Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
File: SGgL3la9O_VhV4oP4QjLwcanWds.mft (raw, json)
Hash identifier: wHUQPQXXPlnKqV3tSUTV2BuMRNr6IpTNL9thIAAkm2k=
Subject key identifier: EF:E5:0F:38:EC:2C:2C:2B:82:27:8E:4D:E4:5A:3E:14:A9:F8:A6:5F
Authority key identifier: 48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
Certificate issuer: /CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Certificate serial: 019A72CAA5EA84A63E34ED659E78F0B443C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
Manifest number: 0B9F
Signing time: Tue 11 Nov 2025 12:01:14 +0000
Manifest this update: Tue 11 Nov 2025 12:01:14 +0000
Manifest next update: Wed 12 Nov 2025 12:01:14 +0000
Files and hashes: 1: SGgL3la9O_VhV4oP4QjLwcanWds.crl (hash: 2KCaPgoVHATCavCSLKRh8cgxsxYoWyQnK4prRjLQCKQ=)
2: XlwydODeF8gcZq2lEX8o8gcX3v8.roa (hash: TCKQsk1WAUMm3psVkuDPcRNKeGExKBO69fhhu70s8wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:a5:ea:84:a6:3e:34:ed:65:9e:78:f0:b4:43:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Validity
Not Before: Nov 11 12:01:14 2025 GMT
Not After : Nov 12 12:01:14 2025 GMT
Subject: CN=efe50f38ec2c2c2b82278e4de45a3e14a9f8a65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a1:6d:b4:83:83:56:8a:15:e6:c8:32:e3:a9:
26:06:cc:87:52:2b:3d:5e:6e:3e:7d:87:28:13:3d:
c7:79:d0:4f:66:1c:56:6e:55:0f:a1:de:b6:ae:5f:
42:1f:a5:3c:2c:19:e0:06:51:b9:d5:29:f6:bb:e8:
97:9f:ed:98:b3:d7:78:c2:f6:a9:b9:ff:67:ea:cd:
e2:17:f6:dd:c4:07:b9:d8:84:da:33:98:e1:d7:62:
e4:af:8d:6a:b4:54:a8:0a:14:ca:16:54:b6:a9:97:
2c:40:10:08:54:d6:e6:bc:39:7c:24:fe:70:40:e7:
57:99:20:a2:61:48:ab:1c:4b:a8:9a:22:73:66:33:
98:04:42:18:ed:47:a0:9c:30:e9:a7:d8:d8:a5:0e:
03:41:82:4b:eb:27:d0:03:2c:39:41:07:bf:60:50:
b3:61:b1:0b:dc:87:c9:be:90:60:c8:23:9d:a0:6e:
2d:1e:ee:05:b7:86:1b:eb:33:a7:ba:e7:8f:01:c8:
02:08:c7:37:b6:2c:c9:0b:a1:bb:ae:53:9e:93:8f:
04:a2:5e:c2:c1:ee:70:5c:e2:02:59:86:14:f0:ce:
dd:ea:c9:f3:c8:6a:e8:a8:5e:ee:5c:b2:3f:f2:62:
c6:a7:33:d7:bd:a7:f7:7b:40:10:9f:0f:f3:2a:43:
9a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E5:0F:38:EC:2C:2C:2B:82:27:8E:4D:E4:5A:3E:14:A9:F8:A6:5F
X509v3 Authority Key Identifier:
keyid:48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d6:12:cc:be:4a:6e:76:a8:b9:6f:63:ed:47:69:3f:ec:39:
90:24:03:6e:7c:48:3b:c8:58:47:bb:94:59:d1:57:1a:bf:77:
