Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
File: SGiJzk60_XR4GCSDld5fuT0f4UI.mft (raw, json)
Hash identifier: uAA1ZACClouJtsGPWGjokN0+OmpWY3Ht/xhZ5JjYXg8=
Subject key identifier: D4:88:F5:51:52:F4:02:3B:29:02:FC:AC:CE:04:9E:9A:9F:FD:5E:46
Authority key identifier: 48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
Certificate issuer: /CN=486889ce4eb4fd747818248395de5fb93d1fe142
Certificate serial: 019A71EE75A41B33EA9EDADA3230CF1BEE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
Manifest number: 029C
Signing time: Tue 11 Nov 2025 08:00:44 +0000
Manifest this update: Tue 11 Nov 2025 08:00:44 +0000
Manifest next update: Wed 12 Nov 2025 08:00:44 +0000
Files and hashes: 1: FfqUAa7-KKr54JP8aBzk5nNv21g.roa (hash: PY8USvms98PE+f6r3SXsrpm0zwpXY4+1N+NCv5EFelE=)
2: SGiJzk60_XR4GCSDld5fuT0f4UI.crl (hash: NkuIiScSAPHZIO/mkEfxPZsSVjoMLwpXug9fdyYXtbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:75:a4:1b:33:ea:9e:da:da:32:30:cf:1b:ee:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486889ce4eb4fd747818248395de5fb93d1fe142
Validity
Not Before: Nov 11 08:00:44 2025 GMT
Not After : Nov 12 08:00:44 2025 GMT
Subject: CN=d488f55152f4023b2902fcacce049e9a9ffd5e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:39:fd:e5:1d:3c:a7:8e:6f:30:53:4b:36:
a7:a0:3f:04:32:ca:9e:c7:15:76:fc:7d:49:19:26:
02:16:c4:cf:3c:e4:fb:42:b2:49:88:e4:0d:92:4f:
c5:fb:a3:80:ca:47:20:c1:28:c6:8b:86:7d:67:45:
c4:5c:6e:76:ad:80:1d:35:f2:26:56:4c:fa:3b:9f:
f8:e7:af:32:bf:ff:81:2e:58:6e:2b:f1:f9:64:7f:
df:5b:3c:61:a4:2b:2d:da:75:6a:b4:6e:10:82:c3:
4e:ae:e8:72:9a:a6:af:86:db:78:52:46:c1:bc:10:
45:cb:20:ca:1a:28:a9:2a:04:2d:97:09:88:b6:90:
1d:76:5a:9b:f1:dc:1f:de:e3:c9:cc:10:62:9b:ce:
4f:56:7b:cf:22:99:50:b7:0a:24:49:8c:c4:dc:e5:
57:a4:f3:79:ec:af:04:5f:bd:6a:d4:9b:70:d1:75:
11:ae:3f:39:65:0a:9d:e2:83:b5:42:c2:b8:63:a2:
2f:9c:ae:e0:16:67:22:05:39:a1:b8:5c:0a:df:cd:
ce:76:cb:22:21:5c:0e:73:e2:41:2b:ea:5e:e8:b6:
da:a1:6b:d5:3d:66:23:fc:d4:57:a1:9b:7a:44:41:
70:12:36:91:79:c0:4d:55:59:ae:e9:d6:69:c4:7a:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:88:F5:51:52:F4:02:3B:29:02:FC:AC:CE:04:9E:9A:9F:FD:5E:46
X509v3 Authority Key Identifier:
keyid:48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:57:70:53:02:7a:ec:fb:42:63:fe:17:16:ca:d1:83:6e:c0:
1d:15:71:4b:9d:22:b2:76:01:36:df:2b:53:24:dc:1d:6d:d0:
