Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
File: SffBpGd-t4JtrmneAaaZtiAdYkQ.mft (raw, json)
Hash identifier: V16/cknB8TPZjRK0xHa2vIe3uo0PZcdpTg2m9jQt6x8=
Subject key identifier: BF:5A:A3:94:40:C6:27:00:7A:A4:B1:C3:62:75:49:AB:0B:92:3B:9A
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 019A1A2B1AC18D9E4892CAF1099A2EBC710D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
Manifest number: 08C8
Signing time: Sat 25 Oct 2025 07:00:23 +0000
Manifest this update: Sat 25 Oct 2025 07:00:23 +0000
Manifest next update: Sun 26 Oct 2025 07:00:23 +0000
Files and hashes: 1: 1fEhDLG2T1y1zCMSekjeKTFgEiE.roa (hash: qkZRZL3uEJ/IofMfb0sGApiJ8jObyAIyttVh0abUKHc=)
2: SffBpGd-t4JtrmneAaaZtiAdYkQ.crl (hash: +rf/MiNEGG1nvMhwfjH8T1AKuZiucq85YQYGNBWBiY0=)
3: Ungcud01aQHgTMIDHqxKgOj76qo.roa (hash: vzFsWzaNMb5tmpdLeHM9BlzRIek6QkO8MJb/yx40U/I=)
4: aNjEb5eKDyYkgeaI_pw6s6Nyxio.roa (hash: LXIG7QItKisSD3lO6v16i6iN7S5ddhKshFToQIqNXAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:2b:1a:c1:8d:9e:48:92:ca:f1:09:9a:2e:bc:71:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: Oct 25 07:00:23 2025 GMT
Not After : Oct 26 07:00:23 2025 GMT
Subject: CN=bf5aa39440c627007aa4b1c3627549ab0b923b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:34:24:88:d1:58:69:b6:ac:43:d6:eb:c3:cd:
a1:52:17:bf:2b:e4:0d:48:37:6d:16:a0:cf:9c:b6:
18:e5:ba:43:ae:8f:36:e9:08:32:6e:8d:a7:05:be:
50:19:30:8b:18:3f:b9:27:9a:c5:52:5a:70:dd:af:
c0:96:34:11:50:e7:bd:05:b2:55:ff:26:05:41:e5:
1d:50:3d:b4:c8:a7:32:42:11:6d:07:87:6f:14:e3:
bf:c2:7b:21:5e:60:fc:bf:4b:bf:01:c5:2d:0f:25:
e7:b5:81:b7:c2:50:d5:2d:b7:77:04:73:3d:85:9c:
19:0a:ca:47:75:66:c7:bf:97:e7:a6:d2:39:5c:5a:
f9:3c:4f:fc:dc:5c:a1:e8:6e:87:87:2c:39:02:fa:
d2:4c:a7:4f:c4:2e:68:db:de:ec:c1:10:6d:33:44:
15:66:91:b1:e6:52:52:a2:c8:36:2b:21:34:e2:2b:
a8:26:de:6b:6d:de:d8:db:6e:26:93:05:95:20:51:
22:88:31:6e:e4:3e:42:1a:a5:b9:ba:ad:55:af:54:
5e:69:b3:2b:96:fa:fd:c2:5e:8a:8c:45:d3:a3:f3:
60:f7:6f:b0:0b:39:28:fb:ce:91:7e:c3:8e:74:f7:
b0:1a:0f:06:1e:43:65:e4:23:95:2c:3c:b7:a1:d3:
9d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5A:A3:94:40:C6:27:00:7A:A4:B1:C3:62:75:49:AB:0B:92:3B:9A
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:39:9b:0e:66:23:35:bf:a6:7c:86:c1:c1:34:6d:d9:28:2d:
0a:63:f1:dd:9d:be:b5:c6:d1:5c:00:df:03:54:14:90:4a:c3:
0c:48:03:21:ed:20:2c:ac:ca:13:de:68:f1:7c:fc:47:86:7e:
5f:b6:6c:7e:05:34:97:9e:3b:b9:d6:9e:c4:cc:90:04:6f:78:
53:56:35:3f:ac:10:78:ef:33:6f:0c:d7:85:0f:cf:23:13:74:
e6:be:e5:fa:ea:a0:8b:23:7a:34:8d:ba:27:34:01:6d:ca:e1:
0c:a0:ea:9a:9a:4f:ad:d0:cb:93:f8:f9:0b:6d:b8:a2:e3:59:
0f:c2:26:19:5d:24:45:24:d9:d0:35:e8:91:3e:ab:b2:42:b7:
5e:71:61:67:5c:0c:42:d4:05:2e:95:5f:aa:ab:ad:8f:67:3d:
ea:a5:a1:d4:95:5e:ee:ca:f7:fe:f0:dc:cf:78:e1:79:6b:59:
e5:ea:23:e6:04:49:9e:9f:6c:f8:7f:82:23:0d:60:bc:bb:ee:
24:01:c2:ed:8b:8c:03:65:1f:8c:8d:7b:ca:bc:d7:c0:51:d2:
9d:32:1e:76:0f:f7:69:12:93:0d:e5:c0:b9:be:df:cb:02:49:
dc:54:83:0c:4d:87:64:98:ea:1d:75:73:77:cd:20:a7:61:21:
6a:fb:e0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:35:40 2025 by rpki-client