Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
File: SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft (raw, json)
Hash identifier: TAoe2lPoW/7t2X6rdt4BRMtQFqEoOvG/yrNK540vQOw=
Subject key identifier: 24:43:72:72:67:4E:AC:1E:B6:5A:E0:74:5A:3F:29:29:E5:B8:1E:65
Authority key identifier: 49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F
Certificate issuer: /CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
Certificate serial: 019A4F61DB909E573630DC293825BBCD8BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
Manifest number: 0CE9
Signing time: Tue 04 Nov 2025 15:00:04 +0000
Manifest this update: Tue 04 Nov 2025 15:00:04 +0000
Manifest next update: Wed 05 Nov 2025 15:00:04 +0000
Files and hashes: 1: SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl (hash: ZHJHqmwilC3heUUl9WEMRMSYjll3nWRIRPcjuFKG/cE=)
2: t2TSolMpe1MqepO7ZiAhihdiw7E.roa (hash: 6XLtwGEoBLRfiwM7FwJJWhjDjtkkFPk9hmuRlaKNmqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:db:90:9e:57:36:30:dc:29:38:25:bb:cd:8b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
Validity
Not Before: Nov 4 15:00:04 2025 GMT
Not After : Nov 5 15:00:04 2025 GMT
Subject: CN=24437272674eac1eb65ae0745a3f2929e5b81e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:a3:79:23:c5:c9:fa:b3:e0:f3:65:3a:34:
b8:93:6c:3d:98:2f:6d:99:6a:f5:b0:8b:9e:f8:b3:
a8:a7:3a:5b:e7:4a:4a:f6:ae:b0:e1:5a:6d:dd:f1:
3f:e6:35:f1:d7:fd:87:00:62:36:47:9b:22:3b:72:
14:12:cb:d1:52:14:16:b5:e3:7b:69:e6:56:90:c8:
b7:33:cd:b0:ef:5b:ef:bb:7d:9a:d3:f5:8e:b1:da:
ca:a4:eb:18:2f:6a:c4:37:f4:ce:97:38:5c:52:a6:
44:5c:9f:63:3d:c5:fd:1f:f7:5a:60:1d:b9:99:ac:
a7:51:3e:37:86:e8:71:ee:3b:49:07:68:12:ff:d4:
a0:e7:58:a8:c5:4b:25:c5:24:49:dd:97:59:62:3a:
a4:41:ab:1d:81:b9:2e:62:a6:6c:c5:ae:9e:74:00:
26:a2:60:8c:ed:d0:40:4b:be:60:60:c5:fc:c4:9d:
1e:ff:b2:75:40:1d:01:3b:a6:17:34:d5:ee:bd:67:
cf:df:c5:6e:69:7b:8c:98:40:79:1f:01:ce:88:bd:
77:9f:41:00:8f:eb:37:8e:8e:01:2d:fc:3c:67:9e:
e6:7e:97:83:91:6a:ec:c4:7f:b4:16:f9:9f:37:21:
54:a0:b3:2f:93:4c:eb:82:95:28:d1:f6:1d:68:4e:
d7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:43:72:72:67:4E:AC:1E:B6:5A:E0:74:5A:3F:29:29:E5:B8:1E:65
X509v3 Authority Key Identifier:
keyid:49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:43:50:95:5f:3d:50:56:52:f8:a3:a3:ee:02:13:2d:a7:d1:
c0:94:2c:96:80:76:14:f6:43:4b:db:bb:11:b0:ef:09:3f:71:
2c:91:74:07:5b:4e:db:7e:8d:50:a8:95:7c:dd:e0:26:f4:d8:
14:e8:95:60:02:4c:d6:60:d8:12:bb:3d:71:0c:91:a3:1e:38:
3b:1a:bf:02:ab:5b:8f:ba:bd:a3:db:d2:aa:25:c0:39:22:94:
a5:02:ec:b3:10:c9:41:d6:71:91:ca:11:0b:7c:07:1d:1a:05:
ee:52:5c:4e:3f:31:39:63:69:4d:7f:36:bc:83:d3:19:62:31:
5e:54:d5:57:3e:77:e8:68:8d:b5:ed:07:9a:5c:4a:a4:22:8a:
44:a2:5d:f1:0c:b8:d1:0d:80:76:36:ed:03:4b:73:28:db:c0:
0f:7c:41:4a:93:bd:b2:d5:33:c7:be:d8:12:3e:cb:5f:32:3d:
74:dc:dd:51:de:0e:47:b8:cf:3b:91:d9:03:e2:24:59:7d:1b:
e4:36:c8:d0:5d:8c:e6:53:23:ae:c6:62:9a:5f:38:23:aa:3b:
ba:ef:33:18:fa:f2:99:0b:34:e7:09:af:83:38:3e:cb:1c:5d:
cc:33:0c:a7:28:4e:e5:f3:9b:e0:fd:59:b6:46:22:cf:8f:90:
0a:ab:a7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:19 2025 by rpki-client