7a:ff:86:31:eb:9c:31:da:e2:14:2d:4f:b7:6e:ce:ee:73:15:
ee:ba:18:5d:74:5a:84:7c:67:19:67:d9:9b:e7:d5:15:df:a7:
7a:07:b2:60:c5:07:34:ce:9c:af:b5:c8:3c:c4:1f:a7:8f:ae:
9d:8d:9d:47:ae:38:bb:41:ab:17:13:61:68:9e:4d:4a:3d:e9:
9b:e2:52:b9:57:18:49:d3:53:bd:95:5d:29:f4:6f:1a:7f:43:
96:11:02:ea:50:e4:58:37:76:3e:81:c8:25:d8:c9:90:b6:ce:
5b:a1:76:17:36:60:8f:d5:35:11:b3:5b:08:82:d8:f0:75:e4:
3d:94:49:68:07:4c:ed:00:08:b0:91:ef:44:0f:b4:34:e4:cc:
f3:01:5f:fb:98:70:c0:29:51:03:19:d9:57:94:28:dd:1e:47:
1e:4f:9a:54:d3:0c:fe:c4:6d:be:71:8d:57:52:42:a7:9c:61:
75:28:b0:32:aa:80:a6:6a:f1:c0:14:ad:52:a3:8f:24:f7:1d:
f0:92:90:62:91:1b:31:7c:64:46:d3:a6:b6:10:5b:a2:fe:13:
cb:3c:88:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7nWkGzPqntraMjDPG+5FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4Njg4OWNlNGViNGZkNzQ3ODE4MjQ4Mzk1ZGU1ZmI5M2Qx
ZmUxNDIwHhcNMjUxMTExMDgwMDQ0WhcNMjUxMTEyMDgwMDQ0WjAzMTEwLwYDVQQD
EyhkNDg4ZjU1MTUyZjQwMjNiMjkwMmZjYWNjZTA0OWU5YTlmZmQ1ZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLI5/eUdPKeObzBTSzanoD8EMsqe
xxV2/H1JGSYCFsTPPOT7QrJJiOQNkk/F+6OAykcgwSjGi4Z9Z0XEXG52rYAdNfIm
Vkz6O5/4568yv/+BLlhuK/H5ZH/fWzxhpCst2nVqtG4QgsNOruhymqavhtt4UkbB
vBBFyyDKGiipKgQtlwmItpAddlqb8dwf3uPJzBBim85PVnvPIplQtwokSYzE3OVX
pPN57K8EX71q1Jtw0XURrj85ZQqd4oO1QsK4Y6IvnK7gFmciBTmhuFwK383Odssi
IVwOc+JBK+pe6LbaoWvVPWYj/NRXoZt6REFwEjaRecBNVVmu6dZpxHo/FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSI9VFS9AI7KQL8rM4Enpqf/V5GMB8GA1UdIwQY
MBaAFEhoic5OtP10eBgkg5XeX7k9H+FCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0dpSnprNjBfWFI0R0NTRGxkNWZ1VDBmNFVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jOTI0MmUtZTQyNC00ZWQxLWFjOGIt
YzEzNjQwNWI3YmI3LzEvU0dpSnprNjBfWFI0R0NTRGxkNWZ1VDBmNFVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jOTI0MmUtZTQyNC00ZWQxLWFjOGItYzEzNjQwNWI3YmI3
LzEvU0dpSnprNjBfWFI0R0NTRGxkNWZ1VDBmNFVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVdwUwJ6
7PtCY/4XFsrRg27AHRVxS50isnYBNt8rUyTcHW3Qev+GMeucMdriFC1Pt27O7nMV
7roYXXRahHxnGWfZm+fVFd+negeyYMUHNM6cr7XIPMQfp4+unY2dR644u0GrFxNh
aJ5NSj3pm+JSuVcYSdNTvZVdKfRvGn9DlhEC6lDkWDd2PoHIJdjJkLbOW6F2FzZg
j9U1EbNbCILY8HXkPZRJaAdM7QAIsJHvRA+0NOTM8wFf+5hwwClRAxnZV5Qo3R5H
Hk+aVNMM/sRtvnGNV1JCp5xhdSiwMqqApmrxwBStUqOPJPcd8JKQYpEbMXxkRtOm
thBbov4TyzyI/g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:03 2025 by rpki-client