37:14:29:eb:36:cf:f3:30:0e:4d:b5:00:bf:54:d0:24:f2:96:
e3:a0:41:b9:7a:cf:c1:10:f2:be:aa:64:bd:28:65:31:d8:c6:
82:57:3a:5b:7e:a3:50:fe:ed:69:3b:8c:49:de:f6:ab:90:2b:
13:76:25:cb:d3:3f:42:b7:f0:26:e3:d9:fc:0a:b0:fa:7e:f5:
44:09:95:5e:22:c0:9b:bb:5e:01:ae:8f:e9:83:4a:e4:10:98:
04:2a:ed:f9:b8:69:47:f1:7e:c1:b4:02:ad:be:a5:a4:bd:87:
2b:2e:45:37:41:8a:3f:ae:b0:12:a0:cb:34:69:c6:04:92:ba:
b0:b2:c6:2c:4e:1f:14:e9:99:b6:b9:3a:16:e6:b8:fe:49:67:
f5:c5:03:91:a4:91:9a:59:82:f4:e2:24:1a:7a:61:26:bb:93:
7b:96:40:21:bb:06:b0:2b:7a:a5:0c:c7:cc:2c:e3:2e:0a:2c:
9e:d1:b4:90:c3:3c:f6:fa:1b:b4:e9:5e:ff:f3:26:fa:4f:5b:
98:8d:81:1f:15:05:47:76:a9:2a:f6:ed:aa:e8:1b:4b:42:a0:
86:7b:16:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyqXqhKY+NO1lnnjwtEPFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NjgwYmRlNTZiZDNiZjU2MTU3OGEwZmUxMDhjYmMxYzZh
NzU5ZGIwHhcNMjUxMTExMTIwMTE0WhcNMjUxMTEyMTIwMTE0WjAzMTEwLwYDVQQD
EyhlZmU1MGYzOGVjMmMyYzJiODIyNzhlNGRlNDVhM2UxNGE5ZjhhNjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KFttIODVooV5sgy46kmBsyHUis9
Xm4+fYcoEz3HedBPZhxWblUPod62rl9CH6U8LBngBlG51Sn2u+iXn+2Ys9d4wvap
uf9n6s3iF/bdxAe52ITaM5jh12Lkr41qtFSoChTKFlS2qZcsQBAIVNbmvDl8JP5w
QOdXmSCiYUirHEuomiJzZjOYBEIY7UegnDDpp9jYpQ4DQYJL6yfQAyw5QQe/YFCz
YbEL3IfJvpBgyCOdoG4tHu4Ft4Yb6zOnuuePAcgCCMc3tizJC6G7rlOek48Eol7C
we5wXOICWYYU8M7d6snzyGroqF7uXLI/8mLGpzPXvaf3e0AQnw/zKkOaWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/lDzjsLCwrgieOTeRaPhSp+KZfMB8GA1UdIwQY
MBaAFEhoC95WvTv1YVeKD+EIy8HGp1nbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0dnTDNsYTlPX1ZoVjRvUDRRakx3Y2FuV2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yYTJiODgtZmMxMS00ODI0LTk1ZGQt
OWE2YjZlYWFlZDM4LzEvU0dnTDNsYTlPX1ZoVjRvUDRRakx3Y2FuV2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8yYTJiODgtZmMxMS00ODI0LTk1ZGQtOWE2YjZlYWFlZDM4
LzEvU0dnTDNsYTlPX1ZoVjRvUDRRakx3Y2FuV2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9YSzL5K
bnaouW9j7UdpP+w5kCQDbnxIO8hYR7uUWdFXGr93NxQp6zbP8zAOTbUAv1TQJPKW
46BBuXrPwRDyvqpkvShlMdjGglc6W36jUP7taTuMSd72q5ArE3Yly9M/QrfwJuPZ
/Aqw+n71RAmVXiLAm7teAa6P6YNK5BCYBCrt+bhpR/F+wbQCrb6lpL2HKy5FN0GK
P66wEqDLNGnGBJK6sLLGLE4fFOmZtrk6Fua4/kln9cUDkaSRmlmC9OIkGnphJruT
e5ZAIbsGsCt6pQzHzCzjLgosntG0kMM89vobtOle//Mm+k9bmI2BHxUFR3apKvbt
qugbS0KghnsWEw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:41 2025 by rpki-client