Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
File: SglzwfRD7EqDh6rXrKddB7b6qdo.mft (raw, json)
Hash identifier: ve5zKkLbDvkZCCcuPZYbaT54YxoQUJmHN7qC+tapvRI=
Subject key identifier: 1E:04:70:68:0F:B4:11:DF:17:3E:9A:5F:75:78:49:C5:90:CE:99:1C
Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
Certificate issuer: /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Certificate serial: 019A1C19BF7546D5FB28DABD169F777C4C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
Manifest number: 16F5
Signing time: Sat 25 Oct 2025 16:00:40 +0000
Manifest this update: Sat 25 Oct 2025 16:00:40 +0000
Manifest next update: Sun 26 Oct 2025 16:00:40 +0000
Files and hashes: 1: SglzwfRD7EqDh6rXrKddB7b6qdo.crl (hash: LfU2BX+Hox4JYQ5fb1PTBOg0lcSdlafBXe1BUUYZrhs=)
2: orU4EbmlFeqLBWCBQ_VGHpY6cYs.roa (hash: TAeP8ncHqHpmG4cmrL2aNQakXI/xX50W/LkzF00pVS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:19:bf:75:46:d5:fb:28:da:bd:16:9f:77:7c:4c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Validity
Not Before: Oct 25 16:00:40 2025 GMT
Not After : Oct 26 16:00:40 2025 GMT
Subject: CN=1e0470680fb411df173e9a5f757849c590ce991c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:a1:b6:67:b2:32:2f:20:eb:8d:05:72:8f:
c1:fa:2c:28:66:4e:ae:c1:ab:9a:83:5d:37:a4:a8:
8b:35:6c:0d:78:a5:56:69:8e:64:32:10:d7:c3:12:
98:f1:54:28:74:76:c4:28:de:58:79:8b:f0:18:34:
92:94:44:b1:db:bb:7c:b8:5f:d7:7f:f0:64:1f:f5:
2b:93:25:f5:c3:b3:16:34:f0:c9:4b:8b:7e:ae:4a:
f9:3f:a8:6b:17:a5:32:b1:40:f5:cb:e4:de:a4:2f:
8d:48:e7:66:f2:26:bc:5b:34:bb:ba:e2:dd:d7:ed:
e2:90:df:e1:32:f9:a5:98:cd:4c:9a:99:d9:ac:4a:
cf:fd:3b:9b:40:26:6b:bc:e9:47:b6:6a:bd:65:36:
63:58:f5:2a:11:ea:00:11:9e:2d:67:72:8c:5b:95:
67:2e:30:84:8b:a6:f6:80:d3:24:28:74:d1:a1:39:
08:55:dc:56:bc:28:6f:55:88:08:10:d0:d0:3f:a7:
5a:83:4a:36:51:ee:da:be:4a:a0:fc:76:cb:c6:b1:
61:13:ce:25:e7:76:ab:04:93:dd:21:14:49:c3:97:
68:ab:c2:02:a5:4f:44:00:ed:92:aa:f5:27:30:6e:
33:ea:ee:3b:38:42:aa:b3:a2:03:92:d6:6e:79:c6:
3a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:04:70:68:0F:B4:11:DF:17:3E:9A:5F:75:78:49:C5:90:CE:99:1C
X509v3 Authority Key Identifier:
keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:99:27:40:10:81:ba:11:8a:46:30:8a:0b:1c:7c:1e:9b:4f:
5d:6d:bc:68:33:fa:51:e4:6e:d7:23:b0:1f:73:d4:6f:12:ec:
8f:ed:8a:9d:1f:32:8c:ee:7c:88:47:f5:95:c6:6b:76:5d:07:
04:f8:30:31:38:a3:1f:c4:16:4f:e8:9c:0e:9b:90:88:24:94:
91:b6:43:e6:63:93:6c:51:6b:75:5c:42:b7:ef:3d:4d:f9:14:
01:b8:f5:11:d7:e3:8c:43:1a:73:84:07:57:aa:1b:d6:bc:27:
64:77:eb:12:4e:99:85:38:73:80:d2:8f:14:8f:6a:68:40:90:
f2:69:96:34:bb:69:88:b9:ff:f1:3e:d6:c0:40:c1:b6:a7:e0:
f5:aa:79:4f:9c:52:0d:93:53:fd:96:a3:d5:66:74:13:52:0d:
8a:c6:44:1d:26:1c:38:56:79:eb:c3:f9:27:1a:8a:df:ad:a1:
ee:62:9a:0d:9f:a7:af:15:6d:d7:d7:20:cc:74:0d:4b:50:c7:
ad:35:52:7a:02:f0:d2:d0:24:fa:74:48:da:a3:e0:c8:d0:ee:
74:49:41:64:f8:e5:1a:2b:05:b2:4e:b1:6a:08:fe:ae:95:a8:
b9:2d:d5:79:d7:ac:81:bb:f4:48:fe:18:ea:fe:32:ee:60:0b:
06:cd:7a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 19:50:43 2025 by rpki-client