Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
File: SGeaItDbyYDV1ZszNnn5ObmuPyU.mft (raw, json)
Hash identifier: gIofeJZLn7+qkCCT4kZfnRMdBTdqImx80W4G9Ere3+A=
Subject key identifier: 90:93:42:CE:19:B0:7F:73:BE:AF:A5:F4:91:AF:7D:78:57:25:4E:23
Authority key identifier: 48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
Certificate issuer: /CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Certificate serial: 019A4E8629C5273B2068D98D9BFF7A77EFF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 11:00:06 +0000
Manifest this update: Tue 04 Nov 2025 11:00:06 +0000
Manifest next update: Wed 05 Nov 2025 11:00:06 +0000
Files and hashes: 1: SGeaItDbyYDV1ZszNnn5ObmuPyU.crl (hash: 8R1+9zo/hjlxCa1Pew0SVTAk3GjWymUw3TOqwnPSl9Q=)
2: lSVuH4_qT7VO0FFfSg8D4f45UxY.roa (hash: 9ZtD0p1FuMWX60A/XbYYtr6hffE/KiTmy0aXZ7EMf+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:29:c5:27:3b:20:68:d9:8d:9b:ff:7a:77:ef:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Validity
Not Before: Nov 4 11:00:06 2025 GMT
Not After : Nov 5 11:00:06 2025 GMT
Subject: CN=909342ce19b07f73beafa5f491af7d7857254e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:bd:63:aa:1b:9a:78:66:36:04:9d:80:ec:
39:55:ee:57:fa:da:57:eb:84:b2:ac:71:41:0d:7a:
b0:c9:29:be:6b:ba:4c:24:b3:3e:5c:67:74:33:dc:
31:a4:63:91:9a:80:da:58:12:1a:c8:94:83:c0:3f:
36:9e:34:b2:60:91:78:6a:1c:9a:53:46:fc:4b:46:
93:e3:9a:67:96:f9:d5:50:d5:f8:e0:91:38:db:8b:
44:d5:44:c3:59:43:fe:c2:d7:52:ce:19:00:5e:60:
ff:bb:c5:32:27:66:38:19:a0:aa:da:9c:16:46:ca:
59:59:cb:5e:cd:0b:ab:99:84:2b:8f:39:6d:38:1f:
0e:da:27:e1:c9:94:0a:5d:56:4c:48:64:5b:3b:42:
6e:7c:a0:02:8e:56:a5:40:22:61:96:31:b6:90:91:
9b:18:f0:3d:ea:99:c2:af:5f:1c:fe:ac:3a:c2:36:
00:33:db:41:e9:51:4d:39:50:b4:ec:21:55:c3:47:
25:c0:f2:f7:78:27:e8:7e:fa:df:fe:1c:21:a1:b8:
c9:ba:74:73:79:bd:88:75:05:7b:15:4b:38:be:b5:
fa:0c:ae:c0:27:db:96:37:32:39:36:78:96:2f:44:
78:1f:fd:71:81:ed:92:ea:c4:8a:5d:ea:85:b4:9a:
0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:93:42:CE:19:B0:7F:73:BE:AF:A5:F4:91:AF:7D:78:57:25:4E:23
X509v3 Authority Key Identifier:
keyid:48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:03:1b:5d:22:5b:e5:66:94:78:d5:93:46:aa:99:ed:c1:0f:
fb:e4:82:98:3d:62:9d:21:40:19:5b:1d:92:e4:fb:e8:c6:2b:
41:4a:7e:0c:72:a9:c2:c3:c5:e6:a7:6d:9f:93:5a:f2:a0:51:
a9:ff:65:40:e0:bb:81:bc:58:b0:ae:af:62:74:d1:6d:54:5e:
a8:ad:4e:0e:74:50:91:65:3a:f8:ad:c6:1c:3a:fd:ff:b7:19:
46:20:45:e1:dc:8b:55:c4:ca:8f:fe:e5:7f:5c:2b:d6:43:e9:
43:7b:eb:e6:54:7d:2f:f1:d8:86:1c:a9:30:d6:88:3c:cf:d8:
ef:11:cf:ca:1a:8f:b0:49:0a:5f:df:74:a5:f6:11:ff:79:58:
a3:59:dd:6f:f4:a7:86:fd:d7:d3:71:4c:25:5d:8c:5a:42:7f:
f3:6e:b4:18:f0:b7:ba:ac:24:ab:86:55:cc:82:6a:c4:83:6e:
28:3e:9d:8a:66:b2:f5:e0:4b:56:64:20:56:88:d2:85:18:aa:
54:d3:33:99:f0:a5:cb:0c:a4:9e:a4:c4:61:8f:7b:fd:96:20:
7c:5b:f3:fb:40:ca:79:24:ac:a4:a7:60:01:46:f6:fa:fa:69:
68:04:d8:d0:07:b1:a7:61:32:ee:0d:a4:fd:79:e4:ca:83:24:
ce:b5:4c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:05 2025 by rpki-client