Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
File: SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json)
Hash identifier: bp7Mo/AlS2UtPrNfoMl04k/tqLVBma0GdrhISojuv4g=
Subject key identifier: 4C:29:A2:40:50:27:BE:50:80:59:15:52:86:5A:C4:ED:92:BB:72:B9
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial: 019A71B79C9B107646F43D2F09682B6C710A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
Manifest number: 1214
Signing time: Tue 11 Nov 2025 07:00:49 +0000
Manifest this update: Tue 11 Nov 2025 07:00:49 +0000
Manifest next update: Wed 12 Nov 2025 07:00:49 +0000
Files and hashes: 1: N_mB8DyGTMyRNtWdzOHezqUOwxA.roa (hash: 0iM1AEZNlQrcAYLQC9NYhgIr9GaQK1NMxQpbyZpHQKI=)
2: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: MH+ecqXStzzPBlrFtEfZi0gpSpCZ3IOC231gW1e4zNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9c:9b:10:76:46:f4:3d:2f:09:68:2b:6c:71:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
Validity
Not Before: Nov 11 07:00:49 2025 GMT
Not After : Nov 12 07:00:49 2025 GMT
Subject: CN=4c29a2405027be5080591552865ac4ed92bb72b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:03:2d:4b:0e:ab:24:d2:d7:e8:0a:9a:6f:
1a:ed:35:34:bd:74:01:47:78:52:af:6d:b5:3e:d4:
b6:84:14:8d:28:7c:19:22:2f:af:2b:39:a7:9d:31:
52:a7:e9:f3:65:15:4a:3f:17:01:1b:eb:9c:a4:01:
1b:58:34:d6:e6:3f:de:f1:cc:b5:5a:8c:7c:d5:a3:
77:ca:08:0e:41:64:c6:d4:df:0e:d5:3a:9a:3a:4f:
9b:be:c3:d2:9e:a9:d7:27:b6:86:9a:13:ed:c2:02:
4c:49:84:ef:1a:ea:18:ff:04:bf:fd:6d:e8:7c:29:
7f:95:38:bf:23:9e:78:29:d6:05:81:45:8f:1e:4e:
b9:58:2a:40:62:ea:98:35:6a:cd:a6:f6:6d:d3:20:
11:44:fe:1b:7b:90:1f:72:f3:fe:31:48:dd:72:54:
f4:21:e4:57:b7:36:35:2e:c8:82:16:e2:ef:38:77:
8e:e8:8d:7c:4f:36:c4:f3:56:fd:d7:7a:1b:ff:ad:
ba:81:c9:ea:33:ef:e9:5a:90:cf:09:88:2d:e1:12:
6a:4e:b8:96:75:30:55:54:8d:62:9a:e5:80:40:2e:
0c:e8:70:85:10:e3:5c:e0:93:dc:5e:4f:79:1f:0c:
04:77:9f:87:d5:49:28:79:03:c5:64:b7:63:d4:03:
bc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:29:A2:40:50:27:BE:50:80:59:15:52:86:5A:C4:ED:92:BB:72:B9
X509v3 Authority Key Identifier:
keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:01:60:d4:fa:63:be:b6:70:8a:50:54:50:0b:84:47:23:0f:
35:5e:29:22:41:2f:bf:e6:f6:ba:23:ca:61:46:e1:aa:b2:a3:
0f:9b:82:a0:dd:64:f2:77:08:13:6b:24:a4:6d:f5:9d:0c:32:
e2:a8:3f:13:44:7c:c3:a4:5d:44:0d:b0:90:85:a6:11:72:5a:
16:78:01:89:bd:fb:6e:15:e2:8f:99:80:3a:8e:30:7f:bb:8a:
23:11:0c:2b:e8:3a:44:12:5c:9f:f8:10:69:be:9c:85:32:0f:
5c:dc:c1:a1:55:92:f2:b4:16:2a:25:b1:2b:15:a5:34:77:7e:
4c:ef:97:bf:61:e7:d6:8c:4b:90:60:33:2d:ee:60:19:8f:78:
56:8f:77:32:10:91:bd:92:fa:00:b4:c4:69:89:61:ec:f2:a8:
6d:fd:7b:75:f0:55:b2:0c:7b:2c:26:e8:0d:aa:6b:49:95:36:
c9:c7:cb:ae:91:6a:42:c1:77:c8:5f:49:52:2f:84:44:4e:29:
9b:85:88:55:35:6a:bf:29:bc:40:cf:e4:80:a4:ab:95:89:8f:
8e:55:c7:29:5b:4e:ef:33:a8:ad:50:28:66:9a:f1:0e:f1:3c:
c0:a0:cf:b5:49:9f:53:33:80:fe:c6:77:d8:d9:9e:44:fb:7a:
5b:e1:37:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:48 2025 by rpki-client