Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
File: SjQVWNugttuUxVzgbjBv9lGdbvE.mft (raw, json)
Hash identifier: rd87MCS0xwUSvJeIFSSNhaCjG8jqdGpMRSkFF7cz238=
Subject key identifier: F6:8D:CB:1D:08:F4:1E:0F:F6:66:05:A3:02:7A:D1:57:4A:3E:0C:99
Authority key identifier: 4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1
Certificate issuer: /CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
Certificate serial: 019A5752FCCA67DF90CAD75CF65AF2A616E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
Manifest number: 0949
Signing time: Thu 06 Nov 2025 04:00:47 +0000
Manifest this update: Thu 06 Nov 2025 04:00:47 +0000
Manifest next update: Fri 07 Nov 2025 04:00:47 +0000
Files and hashes: 1: SjQVWNugttuUxVzgbjBv9lGdbvE.crl (hash: eyEWpjNUfgdGFg6NAwyyIgzNGvZJn5ndp0K+2SH5D3o=)
2: yPI4iRYmm1fwcu2gPm48e2JKRd8.roa (hash: BDXqRGsDwDyhjpTf6VKbLY0k53gndOvrvWCUreaVIQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:52:fc:ca:67:df:90:ca:d7:5c:f6:5a:f2:a6:16:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
Validity
Not Before: Nov 6 04:00:47 2025 GMT
Not After : Nov 7 04:00:47 2025 GMT
Subject: CN=f68dcb1d08f41e0ff66605a3027ad1574a3e0c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:f6:e1:89:3b:93:41:11:87:f9:b0:27:3c:
f7:85:98:2a:2a:1a:53:73:c0:d4:be:fc:2b:dd:93:
25:ff:56:5b:b8:a9:dd:9a:ec:87:00:d1:33:fa:eb:
2f:7f:4c:70:25:c6:45:c3:69:68:18:fa:9d:38:98:
27:2e:94:01:fb:92:b6:9d:15:45:1d:7c:33:4b:37:
ea:03:09:07:7d:7f:fa:8f:64:81:b4:82:11:0a:10:
4d:1e:63:79:f3:6e:2f:45:89:07:63:fb:3e:05:71:
0b:3c:d4:66:eb:96:92:1b:ca:42:3c:93:5c:e8:d2:
d1:23:f5:47:33:7e:97:b3:9a:45:df:62:be:f0:7b:
26:61:0c:06:24:3c:92:b8:77:de:6e:60:c6:00:cc:
c8:32:9a:9c:c3:14:75:71:f1:d8:5e:7e:e3:4b:65:
ca:e5:9f:e4:29:6d:f0:7f:f2:18:51:58:de:66:4b:
b3:8c:ba:4f:12:69:c7:7a:37:2f:97:5f:e8:95:8e:
99:1c:e4:5a:f0:af:ff:5e:c3:0d:2f:07:05:5a:cb:
fa:34:02:5b:a4:d1:d6:64:2d:79:04:26:d0:d2:ec:
63:36:15:ce:c9:d4:f6:e0:a6:f3:60:85:8f:1a:ff:
8f:79:d2:88:bc:fb:c2:f5:07:11:4e:54:56:06:d1:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8D:CB:1D:08:F4:1E:0F:F6:66:05:A3:02:7A:D1:57:4A:3E:0C:99
X509v3 Authority Key Identifier:
keyid:4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ab:d6:b7:0b:40:ca:65:05:fb:41:76:32:96:fd:80:40:15:
de:71:bc:9f:ed:41:e9:03:8e:5f:dd:30:f7:89:c8:40:49:8a:
b9:bd:fa:d5:bb:42:64:5d:89:88:20:96:33:16:18:b5:7d:a1:
1f:22:40:5f:ae:be:5b:ce:0e:32:53:f3:1c:bc:91:45:26:14:
fe:3c:d2:26:6c:ef:61:24:c8:08:4f:1e:84:3e:2f:1b:55:f7:
23:49:2d:0e:6f:78:46:fa:95:29:a9:7c:38:6e:53:33:76:59:
fe:22:6f:ac:13:30:1b:da:8a:9d:bf:c0:50:99:c7:b1:82:c0:
3b:c4:64:70:78:c0:57:e4:af:39:ee:79:d3:56:0b:d1:29:d6:
f7:a0:75:58:5a:02:db:4a:cd:1c:a5:b3:43:8a:8a:10:1a:0a:
86:53:35:41:33:d3:af:32:16:cf:67:6e:5a:d4:5e:2b:a9:b3:
ce:ec:77:f3:15:54:cd:72:19:d3:64:c3:39:b8:82:a6:3f:48:
fc:85:be:ff:d3:dd:ce:21:7f:d2:70:5f:05:b5:80:7b:ae:61:
57:f4:20:b2:88:73:17:47:bf:35:8e:03:29:b0:8a:64:c1:79:
29:18:10:1a:6f:02:9d:e5:5a:71:e5:5e:b6:c1:6c:d1:e3:be:
e8:0b:67:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:48:25 2025 by rpki-client