Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
File: SXioZBznhb40aFAwUncj5f3OVio.mft (raw, json)
Hash identifier: b1yU502x7cnfvJsdYqqj4t1nuvaLofBfGbTDFfFlcTA=
Subject key identifier: 57:D5:E8:80:BC:C7:AB:D2:63:97:ED:9D:08:8D:39:B2:38:EF:E6:AE
Authority key identifier: 49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
Certificate issuer: /CN=4978a8641ce785be34685030527723e5fdce562a
Certificate serial: 019A71EEC72AEF318F9058B2321CDE78495A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
Manifest number: 075B
Signing time: Tue 11 Nov 2025 08:01:05 +0000
Manifest this update: Tue 11 Nov 2025 08:01:05 +0000
Manifest next update: Wed 12 Nov 2025 08:01:05 +0000
Files and hashes: 1: BCD_tpHD4CbGfbV_PdrLa7vTpXk.roa (hash: 3ZjEUHk0H2GaQYj5jwvFZHg7bwJy5JXMVYVGmhkBhZA=)
2: SXioZBznhb40aFAwUncj5f3OVio.crl (hash: lU1kzYoA/55b8RYWoT7FJofcXye6iKg7IXQ1S9PZYqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c7:2a:ef:31:8f:90:58:b2:32:1c:de:78:49:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978a8641ce785be34685030527723e5fdce562a
Validity
Not Before: Nov 11 08:01:05 2025 GMT
Not After : Nov 12 08:01:05 2025 GMT
Subject: CN=57d5e880bcc7abd26397ed9d088d39b238efe6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:09:a7:1e:32:bb:10:d2:36:09:66:5a:55:26:
a0:95:20:7d:79:84:cb:b7:37:6a:84:4b:3d:45:ee:
6a:f8:0f:e8:d4:c9:0f:2e:30:7a:d6:9b:c5:40:ee:
e6:7a:58:38:64:f0:ff:61:80:e8:19:35:09:ce:76:
bf:4e:a5:81:13:56:f2:02:a1:6a:33:78:65:33:d9:
55:49:94:1f:ee:4c:79:15:76:5b:fb:33:8a:c7:af:
f5:1c:c6:53:8c:cc:36:8c:af:2e:a9:35:a1:1c:de:
71:87:9a:b7:9f:f5:6a:6d:64:c9:6e:10:02:db:f3:
92:5e:1e:62:2c:90:5e:1c:d2:ba:69:c3:97:ec:47:
97:f6:ae:4f:e4:4c:52:63:a4:db:67:a7:78:09:7e:
d8:36:68:88:14:05:38:4d:1a:8c:2f:96:e1:74:4b:
e7:b8:dc:ad:b0:5d:31:bd:e6:36:9b:4a:9f:3c:39:
4a:5e:61:7c:c3:99:28:d1:ad:5b:71:54:f1:14:57:
e6:29:42:f9:e4:37:83:a2:ba:b2:6f:57:c7:f1:c7:
73:b2:8e:27:14:af:5f:fc:35:fb:c8:eb:9f:e2:7c:
be:da:bc:6a:10:66:d4:3f:21:10:7f:d0:d5:36:cf:
77:14:66:ad:0c:b5:b8:62:d4:b0:2e:bc:28:8c:08:
2d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D5:E8:80:BC:C7:AB:D2:63:97:ED:9D:08:8D:39:B2:38:EF:E6:AE
X509v3 Authority Key Identifier:
keyid:49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9a:a2:14:39:c4:7a:8b:67:f5:bc:6a:ad:12:7d:52:47:e8:
76:9f:f8:d0:fe:b2:0c:43:66:43:c0:c3:11:31:ae:51:c1:39:
e2:4e:24:53:e8:22:c5:3c:c2:d0:54:56:54:9d:20:fe:3f:32:
5e:be:ea:93:b1:2d:f1:ef:d9:0b:23:5d:ee:f1:30:d2:fa:5c:
c3:b3:7d:93:13:11:3b:bf:68:a3:fc:6d:29:26:89:fc:16:5e:
21:1f:83:5f:e4:d9:99:2a:75:de:61:05:2b:a1:12:c2:08:c9:
9d:99:37:3d:00:87:2b:00:5a:86:00:91:70:72:82:e5:56:7c:
6b:b3:f6:d3:49:71:06:12:e4:81:2f:00:ad:60:dd:7b:a3:77:
33:5f:80:9e:5f:1e:94:6e:46:92:26:f8:a5:01:11:23:35:02:
b6:51:17:4b:7a:83:b8:fd:8d:6e:8a:c2:23:8e:c3:d9:69:86:
08:f8:03:d7:ea:af:2e:e1:28:1b:7f:c9:85:24:f3:2b:f4:ea:
a3:6e:60:03:7b:ed:12:fa:ad:ec:36:cb:be:f2:da:a8:a4:fe:
89:3e:bd:87:d3:6b:15:6a:f8:5b:e3:08:e1:eb:95:1e:62:7d:
51:3d:21:56:06:a5:cf:f8:1f:27:64:20:8a:29:60:6d:00:4a:
60:6c:c1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:42:11 2025 by rpki-client