Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
File: sdgCZnmAlE302iq0sI6dNLIKjRE.mft (raw, json)
Hash identifier: nUAJyimVPDWfkOob0lgqhM03L0o+HCYpwTexziLpYrg=
Subject key identifier: 21:63:BA:72:23:7A:4F:EE:D9:49:91:27:09:52:80:15:59:63:B5:9C
Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Certificate serial: 019A71EEA9460EA5EBE6D24F075F11D90C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
Manifest number: 0758
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: So0J85BPs3UG_C6BWLfnLZ9c_3I.roa (hash: +ubxlITiYsafbFryEurkXW802YUQIUAFsrYygMwxezQ=)
2: sdgCZnmAlE302iq0sI6dNLIKjRE.crl (hash: c2W0Xsz93C2Gu0elUfYw51N5DEqA3Inod/xGRxvcLzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a9:46:0e:a5:eb:e6:d2:4f:07:5f:11:d9:0c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=2163ba72237a4feed9499127095280155963b59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c4:e2:11:86:93:aa:57:35:b7:44:83:8a:29:
a7:00:39:bd:ab:e1:8e:1d:f7:66:5b:a1:7d:86:9a:
09:69:d3:79:4f:c1:be:36:2f:c3:94:50:d8:10:35:
ec:bf:2f:6c:46:49:5c:13:6d:83:bb:9b:1e:97:1c:
4e:4d:10:e4:26:78:3e:64:6a:84:f3:6f:1d:11:ab:
f4:22:52:d5:1c:02:e2:e5:9c:72:a3:ed:89:51:00:
df:d1:a7:6f:d4:c2:54:df:78:f0:9b:a8:4d:ee:47:
99:77:85:87:d3:46:8a:e5:99:e1:54:bb:1b:f4:23:
60:db:82:08:5a:c1:da:7e:a3:2e:46:33:b1:25:10:
2c:8f:ff:c1:6b:73:e5:04:a4:a9:a3:56:35:a3:32:
ce:05:32:7e:65:da:9c:ad:bd:57:32:b0:ad:02:44:
26:3e:15:5f:c5:47:2d:d7:28:44:ce:12:82:d8:0e:
2e:30:1d:d3:68:85:49:07:5b:f5:2a:b2:e3:ac:65:
45:2b:7a:5b:11:3b:06:e8:1b:c0:57:02:bc:24:9c:
e8:05:74:f1:ca:f3:76:cd:42:84:eb:70:9a:23:f2:
b6:1c:48:91:71:6f:ec:a7:cd:00:47:6a:b5:9d:f8:
bc:b0:01:41:0e:50:99:aa:69:65:aa:ff:59:3e:06:
08:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:63:BA:72:23:7A:4F:EE:D9:49:91:27:09:52:80:15:59:63:B5:9C
X509v3 Authority Key Identifier:
keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e3:08:62:75:50:06:23:32:e4:ce:f7:b4:f4:5e:c3:52:30:
94:82:2a:b7:19:7d:13:1f:b5:25:1d:ec:48:e9:f6:0b:d9:2a:
d9:93:a2:24:29:52:e1:22:93:a9:4b:8e:1a:d9:4f:07:da:7d:
45:56:99:7c:b4:b3:67:c2:83:6a:6a:a5:e8:14:3a:dd:64:db:
8c:f1:b1:49:51:d8:7a:53:78:c7:56:f9:9c:f8:0e:89:ac:de:
5a:64:9a:5c:f4:5e:f8:4f:78:9b:60:d8:ca:69:47:73:bd:78:
2a:d4:80:9f:d4:9a:ba:f4:4f:a1:33:ae:50:c5:94:cf:ee:ae:
cf:be:fe:60:55:01:33:d3:b4:b7:a8:a2:01:bd:4a:ca:8a:ec:
bd:81:8c:83:d2:ac:5c:e0:7b:70:a9:62:f3:8b:4a:30:f2:71:
2e:89:3c:73:67:45:52:67:bc:bd:f7:f4:01:85:5a:7b:ef:8a:
34:3b:6a:f2:29:ca:3d:7e:09:ca:b8:0c:12:23:49:04:f7:b1:
d1:e8:f9:94:d9:c4:e2:7c:82:6e:40:c6:5f:82:12:d3:3c:cb:
30:db:96:90:5d:0c:b3:51:1f:a9:03:23:d5:4c:52:34:a1:86:
97:cc:ae:7b:70:5c:9f:04:14:5e:cd:97:26:90:24:57:a9:1d:
9e:af:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:40 2025 by rpki-client