Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
File: 1SGSgT0i76BLy7JOC_D-NNjfukg.mft (raw, json)
Hash identifier: V6lj2/TCA0LOnguaxDLp7McaVB80OnLHPwRzHaFn5N4=
Subject key identifier: D6:EB:C9:70:81:4E:65:BC:44:98:DF:63:2D:9C:6D:7C:E5:85:69:66
Authority key identifier: D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
Certificate issuer: /CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Certificate serial: 019A164ED76ED81346116CB6FCED4F375B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
Manifest number: 0312
Signing time: Fri 24 Oct 2025 13:00:56 +0000
Manifest this update: Fri 24 Oct 2025 13:00:56 +0000
Manifest next update: Sat 25 Oct 2025 13:00:56 +0000
Files and hashes: 1: 1SGSgT0i76BLy7JOC_D-NNjfukg.crl (hash: EstLOaKYl6JQo2rb1kRPhjUOGJTrGPxJUMZKUYM6hgo=)
2: eDQ7Rqa20D_hI8gI5USdLHd-gF8.roa (hash: r3EJNmKQgbbo4j5pe3uk2ZFcWeVkHRAZ7TxCivW3QgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:4e:d7:6e:d8:13:46:11:6c:b6:fc:ed:4f:37:5b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Validity
Not Before: Oct 24 13:00:56 2025 GMT
Not After : Oct 25 13:00:56 2025 GMT
Subject: CN=d6ebc970814e65bc4498df632d9c6d7ce5856966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6d:80:27:9d:40:72:44:ac:30:c0:65:5f:d0:
d1:cc:55:ac:fd:8c:3a:01:af:26:6f:58:4b:21:05:
89:f8:6d:29:8e:5b:01:2c:40:9b:46:c7:bd:24:4d:
c5:a2:bc:39:6e:86:40:df:61:fa:2f:20:0e:59:b0:
5d:9a:e8:6d:ea:e6:45:b8:e2:08:a0:63:ad:9d:89:
0f:4d:c1:4b:1b:b4:78:06:41:ae:61:3c:19:cc:44:
9a:37:92:b2:8e:9c:de:91:61:4d:49:04:e3:e4:bc:
9e:38:1d:4f:a7:35:02:9c:35:44:27:2f:ca:6d:e4:
ee:48:67:d0:41:4c:c2:7f:15:c9:c9:8f:fc:d7:0c:
ad:d6:5f:3f:ed:c2:49:2c:eb:21:a7:03:e8:43:71:
09:c5:96:c5:10:0d:11:20:2e:cf:40:dc:c9:51:ab:
c8:39:ca:27:6c:23:b4:08:1f:6c:ac:52:ac:15:68:
b2:e0:96:fc:89:86:b3:e4:1c:11:71:28:a1:fb:a2:
75:53:42:ab:42:30:4b:6d:d1:dd:77:03:f8:2c:03:
af:47:d1:c8:91:54:a4:2a:33:17:35:35:b6:8d:f3:
f2:50:8b:bb:c0:71:e0:85:ef:89:9e:42:2a:8f:0d:
75:5f:51:5b:8b:cb:78:dd:4e:9b:c1:d9:a4:aa:f2:
6f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EB:C9:70:81:4E:65:BC:44:98:DF:63:2D:9C:6D:7C:E5:85:69:66
X509v3 Authority Key Identifier:
keyid:D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:53:bc:d9:a6:65:91:39:77:0e:da:b5:5e:37:ec:15:00:f6:
43:7a:8a:6d:c1:44:3e:18:ea:2b:e6:ca:73:0c:4b:76:01:45:
91:12:97:28:f7:a0:12:cc:8c:d9:f5:e0:d0:37:23:6b:d8:26:
af:d5:10:8e:97:c2:e2:e9:c1:b6:54:5c:1a:0e:71:21:a4:37:
26:0e:f8:d0:99:d7:69:8b:db:8c:30:a4:fa:74:f7:5c:8f:8c:
a4:b9:86:02:22:3d:24:e5:90:1c:73:49:12:14:e0:60:89:06:
55:44:12:20:06:57:4c:d6:51:7d:63:35:dc:4e:2d:b9:4c:ef:
67:2c:c5:59:66:4b:bc:d4:00:7a:b9:4d:b4:33:57:57:f6:da:
16:a3:31:90:c7:a5:36:98:d7:30:2c:ce:81:7c:03:de:8d:3e:
23:3f:d5:5e:74:c6:ae:6c:1a:15:28:60:25:73:8f:98:0d:2a:
f0:c9:56:63:77:a1:c2:82:09:b2:c8:e8:e9:36:84:d8:c4:61:
06:b1:30:97:a8:ba:1a:d3:dd:23:b8:07:52:80:90:fd:47:e9:
6f:5d:ac:7d:92:98:b4:b3:ef:51:68:8a:e4:67:d0:a6:3c:7f:
aa:32:76:0a:0c:37:fc:b3:ef:39:32:f8:86:91:c0:6e:76:ef:
85:28:0c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 20:47:27 2025 by rpki-client