Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
File: sglyH0VIwmzzYulEqBsazueyS1M.mft (raw, json)
Hash identifier: vBg5zRvNctDdcMqS6EI+zI/PbX31hrJl74fAUywKrQs=
Subject key identifier: C1:16:58:BC:34:C8:B8:16:C1:DC:91:5B:5B:7F:EA:9F:BD:C7:87:14
Authority key identifier: B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
Certificate issuer: /CN=b209721f4548c26cf362e944a81b1acee7b24b53
Certificate serial: 019A73384B15C484B9FE3490C43F746D46F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 14:01:00 +0000
Manifest this update: Tue 11 Nov 2025 14:01:00 +0000
Manifest next update: Wed 12 Nov 2025 14:01:00 +0000
Files and hashes: 1: Kn5YPKTavnkR9we3GavTZvxru0g.roa (hash: xBxCBv93EeHCLyNABUtZ7jn766Ch4SgbtDnPEkzOvDM=)
2: aM2Mmp7rYQ9Ds0NTfBSW1lSTHx4.roa (hash: MOXkGsTfJLVwHpeFy8hnMbfGHfgWVvoGY31VFj0P0FE=)
3: bELo5qIIpuod7qBLIUKqwA9Ds9w.roa (hash: WzrJgL+uq92c99WVaAJUBgvncMaquptkbbkZrtxJTI8=)
4: sglyH0VIwmzzYulEqBsazueyS1M.crl (hash: rt4Cp3xUCerPMdhnQXT/8FWZHxtM/FYpXjGefJAzpvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:4b:15:c4:84:b9:fe:34:90:c4:3f:74:6d:46:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209721f4548c26cf362e944a81b1acee7b24b53
Validity
Not Before: Nov 11 14:01:00 2025 GMT
Not After : Nov 12 14:01:00 2025 GMT
Subject: CN=c11658bc34c8b816c1dc915b5b7fea9fbdc78714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:5b:82:f8:09:52:d6:89:31:75:42:5f:08:
76:ef:37:09:30:60:1e:0d:b5:c9:0e:b7:5d:e9:92:
4d:3e:07:58:65:6e:7c:de:a5:30:6d:d2:75:5d:40:
79:92:74:b6:c2:3f:4f:67:c2:e5:c8:22:c2:70:19:
82:b5:3c:d1:d9:72:7f:2c:6c:cc:99:88:50:2c:8e:
8c:22:6e:a1:9a:fe:2b:92:5d:c3:b8:a3:54:4c:17:
c1:8f:b6:3c:8f:e5:2e:79:68:f2:87:1c:b8:d1:bb:
02:54:bb:71:46:07:d6:73:1c:41:0a:b1:e4:2a:f5:
35:7a:c6:24:1a:71:9f:b8:a9:83:29:ca:ed:34:22:
78:cd:26:0a:f4:ba:b6:d8:53:e9:16:43:65:55:7a:
ff:d4:d2:dd:bb:dd:d6:22:ac:90:8e:28:56:c0:9c:
99:76:85:15:20:25:a4:b9:4f:a6:e8:c4:30:0e:06:
20:48:72:ca:d5:c9:5f:ec:b2:85:96:61:78:18:88:
a1:8a:dc:43:d2:06:e9:7d:98:28:5c:b8:64:bd:d6:
c2:7b:9e:44:53:7c:62:9e:1a:c6:14:bb:fc:83:df:
52:30:d7:e5:72:7e:e4:e3:29:d5:2e:98:65:c9:56:
86:b2:11:1e:c2:6f:f6:8c:97:65:da:86:3f:6b:f9:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:16:58:BC:34:C8:B8:16:C1:DC:91:5B:5B:7F:EA:9F:BD:C7:87:14
X509v3 Authority Key Identifier:
keyid:B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8b:b7:ca:ba:93:e7:24:b0:f1:4e:9c:49:a5:ba:78:69:f3:
