Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json)
Hash identifier: 1cIFxPV6JIGoXLpGown1x+X4EGuIbDOHf+9ypT0RCAo=
Subject key identifier: B0:E8:A2:5F:35:FF:7C:EA:13:01:F2:99:17:CA:9C:B5:D7:B2:36:D4
Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c
Certificate serial: 01995A1FD382E0DE8AF888269834CB6749B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
Manifest number: 105A
Signing time: Thu 18 Sep 2025 00:00:59 +0000
Manifest this update: Thu 18 Sep 2025 00:00:59 +0000
Manifest next update: Fri 19 Sep 2025 00:00:59 +0000
Files and hashes: 1: JUMv7Yi2cpE5n4jH_daU8-Wkj_s.roa (hash: 8Ur2YBrwEIHwiqas+AFAXGNfkZXPANsLJAnLoARlVGk=)
2: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: wLye7MboGgn/qCSM9J2GiRbAqkcUMUV6SKmJcn9ek1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 21:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5a:1f:d3:82:e0:de:8a:f8:88:26:98:34:cb:67:49:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c
Validity
Not Before: Sep 18 00:00:59 2025 GMT
Not After : Sep 19 00:00:59 2025 GMT
Subject: CN=b0e8a25f35ff7cea1301f29917ca9cb5d7b236d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:85:67:f5:50:19:92:43:df:60:fa:00:3b:
bf:db:a3:66:26:11:ff:7d:17:a6:8f:f1:2c:7b:c1:
9b:ca:9c:de:3c:f5:5e:eb:1e:49:bd:c8:11:9e:cb:
c9:5f:96:14:12:6b:49:00:cd:cc:33:b8:43:97:49:
b6:af:e5:2f:ed:80:c6:00:57:01:f1:6b:54:50:20:
b1:c4:a7:42:f9:cb:73:16:d2:1b:ab:7b:f0:14:9f:
e7:2a:79:9e:95:05:75:f5:69:62:85:28:65:cd:a4:
6b:c0:05:da:e7:f6:a8:c4:9a:9f:56:2e:dd:9d:41:
b6:90:54:ac:21:78:8f:2f:f1:b7:b8:4f:14:4c:0d:
0c:2d:d5:b8:61:59:75:25:fa:40:29:09:5b:8a:57:
b1:b6:06:20:62:56:c2:03:77:ee:de:d4:d2:9a:8d:
2b:e7:fa:1b:be:b2:4b:a0:6f:da:b9:88:c5:8b:ef:
2f:d1:6d:20:0c:e4:0f:55:52:3a:28:7c:c5:da:29:
30:d7:2a:b5:f0:65:3d:b8:ab:f7:47:1b:b1:c2:63:
10:3b:dc:a3:f3:3b:18:2e:73:a4:be:7b:80:cb:50:
9a:3e:4c:26:89:a6:63:79:30:43:16:9a:c1:4d:23:
1b:e3:58:90:fd:13:4f:ac:ef:2d:38:2d:d2:16:91:
27:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E8:A2:5F:35:FF:7C:EA:13:01:F2:99:17:CA:9C:B5:D7:B2:36:D4
X509v3 Authority Key Identifier:
keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f6:bc:8c:2d:36:40:03:4a:4b:e2:d8:bc:97:ba:b2:32:d8:
60:6c:09:6b:fc:79:5e:5e:33:87:15:5e:34:74:e8:95:ef:7f:
f1:d7:0e:27:77:0d:7e:5b:23:38:68:52:98:87:2b:6c:b0:bf:
99:a4:3d:c9:6e:d2:e3:42:c0:e6:bc:b3:7a:e5:97:cf:04:61:
0f:d5:6d:e2:b5:34:7c:15:29:48:31:43:97:d6:4e:98:7f:09:
3e:4c:28:8f:74:a6:28:92:ae:d5:42:8c:a4:e3:4c:82:5e:78:
db:78:6a:eb:55:55:3e:7f:71:73:44:84:74:4f:07:99:2c:cd:
e1:6f:81:a6:81:34:98:44:71:be:5e:dc:27:6c:f5:9a:56:67:
fc:4a:ff:8c:4c:12:4f:12:2d:16:86:8c:87:d2:76:47:90:53:
94:29:2f:e6:72:0e:be:0c:e8:10:bb:7a:77:3d:5d:ae:ca:31:
3b:f8:04:62:af:e3:bb:22:52:2d:bc:3b:8a:6f:c8:92:98:9e:
d0:a8:ec:0f:4a:3d:18:c6:c3:44:14:2d:93:dd:bb:cf:4f:37:
10:e8:73:4e:6e:f2:2f:05:78:95:1c:1a:51:97:24:4f:da:17:
99:a6:06:89:5d:a5:50:67:a4:0f:bc:cd:99:2a:66:2d:6d:db:
36:ec:bc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 04:08:06 2025 by rpki-client