Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
File: SInGeZ92tFIvCZH2uTNP1ttUHVs.mft (raw, json)
Hash identifier: 8hF0O0/R+RTFV9vPsyub9HlPtbs3pBkhIcFJTgCdt1w=
Subject key identifier: A1:6E:3C:AC:09:FF:FD:AB:15:B5:50:35:2F:71:67:DC:D3:3C:5D:37
Authority key identifier: 48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B
Certificate issuer: /CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
Certificate serial: 019A71EECA0FBF3B5B8EC908784F0DC1FB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
Manifest number: 121A
Signing time: Tue 11 Nov 2025 08:01:05 +0000
Manifest this update: Tue 11 Nov 2025 08:01:05 +0000
Manifest next update: Wed 12 Nov 2025 08:01:05 +0000
Files and hashes: 1: SInGeZ92tFIvCZH2uTNP1ttUHVs.crl (hash: OcETedJdxZrctE7BF//uLjeKkxIt0j1xYhpF5km+350=)
2: W9LIimzmvADZP7RqK5-CS9hx7F8.roa (hash: 0bKnzD+/f66zg904NSAl0qUDPLAd/0RlfEWM3sOW+wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ca:0f:bf:3b:5b:8e:c9:08:78:4f:0d:c1:fb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
Validity
Not Before: Nov 11 08:01:05 2025 GMT
Not After : Nov 12 08:01:05 2025 GMT
Subject: CN=a16e3cac09fffdab15b550352f7167dcd33c5d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:d7:23:b7:7d:ce:c8:78:40:79:67:32:07:
be:34:78:ed:78:b6:0f:52:ea:2d:c8:46:9b:a0:d7:
d6:ce:6c:56:bd:d5:92:e7:20:9d:32:57:f2:1f:43:
d3:7b:49:f9:a8:55:7f:57:44:e1:d9:ac:dd:ba:16:
c8:37:3a:2f:9f:51:8d:6e:71:af:9a:93:b3:07:8e:
9c:47:f9:f5:d2:34:6f:6f:4d:e9:6e:8c:ff:f6:65:
90:3d:49:6b:4e:4c:af:ab:a3:d5:ff:a1:7a:80:2b:
e5:bf:b3:d5:4b:95:81:99:f9:76:9e:77:3a:fe:06:
84:8b:5b:fb:1a:da:b1:5c:ba:17:a8:ec:ff:17:b3:
42:94:33:49:a1:5d:f7:43:f0:a8:a0:02:b3:01:53:
51:2d:a7:e9:14:4f:22:5c:8c:ff:c2:e4:a9:e6:c7:
d9:27:8d:97:df:65:a2:f7:f1:7d:8c:da:cc:bc:50:
b4:a2:b2:77:dd:30:57:84:2f:9c:cd:72:32:2e:03:
e2:c5:50:88:30:58:d6:4b:73:ca:29:c7:a2:20:7b:
4d:34:50:cc:6d:96:26:52:ce:dc:b3:98:3e:37:4f:
77:29:62:56:0f:82:67:49:f8:aa:44:9e:2e:3e:5f:
d6:69:e0:16:36:5c:43:b5:8f:a5:fc:6e:1e:3a:0e:
6b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6E:3C:AC:09:FF:FD:AB:15:B5:50:35:2F:71:67:DC:D3:3C:5D:37
X509v3 Authority Key Identifier:
keyid:48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:35:4c:a7:be:52:b4:b7:a6:99:4d:5e:ec:48:93:04:9f:33:
ce:2b:cb:53:79:d9:7a:b4:ce:5c:6b:63:86:74:f7:da:b4:7c:
e6:ae:10:3e:c3:a7:d4:b0:6b:83:3e:25:94:50:88:f1:c3:e0:
5a:5e:43:16:ea:6e:57:64:12:2f:f5:98:d1:df:ac:ad:a5:6b:
56:4f:c7:fe:2c:28:39:bc:83:ff:26:d4:34:71:81:c9:94:3a:
ee:1a:3d:32:d9:04:3f:14:59:cc:92:3a:ed:73:80:08:e5:6b:
a2:eb:6b:34:20:79:fd:c2:3f:72:c6:24:01:90:90:a8:43:93:
10:80:ab:d6:0b:d9:ed:ba:4d:78:a9:6d:03:2a:86:f0:ef:c8:
b8:72:28:c2:13:58:ac:cb:3b:4b:b3:cd:65:a4:71:f1:f3:3b:
32:53:89:a9:e7:4a:32:a8:1f:c5:a2:98:fe:f5:bd:58:ad:92:
a0:f6:0a:3b:86:58:ac:5a:51:65:7f:93:e9:9b:ac:8d:06:f0:
22:2e:30:e7:1d:46:9c:2c:e2:87:2e:ce:b2:59:7c:1c:5d:52:
f8:a0:25:1a:d6:41:44:1b:05:cb:3f:e2:6f:f7:82:85:16:f3:
bf:27:d3:f1:72:8f:33:01:f1:f7:02:c2:99:b4:e0:6f:a0:c5:
b8:01:29:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:47 2025 by rpki-client