Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
File: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft (raw, json)
Hash identifier: B3O43/gNBHi66V2NYDZ5mSvvw4HZTmGaSSQ/c4d5Tzw=
Subject key identifier: 8D:0F:16:8C:B7:D7:CC:CE:7C:05:CB:D3:07:64:3A:CB:65:59:DE:32
Authority key identifier: 48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA
Certificate issuer: /CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca
Certificate serial: 019A262F12C5B8336DAD2F846E88D7819169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
Manifest number: DD
Signing time: Mon 27 Oct 2025 15:00:10 +0000
Manifest this update: Mon 27 Oct 2025 15:00:10 +0000
Manifest next update: Tue 28 Oct 2025 15:00:10 +0000
Files and hashes: 1: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl (hash: aNtYTmM4Z5V4YtZfQFIybl45+eQz8SDaM3E7JpxT1PI=)
2: zSp8Tcrfxe5_p3n3onsW-Ve9HcQ.roa (hash: hWOLO9tqL0286CUEjHeu7GROlem9sTgukzg2u3fOev0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:2f:12:c5:b8:33:6d:ad:2f:84:6e:88:d7:81:91:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca
Validity
Not Before: Oct 27 15:00:10 2025 GMT
Not After : Oct 28 15:00:10 2025 GMT
Subject: CN=8d0f168cb7d7ccce7c05cbd307643acb6559de32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:7d:e2:89:78:64:e4:98:5f:c4:9c:d4:08:
ab:38:4c:0c:ca:94:2b:40:ef:e5:d2:37:c2:e7:f4:
c2:bd:76:47:25:53:25:d1:7e:64:49:ac:ed:96:38:
bb:92:3b:f2:9a:80:49:aa:39:b4:45:ff:a6:dd:96:
70:08:f8:72:a0:d6:01:57:21:14:9e:aa:e7:65:63:
53:1e:f9:6b:96:c4:d9:1e:b0:00:35:ce:6e:31:21:
9c:60:61:67:3b:4d:21:91:16:43:a6:77:b7:88:9d:
63:26:7e:20:79:5c:4c:b5:08:4c:c3:98:bc:01:86:
c5:a2:34:b5:3f:f7:a6:87:dd:15:ec:bd:b3:4b:b0:
42:10:7c:53:bf:a2:24:6f:43:86:d2:fc:48:84:32:
45:4b:c0:90:24:51:e3:56:0d:41:22:06:ed:7c:01:
a3:12:c8:e1:be:6e:31:16:6b:25:af:ea:7b:cc:ae:
0d:55:52:26:43:11:7e:f8:0a:9e:ea:c7:51:8c:8d:
e1:4e:f5:fd:96:d8:25:1b:9e:93:e2:4f:82:65:4f:
38:c2:d8:8c:4a:7a:36:a4:ba:14:83:7d:fb:6b:e4:
25:01:54:fb:21:fe:11:3e:d5:40:09:5e:0a:ef:30:
6c:d3:b0:a5:fc:cc:a0:95:ea:fb:a4:0e:83:7c:f3:
29:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0F:16:8C:B7:D7:CC:CE:7C:05:CB:D3:07:64:3A:CB:65:59:DE:32
X509v3 Authority Key Identifier:
keyid:48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b1:74:15:ab:23:9d:fe:b8:c8:6d:6e:57:f5:cb:6e:6d:d0:
97:62:cf:ee:32:4e:67:28:f4:a0:5a:e8:c0:21:99:83:3e:6f:
a5:10:42:71:78:43:87:0c:fa:97:a8:6a:fd:d6:2d:1a:e3:53:
5b:67:10:ee:26:0a:99:c1:de:c9:d7:64:dc:51:c0:27:6b:b3:
6c:20:37:d8:63:12:fc:68:d1:b8:3a:a1:a9:c1:d5:25:b5:92:
3b:95:50:75:56:96:e5:e3:aa:07:f6:94:a4:3e:69:8f:c2:47:
f1:72:a2:27:d1:b8:9c:7b:ca:97:da:70:46:10:6d:2f:f5:d3:
ef:f3:30:29:b4:31:6e:9f:2a:9c:4e:cf:61:ca:81:2c:a4:fe:
d5:a9:93:de:1b:51:8b:8d:e9:7f:6a:63:44:5d:48:11:40:3d:
34:e8:db:38:99:3c:76:79:06:4f:41:2d:68:dc:28:4b:d9:d1:
81:fa:7a:c8:64:49:4f:a0:2d:bb:ea:09:5e:95:c1:a6:cb:5e:
90:bd:33:2c:5a:d6:cd:0e:84:81:2a:f6:f0:d4:83:3f:4a:67:
e4:62:f4:90:b2:98:46:e7:4a:94:bd:22:42:4f:24:34:19:41:
8f:11:a2:b1:5f:5f:cd:d4:2f:78:27:57:29:60:56:ef:1c:42:
6d:b8:57:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZomLxLFuDNtrS+EbojXgZFpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTAxOGI1YzJmZWYxMjQ4YWI2ZWMwZDA3ZTk3MWVjYmNm
NzM5Y2EwHhcNMjUxMDI3MTUwMDEwWhcNMjUxMDI4MTUwMDEwWjAzMTEwLwYDVQQD
Eyg4ZDBmMTY4Y2I3ZDdjY2NlN2MwNWNiZDMwNzY0M2FjYjY1NTlkZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLt94ol4ZOSYX8Sc1AirOEwMypQr
QO/l0jfC5/TCvXZHJVMl0X5kSaztlji7kjvymoBJqjm0Rf+m3ZZwCPhyoNYBVyEU
nqrnZWNTHvlrlsTZHrAANc5uMSGcYGFnO00hkRZDpne3iJ1jJn4geVxMtQhMw5i8
AYbFojS1P/emh90V7L2zS7BCEHxTv6Ikb0OG0vxIhDJFS8CQJFHjVg1BIgbtfAGj
Esjhvm4xFmslr+p7zK4NVVImQxF++Aqe6sdRjI3hTvX9ltglG56T4k+CZU84wtiM
Sno2pLoUg337a+QlAVT7If4RPtVACV4K7zBs07Cl/Mygler7pA6DfPMpVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0PFoy318zOfAXL0wdkOstlWd4yMB8GA1UdIwQY
MBaAFEhQGLXC/vEkirbsDQfpcey89znKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84NTNlOGYtZmNkNC00NTY2LWE2NDgt
ZTM3NDk5Njc5ZDQ2LzEvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84NTNlOGYtZmNkNC00NTY2LWE2NDgtZTM3NDk5Njc5ZDQ2
LzEvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrF0Fasj
nf64yG1uV/XLbm3Ql2LP7jJOZyj0oFrowCGZgz5vpRBCcXhDhwz6l6hq/dYtGuNT
W2cQ7iYKmcHeyddk3FHAJ2uzbCA32GMS/GjRuDqhqcHVJbWSO5VQdVaW5eOqB/aU
pD5pj8JH8XKiJ9G4nHvKl9pwRhBtL/XT7/MwKbQxbp8qnE7PYcqBLKT+1amT3htR
i43pf2pjRF1IEUA9NOjbOJk8dnkGT0EtaNwoS9nRgfp6yGRJT6Atu+oJXpXBpste
kL0zLFrWzQ6EgSr28NSDP0pn5GL0kLKYRudKlL0iQk8kNBlBjxGisV9fzdQveCdX
KWBW7xxCbbhX9w==
-----END CERTIFICATE-----
Generated at Mon Oct 27 20:36:49 2025 by rpki-client