Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
File: SfA190v2NQvDef8uJTiC0kaO9Yg.mft (raw, json)
Hash identifier: 7tFmvO2CixA3ejDR7sz//2inmYVYKEN3tyF1NgxamZw=
Subject key identifier: C6:30:B4:99:FD:EB:A1:6A:6B:E9:47:5A:3E:87:D7:5A:38:42:3F:D4
Authority key identifier: 49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
Certificate issuer: /CN=49f035f74bf6350bc379ff2e253882d2468ef588
Certificate serial: 019A70DC6C643A202AAE1106EE9123320717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
Manifest number: 0434
Signing time: Tue 11 Nov 2025 03:01:25 +0000
Manifest this update: Tue 11 Nov 2025 03:01:25 +0000
Manifest next update: Wed 12 Nov 2025 03:01:25 +0000
Files and hashes: 1: SfA190v2NQvDef8uJTiC0kaO9Yg.crl (hash: xIDNBS21NSc/roCzp1ISrnuQQ1HDnig48rvYiU6sDG0=)
2: wbmZO-HC2oZGGdDiSLm7Xy-yCzU.roa (hash: G5A8w6EKnJ7KNviXJvfO4lYZfTcipjXbs1g3Za2z4wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:6c:64:3a:20:2a:ae:11:06:ee:91:23:32:07:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f035f74bf6350bc379ff2e253882d2468ef588
Validity
Not Before: Nov 11 03:01:25 2025 GMT
Not After : Nov 12 03:01:25 2025 GMT
Subject: CN=c630b499fdeba16a6be9475a3e87d75a38423fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:59:e9:32:b4:e7:51:9a:db:11:1a:46:c9:
59:5a:77:3a:5f:82:52:73:da:3c:ac:2c:10:6f:d0:
15:00:36:5d:62:79:71:15:4a:2a:12:b3:0f:eb:05:
85:1f:08:99:d2:b5:5e:be:72:6b:c9:b3:8e:82:f1:
a0:31:b7:55:fa:37:fd:d4:a6:0f:cb:ac:c5:33:e6:
04:eb:7b:1c:1c:a1:ce:c3:5d:33:10:7f:46:78:a4:
b8:30:d4:71:eb:5b:53:d4:47:ef:a3:f1:70:03:b0:
b6:52:9e:7d:2a:3d:34:63:1f:68:47:33:87:5b:1e:
89:13:2e:1e:d1:bb:5d:f0:dc:e3:96:b4:6a:06:dc:
a6:fe:67:4c:82:b0:d7:fc:ac:b3:ef:2e:87:3d:33:
15:0d:7c:e4:ab:ca:9f:ee:db:90:9b:45:1b:9e:c1:
a2:13:51:5e:ac:b0:2d:5b:67:4b:9d:75:5f:45:9e:
59:49:56:00:4e:4c:14:a5:ab:0f:a2:e8:50:25:16:
6c:f7:73:9e:93:0e:a5:ef:72:8c:07:df:8c:47:b6:
b2:19:9b:31:11:0b:48:30:30:00:03:d1:93:b6:52:
66:37:0b:5d:87:86:ee:81:36:3a:2d:3f:54:16:43:
a5:7d:c8:c1:8b:9b:34:f4:2e:6c:34:31:83:a8:40:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:30:B4:99:FD:EB:A1:6A:6B:E9:47:5A:3E:87:D7:5A:38:42:3F:D4
X509v3 Authority Key Identifier:
keyid:49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e2:ce:30:b5:4d:bf:a5:1a:3d:ae:41:12:be:ec:4f:90:77:
2b:a2:2e:91:a0:83:99:d3:52:9a:9c:d6:a9:db:fa:3a:d3:e3:
74:33:b6:44:20:6f:0b:fa:e7:15:b1:0f:f6:6b:4e:06:e6:1b:
29:73:ad:a9:49:94:e8:18:81:09:05:d6:be:00:68:2f:ed:2a:
a3:90:ef:76:73:fa:7d:d4:07:3c:4e:10:79:f7:2e:ce:19:11:
f5:b5:79:9a:29:01:e9:c2:64:6c:93:30:c3:7f:1b:8e:1c:9c:
4d:eb:8c:3a:d6:41:50:2f:cb:7d:64:29:81:8f:74:b7:61:ba:
f4:00:61:c9:38:67:c9:8f:4e:70:8f:cd:cf:e7:1f:70:21:6c:
c3:a4:36:a5:78:d5:44:96:15:d6:e9:fb:69:63:f9:a3:e4:f1:
ab:39:80:f0:a0:07:4e:5f:76:0f:49:9c:0d:3e:63:5b:78:d1:
fc:ba:8f:c0:68:a2:6d:95:72:0e:11:5c:d2:15:a5:72:4b:bb:
8f:38:46:15:1a:9f:bd:18:9d:5e:4a:d5:8b:45:c5:6c:41:12:
ea:74:ce:20:f1:c2:c3:9f:ad:ae:cf:03:2c:e2:6f:a5:e6:5f:
59:f6:2e:ff:bf:08:60:78:07:d3:35:aa:32:a0:fc:35:40:7c:
e9:6a:72:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:06 2025 by rpki-client