Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
File: r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json)
Hash identifier: UNUYSWGPNXUV7L764JWucgveBYwzYp6Y5lzuFwCqCfw=
Subject key identifier: BB:CA:4B:05:5C:98:8D:1B:8F:B7:6D:D6:74:E7:1B:19:95:D5:7E:E8
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial: 019A7225D29B0E7D2946C5916EAAAD3484C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:12 +0000
Manifest this update: Tue 11 Nov 2025 09:01:12 +0000
Manifest next update: Wed 12 Nov 2025 09:01:12 +0000
Files and hashes: 1: WRw_zQ2egi-s7g_XDa3-zCzmCZo.roa (hash: 02LV3UJv16rTHuq6tHPlIKsn2U/3pYjP8DRzavT1ujg=)
2: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: nB+tUu3aKMB+xmY49P+p+TG8Cae9pLfmY2CcLhfqOQQ=)
3: tMXBcGUIKGTfYRMTtfG6biesR-c.roa (hash: JWcwNHGeY4nL5R6D6KA+SUTM4UCaSarGczrFPqLJ+XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d2:9b:0e:7d:29:46:c5:91:6e:aa:ad:34:84:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Validity
Not Before: Nov 11 09:01:12 2025 GMT
Not After : Nov 12 09:01:12 2025 GMT
Subject: CN=bbca4b055c988d1b8fb76dd674e71b1995d57ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e5:23:92:70:22:55:cd:70:50:dd:7f:e8:b2:
19:bb:f7:d7:d8:8b:1e:18:ab:76:04:6e:0a:be:f4:
46:19:e9:f5:08:fe:c5:68:6a:d2:ed:a9:60:a6:6e:
02:aa:67:0d:70:cd:e5:48:44:8c:53:b6:5f:20:9a:
c5:93:c2:9c:50:be:57:af:f9:b5:82:04:47:a8:b9:
7f:48:01:55:46:5a:4f:3a:d1:26:fb:3d:df:d1:41:
14:cf:54:08:5e:ae:35:02:a1:2a:ed:ba:9f:1b:b9:
92:a3:a3:13:0e:33:02:5d:24:f3:ab:30:8b:58:f2:
be:a8:94:8f:82:ec:3a:29:bc:75:8e:48:e6:b3:e8:
56:66:f7:84:72:95:f8:95:02:87:c5:69:26:f7:d2:
81:5b:1a:b0:d1:8e:17:d9:48:11:42:d3:90:e0:b2:
87:7f:3d:6b:9c:51:14:de:17:8f:30:69:db:5b:03:
d5:ae:34:db:12:d2:90:b3:37:6e:b2:83:ae:f8:47:
d3:de:fe:6a:fe:79:d8:2f:da:ec:8e:ec:67:b5:13:
17:04:d6:c4:88:8e:aa:52:7c:eb:c1:f8:ba:1d:1d:
0f:fd:15:d8:fb:53:64:80:25:e6:ee:d0:38:b9:1d:
5e:15:d7:ac:76:c4:78:43:e0:97:6a:4a:be:6e:c8:
a5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CA:4B:05:5C:98:8D:1B:8F:B7:6D:D6:74:E7:1B:19:95:D5:7E:E8
X509v3 Authority Key Identifier:
keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:61:0b:ba:b8:45:36:ad:6c:eb:dc:c4:76:8f:95:7a:1e:92:
00:21:af:fd:34:59:44:e5:f8:02:f9:15:e7:08:ef:c5:59:9b:
13:3e:3d:b1:50:ee:05:6c:b6:7d:a4:41:c6:d0:4c:7d:a1:6b:
40:96:83:70:75:d8:96:e8:ac:dd:7e:18:dc:9f:6a:87:ca:1d:
ef:51:28:55:4b:76:fe:04:58:4f:a3:42:d9:50:27:13:86:c2:
f3:da:da:29:70:0b:e8:9d:31:9e:e4:76:9d:60:a4:1a:7b:6c:
12:36:a0:5d:8c:16:ad:c8:00:34:8a:6c:38:6b:ac:59:f5:68:
89:0f:1e:3a:95:7a:cb:ef:68:88:d1:f8:b4:b2:92:2a:41:b0:
d4:10:e1:80:31:41:91:84:40:d6:a9:7b:0d:06:70:4c:0e:08:
38:5e:ef:ac:95:6d:d7:38:42:5f:a8:6c:fd:b7:9e:06:9d:4f:
b3:d5:c8:ad:43:92:8f:56:c0:04:f0:c6:2d:5f:8e:ec:e7:76:
1b:06:a2:bd:94:33:07:d7:88:0b:7a:96:da:8b:44:70:8e:6f:
3e:bd:20:c7:f6:06:a4:92:9a:08:21:e9:71:18:1e:a9:f3:49:
c4:62:95:2b:ad:9e:c9:73:86:f6:a7:de:89:b7:4d:94:fd:51:
5a:68:e2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:45 2025 by rpki-client