Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
File: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft (raw, json)
Hash identifier: Qg1oQkIi6+++Pckbk1HGS3D3FTx5HulzrSdXIl9zVYk=
Subject key identifier: 0A:75:8D:26:B5:73:0A:C0:F9:B8:53:A5:6E:14:96:18:93:E5:A7:0E
Authority key identifier: 4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
Certificate issuer: /CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Certificate serial: 019A72CA44EDDF977AD5AC8CC7B0B1B79943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
Manifest number: 03D9
Signing time: Tue 11 Nov 2025 12:00:49 +0000
Manifest this update: Tue 11 Nov 2025 12:00:49 +0000
Manifest next update: Wed 12 Nov 2025 12:00:49 +0000
Files and hashes: 1: 8m2tBlzpxiqL6kK0VrkHkgcTou4.roa (hash: 0P8p9ZGo9OL3ArRsj5WLpA2L7n8Ub+2jDkN4NpO9vF0=)
2: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl (hash: bPVlTbAuVa8O4M1x++w9z6lY1GzQXk7qZdnApWnmt6g=)
3: s4XNe0m5JYFtPI85hv2GLzYIY68.roa (hash: pE7eHdiD/UhztagcGqo6QdniDLwOOKzreXSfWjlvBJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:44:ed:df:97:7a:d5:ac:8c:c7:b0:b1:b7:99:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Validity
Not Before: Nov 11 12:00:49 2025 GMT
Not After : Nov 12 12:00:49 2025 GMT
Subject: CN=0a758d26b5730ac0f9b853a56e14961893e5a70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:3b:6a:9b:74:8c:92:08:61:1f:0a:f9:6c:
59:0c:af:ba:39:b5:32:1a:de:24:3d:c5:66:7f:9f:
9d:ab:37:f1:c7:db:81:48:41:d9:0f:b3:95:7d:0c:
bf:de:99:58:1b:15:24:19:cf:03:dc:50:90:25:72:
84:84:b7:16:c6:70:67:a6:48:82:bf:42:97:74:b9:
36:6c:cd:74:ad:12:02:35:68:75:8a:0c:30:bd:be:
4f:dc:99:dd:38:3e:2a:ad:f7:5c:78:95:d9:22:5b:
52:4a:ab:e4:f4:b5:90:f3:12:23:19:0b:3a:61:87:
29:f3:91:b0:b3:88:97:a9:a6:e0:5a:ad:3d:bc:51:
2c:a9:d1:a8:da:de:ad:cf:56:8a:81:85:a8:5a:6e:
89:0c:07:86:00:90:53:b8:e1:21:8a:4f:37:b4:d4:
db:f8:b4:78:e7:e2:c4:3c:c9:50:86:73:70:9f:60:
ef:5d:33:f7:19:bd:5d:78:33:d7:7d:16:8e:33:34:
79:33:01:82:e6:f9:03:65:40:a2:95:ac:12:4e:c4:
7c:1d:d4:f3:24:68:32:ab:08:11:d8:df:73:d5:e3:
9e:35:f1:38:d0:af:87:ee:3b:eb:ec:15:04:5c:0e:
52:be:ce:98:e0:3a:0c:09:13:10:be:5b:74:00:95:
22:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:75:8D:26:B5:73:0A:C0:F9:B8:53:A5:6E:14:96:18:93:E5:A7:0E
X509v3 Authority Key Identifier:
keyid:4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:31:7c:4d:f0:82:26:3f:ef:4b:85:58:3d:8e:fa:9f:07:76:
d2:b9:d3:e8:62:5a:58:57:2e:31:65:98:5e:4a:c7:ab:b3:e5:
97:23:7d:99:a9:0c:3a:93:76:d2:cc:d3:77:16:f1:06:bc:2e:
3c:39:3c:f4:6f:e8:14:80:5d:f1:73:64:d0:97:d0:d7:d4:5e:
2a:94:1b:e0:04:e8:87:60:3d:f4:e8:2b:7e:47:dc:46:91:f5:
ff:c1:7a:ae:fa:be:1f:36:59:19:a5:39:e7:d8:fc:be:4b:f7:
77:14:c7:c5:c3:d5:a8:56:cb:ff:08:bd:e3:50:c3:e0:78:20:
69:0f:f7:ea:a1:3d:ad:c3:f5:4b:30:59:d1:4a:ff:e5:43:c2:
f4:e6:f2:92:0f:37:1b:7e:7c:49:06:1e:79:d1:ac:64:f9:fe:
26:db:ce:d9:b9:ae:6f:68:07:8d:72:e8:09:a8:8b:d3:ac:c4:
fe:11:c1:af:0c:27:b5:27:4e:56:3b:8d:a9:76:59:e3:c4:76:
0d:f6:2d:1e:e9:e4:d8:3e:b7:eb:14:e5:bc:ad:8f:4b:56:c4:
22:75:a0:60:c8:9b:34:d9:86:b0:33:8f:03:b0:cf:6e:7d:65:
30:96:83:37:c6:36:21:f4:f5:a3:da:e9:a0:87:0c:14:52:91:
27:aa:77:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:49 2025 by rpki-client