V0k8wMymcRgrcaRnE=)
3: Ik19RRjyfHjJ96aag1tg9GHfyYs.roa (hash: OMp+kmye4OfcUJMJC7fA4xejXa2bwcRzzIV7LNwQJIA=)
4: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: oU0oV/j+MTOhyA6b0fD4GQ/L8jw0VLYdMwxvm6sqJfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:fd:16:49:fe:53:4e:0c:c2:62:3c:78:ec:47:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Nov 11 07:02:20 2025 GMT
Not After : Nov 12 07:02:20 2025 GMT
Subject: CN=7971971ad7428f7f2bd9aa25c07b148a21f6fe2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:ec:29:4b:81:bd:4e:68:09:2a:d2:de:79:
c1:a7:92:7b:34:de:2b:b6:86:82:8d:45:97:10:52:
11:5b:cf:19:ab:38:f7:60:9c:80:96:5a:4d:ef:27:
80:fd:df:4a:23:f8:56:52:0f:77:6e:f4:74:0a:af:
11:64:b9:fb:01:d5:c8:d2:9d:2a:3a:67:b1:1e:e8:
8c:00:b4:22:bb:00:24:78:63:c8:f4:a8:93:49:66:
14:4f:bb:b2:d3:62:9b:a5:a7:ed:a1:c4:99:12:93:
2d:83:80:2d:b3:4b:f2:19:d8:a6:21:33:d8:e9:76:
fd:2c:f9:af:d9:93:98:59:8d:e8:fc:d1:0b:a7:a1:
25:f4:12:4c:ff:ba:d2:63:14:0a:f7:45:b2:da:60:
52:19:06:32:2c:f0:ac:79:ea:c0:5a:11:3e:65:83:
6c:6b:83:6d:2e:28:b7:79:2e:57:bf:71:70:53:a8:
e6:63:5b:0f:dd:64:6f:99:1f:af:5a:63:4d:b7:4a:
34:c4:10:5c:08:97:fe:42:12:6e:f2:a5:ce:05:4e:
ba:99:7d:26:5f:31:e0:80:37:10:c0:ea:fe:0b:d7:
3d:11:0b:74:06:98:39:99:3f:5c:d8:7f:d2:ec:0a:
21:26:de:0a:6b:1c:1a:58:56:b0:a3:0f:5c:a9:e7:
79:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:71:97:1A:D7:42:8F:7F:2B:D9:AA:25:C0:7B:14:8A:21:F6:FE:2C
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:37:35:89:8c:91:fa:66:84:d8:cd:bd:6e:14:e8:db:75:47:
6d:b2:4b:73:15:39:19:06:22:fa:7b:cb:36:5c:4a:d2:97:3b:
dc:4e:ff:05:df:d3:1b:e8:3c:af:0b:79:88:9c:39:5e:b3:17:
cd:63:27:a7:70:f6:63:ab:d5:1b:dd:91:5b:a5:7c:13:a6:55:
7d:a3:dc:bd:02:98:e1:af:bd:70:4d:2c:da:68:4a:44:04:38:
43:8e:40:9d:ac:13:c9:5a:df:6b:71:86:bf:69:ec:ab:a4:b0:
a6:28:2d:bb:a0:c3:77:6f:a2:32:88:41:95:05:43:55:d4:e4:
a6:00:f1:53:9a:fe:18:a2:92:ef:14:e4:73:ca:ad:fd:3e:7b:
d8:3f:7e:13:d1:1d:36:27:49:83:43:2e:8d:39:78:e4:9f:72:
a7:90:16:8b:47:da:47:d9:6d:75:24:b9:ea:66:8f:ed:e4:ce:
a2:b4:63:8b:2e:ee:f6:8e:92:71:16:46:ff:1d:bd:61:c3:71:
9a:2e:ed:cd:f2:75:47:7d:10:25:d1:50:bc:25:95:06:57:3a:
25:aa:9c:d8:65:86:af:81:96:69:3d:ff:cc:22:29:30:8e:a5:
a7:79:92:59:c0:da:67:a0:81:23:ab:b8:54:28:93:e4:32:0e:
93:52:be:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:22 2025 by rpki-client