Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
File: SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft (raw, json)
Hash identifier: 6Hpb85OgU5tFR2LZ/+Go9kKd8/g29+siqd4ZZlIifJM=
Subject key identifier: 50:A8:02:91:F1:5A:F3:2F:CD:CE:06:53:C2:87:24:29:0C:BA:0C:45
Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
Certificate issuer: /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Certificate serial: 019A1CBDFBFC8774F606AEFC07DF6C2A4603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
Manifest number: 1684
Signing time: Sat 25 Oct 2025 19:00:04 +0000
Manifest this update: Sat 25 Oct 2025 19:00:04 +0000
Manifest next update: Sun 26 Oct 2025 19:00:04 +0000
Files and hashes: 1: 8J4KQUM3SG2tOx7Qy412tzcCyVE.roa (hash: WDRfkd7NWCeGm5AnO0id+VmgIMVtNw9JsJNLGC4miyg=)
2: F3xqvw__Ry6FbR1QISJmpPzSw80.roa (hash: lZUN0lo02iToEWBcU9heTh5ikClvs/fsdLuL0ZtWzgs=)
3: SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl (hash: hkJeH+1t7Mps+Uy02m+ghPCVYuCtq1ps1JRznnwfugs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bd:fb:fc:87:74:f6:06:ae:fc:07:df:6c:2a:46:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Validity
Not Before: Oct 25 19:00:04 2025 GMT
Not After : Oct 26 19:00:04 2025 GMT
Subject: CN=50a80291f15af32fcdce0653c28724290cba0c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:a8:85:06:f9:72:0d:e1:97:77:b0:2f:41:
81:86:a6:74:61:05:87:5e:2a:9c:2a:80:3b:31:d7:
1f:8e:8f:90:3f:f6:d0:f1:8d:9f:a4:69:45:50:22:
7b:16:fc:7d:d8:7c:40:d4:96:a6:ba:ee:40:88:82:
85:18:9b:aa:38:70:f9:f6:f7:a7:e7:00:38:a7:f8:
23:b8:a4:a1:59:54:a5:98:b3:6a:7b:6c:b8:6c:48:
a8:43:e2:65:00:0c:33:34:f8:ef:3d:04:cb:b0:91:
55:ed:9a:08:29:dd:04:3b:e1:d1:2e:e2:ab:dc:e3:
81:20:c1:89:9f:08:98:d4:b9:d3:4f:64:63:b3:e0:
b5:94:48:d9:94:1a:13:8a:ee:f2:aa:06:4c:7c:e4:
ce:21:f3:78:c5:62:a7:55:f6:b5:9e:8e:9e:ed:9e:
7c:98:e5:e9:b0:f0:a4:f2:c4:1a:18:3d:c4:2a:f9:
67:3b:a2:53:a7:8a:0e:e3:3b:ee:93:09:b5:73:34:
47:53:20:ea:b3:7b:b8:f9:69:17:ba:d3:17:5a:96:
a9:68:72:3d:d7:ef:c5:30:d0:88:71:c4:49:3b:b0:
26:f2:93:43:70:88:d3:fd:2b:2f:ee:00:6c:50:36:
b0:01:88:d2:31:37:7e:da:49:d5:75:15:f4:7b:f8:
ba:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A8:02:91:F1:5A:F3:2F:CD:CE:06:53:C2:87:24:29:0C:BA:0C:45
X509v3 Authority Key Identifier:
keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fb:d1:ad:44:75:32:3a:2a:ed:5c:b7:c9:17:df:0a:ee:6e:
12:96:30:4b:81:17:ef:de:13:37:3a:e1:e2:4f:ed:6a:ff:03:
ba:09:17:ba:60:16:95:cd:4e:42:ab:c7:95:8a:4f:12:e6:37:
ba:73:80:75:46:fe:af:a5:7b:fc:9c:7e:54:2d:b7:ff:86:c6:
4c:7e:22:c5:97:db:c9:d3:31:17:19:36:e8:b4:d9:4e:a9:09:
84:29:67:49:6f:ff:5c:0b:20:5b:8e:11:3e:4e:ea:4b:80:1b:
61:f5:61:7f:cc:09:a8:bd:9e:7d:d2:ff:fe:b7:50:cc:4a:c8:
37:36:b3:2d:1b:49:c9:d4:40:0a:30:ab:cc:66:74:51:15:4f:
82:8c:34:cf:ba:90:40:54:59:2a:bf:ed:d0:e8:20:62:14:74:
b8:31:1b:ce:f1:71:11:e9:2b:c8:c1:5d:ab:a7:9c:0e:7d:45:
55:5c:75:2d:c8:60:18:34:00:5f:8f:dc:e2:ae:13:97:e5:f9:
3a:fe:ba:03:04:9e:fb:5f:c9:03:13:68:97:21:75:e3:97:95:
f7:06:de:6f:a6:d0:dc:13:64:90:9a:2d:be:84:29:80:16:42:
7c:57:c8:99:10:83:04:4b:44:2f:36:1a:63:ec:f7:c0:a9:3d:
8a:db:3d:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZocvfv8h3T2Bq78B99sKkYDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjM5ZDZjOGIyM2ZjZGMyMGU1MzE3NGU5MmZiM2Y1NmNh
YThiNjEwHhcNMjUxMDI1MTkwMDA0WhcNMjUxMDI2MTkwMDA0WjAzMTEwLwYDVQQD
Eyg1MGE4MDI5MWYxNWFmMzJmY2RjZTA2NTNjMjg3MjQyOTBjYmEwYzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAeohQb5cg3hl3ewL0GBhqZ0YQWH
XiqcKoA7Mdcfjo+QP/bQ8Y2fpGlFUCJ7Fvx92HxA1Jamuu5AiIKFGJuqOHD59ven
5wA4p/gjuKShWVSlmLNqe2y4bEioQ+JlAAwzNPjvPQTLsJFV7ZoIKd0EO+HRLuKr
3OOBIMGJnwiY1LnTT2Rjs+C1lEjZlBoTiu7yqgZMfOTOIfN4xWKnVfa1no6e7Z58
mOXpsPCk8sQaGD3EKvlnO6JTp4oO4zvukwm1czRHUyDqs3u4+WkXutMXWpapaHI9
1+/FMNCIccRJO7Am8pNDcIjT/Ssv7gBsUDawAYjSMTd+2knVdRX0e/i65QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCoApHxWvMvzc4GU8KHJCkMugxFMB8GA1UdIwQY
MBaAFEnznWyLI/zcIOUxdOkvs/VsqothMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xNjQ2MGYtZTQ5OC00ZjdiLTliOTAt
N2E1MDQzYzkxOGY5LzEvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8xNjQ2MGYtZTQ5OC00ZjdiLTliOTAtN2E1MDQzYzkxOGY5
LzEvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPvRrUR1
Mjoq7Vy3yRffCu5uEpYwS4EX794TNzrh4k/tav8DugkXumAWlc1OQqvHlYpPEuY3
unOAdUb+r6V7/Jx+VC23/4bGTH4ixZfbydMxFxk26LTZTqkJhClnSW//XAsgW44R
Pk7qS4AbYfVhf8wJqL2efdL//rdQzErINzazLRtJydRACjCrzGZ0URVPgow0z7qQ
QFRZKr/t0OggYhR0uDEbzvFxEekryMFdq6ecDn1FVVx1LchgGDQAX4/c4q4Tl+X5
Ov66AwSe+1/JAxNolyF145eV9wbeb6bQ3BNkkJotvoQpgBZCfFfImRCDBEtELzYa
Y+z3wKk9its99g==
-----END CERTIFICATE-----
Generated at Sat Oct 25 23:42:19 2025 by rpki-client