Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
File: SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json)
Hash identifier: pKAjGUOPjcWWi0Au5933cph3289l+dHb4/g410rh+jA=
Subject key identifier: 19:2F:83:A6:98:8B:BD:0F:09:DF:E9:DB:52:D2:1E:78:40:F6:27:4D
Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
Certificate issuer: /CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Certificate serial: 019A729372C381EC3BE119B2F4E7ACDBBD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
Manifest number: 0342
Signing time: Tue 11 Nov 2025 11:00:56 +0000
Manifest this update: Tue 11 Nov 2025 11:00:56 +0000
Manifest next update: Wed 12 Nov 2025 11:00:56 +0000
Files and hashes: 1: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: GNAlDVQ41hDim9IXulIjSKde0BAAIorZD9BPPgSrnWI=)
2: WxZz3Xq4Dubhk-2v4KkyD3DjymY.roa (hash: TcPVaB9byF2mn4BjYUtIE/4fQoQybO53Dwd3vhK7Z5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:72:c3:81:ec:3b:e1:19:b2:f4:e7:ac:db:bd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Validity
Not Before: Nov 11 11:00:56 2025 GMT
Not After : Nov 12 11:00:56 2025 GMT
Subject: CN=192f83a6988bbd0f09dfe9db52d21e7840f6274d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:34:fc:dd:13:0b:dd:70:4c:01:71:5c:e3:
83:5f:cd:e0:f8:c7:ee:03:20:2e:f1:2a:87:4b:c1:
72:f9:f1:1b:08:db:37:0a:4d:23:ac:5b:05:ee:49:
cb:1c:21:68:64:00:2e:ad:8b:25:95:9b:48:ef:b0:
c0:1f:c3:ac:06:69:20:36:e7:e2:d1:26:26:61:a6:
16:f2:47:54:ff:b8:b0:50:6f:07:0e:ee:77:41:b7:
1b:77:a8:d0:d8:67:99:a9:f4:37:36:9a:92:a6:08:
35:1b:e9:37:68:50:a1:3b:ac:f4:bb:3b:f0:8a:1c:
4b:11:d2:4c:2a:26:49:29:b4:60:f0:01:d3:8f:a0:
d8:c6:f3:47:22:7d:a5:db:c1:15:78:28:d4:fe:f5:
8c:ab:34:1b:8f:7d:af:a5:c6:d1:45:21:b3:31:5c:
41:b8:cd:54:4f:12:c2:f4:2f:d0:79:b9:68:38:f1:
52:a2:59:8c:62:82:6b:eb:ec:51:c8:97:52:a8:c1:
54:fa:b8:44:52:e2:eb:4b:39:2a:56:73:87:9d:d9:
aa:46:56:0b:74:f0:83:5f:20:df:ea:f6:f9:c5:5f:
b3:58:09:fd:c4:c7:ad:ba:29:1c:fc:b8:f3:6b:93:
cb:23:3c:60:21:88:f3:d8:dc:f9:28:40:53:b2:25:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2F:83:A6:98:8B:BD:0F:09:DF:E9:DB:52:D2:1E:78:40:F6:27:4D
X509v3 Authority Key Identifier:
keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:63:54:28:a1:63:28:4c:b1:22:bf:80:00:fc:d7:ab:c2:22:
de:b7:06:35:c4:38:f0:a4:94:5b:a7:75:96:d3:0b:82:bb:65:
01:62:40:61:18:43:35:b2:79:92:7d:47:c9:0f:c2:e6:72:c7:
7f:6b:e1:0b:a6:48:2d:14:fd:b9:18:7d:c4:71:07:ec:9f:f6:
c7:50:14:bc:c0:0b:b9:18:a9:f3:ea:64:12:9e:f2:1f:83:bb:
5c:02:d6:b0:51:ca:19:be:7c:c4:49:94:8d:6f:fe:4f:62:f5:
d2:66:14:c2:54:94:fa:7c:ab:1d:8b:5e:bc:21:9c:43:c1:8a:
20:d1:1a:40:a8:37:69:97:d2:12:4c:ae:23:04:db:fc:78:5d:
f9:0d:0e:8c:e7:68:7f:1b:ec:1a:59:51:75:94:2c:18:7a:d0:
3d:d0:b2:07:73:9d:c7:4a:cb:ee:5e:04:bd:27:9e:24:4d:e0:
09:7c:64:8c:1f:91:05:e0:0b:8d:2a:98:d5:fd:36:4c:7f:b5:
97:80:23:3d:0e:b9:c3:81:58:31:26:c2:af:eb:cd:89:9e:ef:
70:c4:47:67:10:fe:e2:68:39:e8:3d:b7:7d:03:cc:35:40:3f:
61:0a:b8:f8:6b:95:dd:fd:39:73:50:46:d2:2d:ed:f9:86:ce:
82:58:d8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:02 2025 by rpki-client