Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft
File: Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft (raw, json)
Hash identifier: qefuE/Mb+yZnB0e72OqeLrLNbtgKGctf5sY8MsSCS8Q=
Subject key identifier: 90:81:36:A0:44:CE:84:4B:E6:A4:A9:1F:96:0E:88:77:B4:6D:0D:CD
Authority key identifier: 4A:FC:7F:0B:EA:C2:26:07:02:D0:5B:69:DD:7B:7A:3F:B2:DD:D6:9E
Certificate issuer: /CN=4afc7f0beac2260702d05b69dd7b7a3fb2ddd69e
Certificate serial: 019A4C9829301AEB0A4A8866FF34EA16CA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft
Manifest number: 0DCE
Signing time: Tue 04 Nov 2025 02:00:31 +0000
Manifest this update: Tue 04 Nov 2025 02:00:31 +0000
Manifest next update: Wed 05 Nov 2025 02:00:31 +0000
Files and hashes: 1: NZZp83GD9DMoLhn3D9M5XusFTxI.roa (hash: OiMifk7R6FismqZrdc/pOMDrQLzXG34BDoHmuCJQZZM=)
2: Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.crl (hash: 6CzuVz04rboITNBG2U1yFDgR83h42A+44ujhMOV9l5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:29:30:1a:eb:0a:4a:88:66:ff:34:ea:16:ca:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afc7f0beac2260702d05b69dd7b7a3fb2ddd69e
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Nov 5 02:00:31 2025 GMT
Subject: CN=908136a044ce844be6a4a91f960e8877b46d0dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ba:c8:e8:71:69:1d:32:df:b4:3c:66:5f:b2:
ef:94:8d:da:e7:48:c1:3f:98:d2:e0:49:19:45:9f:
63:77:e5:a0:ae:3a:c8:7a:1d:ca:d6:f3:b3:5a:af:
82:e5:42:b6:8c:3c:28:9f:dd:14:ed:0b:57:6a:e0:
18:98:b4:53:e2:2c:65:35:be:10:48:10:73:0b:5c:
79:7f:f3:8f:e0:38:84:2e:bd:82:e8:38:29:39:0d:
e7:aa:e5:ca:b9:7c:91:fa:44:a9:62:7e:d8:e8:38:
21:66:78:7e:d0:3a:b8:4c:61:c8:1f:22:de:7f:a1:
5e:67:e3:db:e7:5b:b4:4b:f3:bb:73:01:75:5d:91:
fb:94:6c:0d:94:98:c4:2d:42:b4:55:b3:ae:5a:26:
a9:a0:29:20:68:b4:fd:0c:20:32:62:3a:54:17:83:
0b:9f:b3:b7:2e:cc:be:bf:81:47:7b:2f:08:c1:dc:
5a:12:d7:cb:d2:a8:df:6c:1e:56:0a:6a:fa:19:a4:
4a:99:ba:fe:7c:1c:f5:ea:25:66:69:61:12:17:98:
ca:55:71:82:f6:2c:b4:c5:d3:a8:39:40:ed:59:b6:
be:e3:11:80:ac:57:23:42:ed:e1:ab:06:71:c5:e6:
7d:07:01:72:85:f8:2a:95:ab:28:3e:ce:df:8f:a3:
d1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:81:36:A0:44:CE:84:4B:E6:A4:A9:1F:96:0E:88:77:B4:6D:0D:CD
X509v3 Authority Key Identifier:
keyid:4A:FC:7F:0B:EA:C2:26:07:02:D0:5B:69:DD:7B:7A:3F:B2:DD:D6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:39:f5:84:54:96:82:fa:e0:d6:0d:b8:02:28:4c:f3:31:f1:
ad:84:04:21:7d:d0:62:73:20:d5:c3:f3:c8:8f:b2:d8:d1:8e:
da:e7:01:dd:0b:4e:65:d5:8a:14:77:3b:55:8a:ea:e1:4e:2e:
37:6d:00:73:43:55:ff:76:22:0f:1d:4a:ea:29:7c:76:a6:51:
65:02:9d:82:e1:59:94:14:2d:d0:d0:61:a8:38:19:da:fc:23:
0d:71:51:6b:b0:7a:1d:b8:05:1c:82:c3:69:9c:31:b4:0d:05:
2f:46:d0:26:3b:c2:d1:b2:32:ae:1f:bc:12:f7:95:13:7b:80:
30:7a:51:7f:c8:71:18:92:8c:91:ff:89:69:c2:20:bf:35:df:
db:e0:7a:cd:0c:a9:fd:3b:c5:5b:9e:d1:70:09:fb:dd:b0:70:
22:b4:d8:90:2d:27:1a:c3:e9:84:f0:93:92:57:20:a2:71:cc:
f9:f7:93:04:b5:b9:e8:0c:be:4d:84:74:84:c4:96:87:b2:05:
81:a4:7d:5a:e5:16:44:99:e4:c1:57:b6:23:b6:32:81:78:a1:
5d:c8:ad:b2:aa:d2:57:c0:40:53:af:45:2b:54:17:ed:97:7b:
30:b0:f3:55:25:04:ba:cb:10:90:9f:d4:6f:58:71:27:e1:0d:
b3:c6:62:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:32 2025 by rpki-client