0b:ed:41:32:07:e9:11:85:b8:6d:f0:83:62:96:96:28:a7:cb:
de:3a:cd:83:ad:9c:d4:8d:a2:d7:b4:67:8b:24:df:41:07:34:
34:26:3b:63:3e:b4:4c:31:a4:84:fa:27:0b:6f:ab:95:79:91:
fa:59:7d:b7:3c:68:fd:2b:40:90:e3:b0:1a:b9:09:47:55:7c:
10:e1:81:cf:95:5e:95:ce:28:25:b1:bf:b1:71:e5:b1:fa:50:
c3:38:59:a8:95:c4:d7:c9:50:92:96:9c:a3:dc:95:09:51:28:
06:1b:b0:fe:78:e5:29:6b:52:c5:4b:bb:32:9d:0b:6c:16:e6:
25:de:c0:47:06:fa:7c:27:62:b5:8b:9b:6c:ec:4e:2b:38:e0:
c3:69:f5:cd:36:5d:9e:e4:b2:a6:28:53:d8:c2:d0:2c:36:a7:
79:46:82:ff:7b:77:6f:cd:f7:ee:0b:d8:01:08:9f:1d:f2:6d:
03:16:12:c1:ba:0f:36:e6:7e:0d:23:e5:83:da:ae:b4:4b:c6:
73:82:ac:b4:b8:d8:92:05:3c:87:fc:f0:8c:fb:23:8d:74:84:
1a:83:e7:41:61:bd:3d:f6:50:08:8f:32:29:62:73:ed:fb:da:
bc:f7:16:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOEsVxIS5/jSQxD90bUb4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMDk3MjFmNDU0OGMyNmNmMzYyZTk0NGE4MWIxYWNlZTdi
MjRiNTMwHhcNMjUxMTExMTQwMTAwWhcNMjUxMTEyMTQwMTAwWjAzMTEwLwYDVQQD
EyhjMTE2NThiYzM0YzhiODE2YzFkYzkxNWI1YjdmZWE5ZmJkYzc4NzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwRbgvgJUtaJMXVCXwh27zcJMGAe
DbXJDrdd6ZJNPgdYZW583qUwbdJ1XUB5knS2wj9PZ8LlyCLCcBmCtTzR2XJ/LGzM
mYhQLI6MIm6hmv4rkl3DuKNUTBfBj7Y8j+UueWjyhxy40bsCVLtxRgfWcxxBCrHk
KvU1esYkGnGfuKmDKcrtNCJ4zSYK9Lq22FPpFkNlVXr/1NLdu93WIqyQjihWwJyZ
doUVICWkuU+m6MQwDgYgSHLK1clf7LKFlmF4GIihitxD0gbpfZgoXLhkvdbCe55E
U3xinhrGFLv8g99SMNflcn7k4ynVLphlyVaGshEewm/2jJdl2oY/a/nn+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEWWLw0yLgWwdyRW1t/6p+9x4cUMB8GA1UdIwQY
MBaAFLIJch9FSMJs82LpRKgbGs7nsktTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2dseUgwVkl3bXp6WXVsRXFCc2F6dWV5UzFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hNjc0MzItYzA2Ny00Y2RiLWI1YWQt
ZGJhNWMxODM0NjAxLzEvc2dseUgwVkl3bXp6WXVsRXFCc2F6dWV5UzFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9hNjc0MzItYzA2Ny00Y2RiLWI1YWQtZGJhNWMxODM0NjAx
LzEvc2dseUgwVkl3bXp6WXVsRXFCc2F6dWV5UzFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIu3yrqT
5ySw8U6cSaW6eGnzC+1BMgfpEYW4bfCDYpaWKKfL3jrNg62c1I2i17RniyTfQQc0
NCY7Yz60TDGkhPonC2+rlXmR+ll9tzxo/StAkOOwGrkJR1V8EOGBz5Velc4oJbG/
sXHlsfpQwzhZqJXE18lQkpaco9yVCVEoBhuw/njlKWtSxUu7Mp0LbBbmJd7ARwb6
fCditYubbOxOKzjgw2n1zTZdnuSypihT2MLQLDaneUaC/3t3b8337gvYAQifHfJt
AxYSwboPNuZ+DSPlg9qutEvGc4KstLjYkgU8h/zwjPsjjXSEGoPnQWG9PfZQCI8y
KWJz7fvavPcW1Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:38 2025 by rpki-client