Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
File: SF4-4cMlgXX0_22bVZ2lTIPsC08.mft (raw, json)
Hash identifier: eiO2vfF4SUwbMq21v48jF9jAC0KUFOUS0xKImjWxXA4=
Subject key identifier: 54:1C:0A:3E:FB:4E:93:0A:97:1E:83:93:17:E7:89:76:F0:6B:CC:B7
Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
Certificate issuer: /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Certificate serial: 019A4FD02EB74C42006DC1B8E0FC1C82B000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 17:00:34 +0000
Manifest this update: Tue 04 Nov 2025 17:00:34 +0000
Manifest next update: Wed 05 Nov 2025 17:00:34 +0000
Files and hashes: 1: SF4-4cMlgXX0_22bVZ2lTIPsC08.crl (hash: nVND6T64iuMwXcWq8neQOR3MMFvrZxXU/3DPeRI1Ths=)
2: ZopMcF1edsiLC5IB_2wqcv1pm7I.roa (hash: 9APA6+f5SQgw2656vPCnPyRgFDtV/KHCNYnrSKLYasE=)
3: fB9-x9nzQMLGXiKWPiofGOiCCDo.roa (hash: /Yz5duUUoV4QyYXJiuuC625duaCe5B8wdcwUeuj9HvE=)
4: l38wLN6Gw_epossfbuxRMwnX5sY.roa (hash: EA/nu4qnZGykrdQkMaUMT/48WUqEkVXJbnvFzsWJo70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:2e:b7:4c:42:00:6d:c1:b8:e0:fc:1c:82:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Validity
Not Before: Nov 4 17:00:34 2025 GMT
Not After : Nov 5 17:00:34 2025 GMT
Subject: CN=541c0a3efb4e930a971e839317e78976f06bccb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b3:27:b9:b7:ba:34:20:7a:00:7b:cc:18:67:
11:17:ad:ab:63:62:af:d3:91:b7:76:96:e7:64:dd:
9c:1a:2d:81:5e:d5:3a:34:9a:cb:8d:fe:4c:e7:7d:
b3:db:f0:f4:84:2d:6f:a5:ec:1d:87:08:d4:9d:f3:
95:cb:f5:d3:05:2a:88:53:ff:a5:e5:61:8b:cd:0a:
c1:53:69:0c:9d:86:d9:77:6e:0a:65:93:b4:b1:9e:
35:a2:d9:34:d5:9d:6d:06:83:9a:4a:59:c9:34:7a:
cb:f3:db:46:c6:6e:cc:ae:74:1b:32:c4:33:2a:eb:
60:7b:cf:93:26:66:f5:a7:3b:62:9c:89:ab:6a:b1:
84:a4:94:e5:6a:29:02:48:e9:1a:f0:11:42:75:4e:
69:2b:54:df:93:bb:37:d2:54:9a:e1:2a:e2:7d:97:
57:ef:66:c4:cd:fd:a9:04:1a:06:2d:1e:f7:d6:35:
57:79:1c:a7:20:e4:df:11:89:88:5a:10:99:bd:11:
cc:56:d8:ab:09:78:e8:45:4d:1c:7f:8c:a5:23:74:
8e:93:40:18:79:a2:57:df:49:1b:32:30:68:56:a5:
89:8b:32:30:da:46:d4:45:28:25:b5:5d:bf:66:7f:
a1:96:7b:7c:ba:f9:24:9c:d4:30:8e:d0:1d:f1:78:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1C:0A:3E:FB:4E:93:0A:97:1E:83:93:17:E7:89:76:F0:6B:CC:B7
X509v3 Authority Key Identifier:
keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:54:5d:93:d3:ec:20:57:1f:25:4a:9d:a5:c1:97:ed:b2:09:
82:ad:12:98:36:e5:36:b3:7f:83:36:5e:2d:d4:4d:02:23:41:
40:c4:30:cc:b6:d5:98:db:e4:d3:69:d9:95:78:ad:7c:f0:e0:
71:bf:bb:74:d0:4f:6e:41:dc:54:89:d1:71:b7:8e:74:5a:f8:
cf:f5:fc:e3:da:f1:aa:50:7e:de:c5:52:be:90:3d:77:bc:36:
57:53:50:7b:53:a6:f9:9f:c1:c2:ae:50:b2:de:c9:0d:4a:82:
2f:ab:59:61:a7:5c:95:9e:16:88:31:a1:ed:d9:37:75:23:e6:
cd:b5:37:63:af:2c:57:bb:e0:fd:3f:31:5d:50:41:a9:a9:bd:
f3:8f:f3:6f:92:84:f4:49:7a:e3:2c:2d:c2:81:ac:1e:03:ad:
9c:e4:cf:f2:2f:d2:86:6d:ab:a6:48:95:d8:35:59:e7:40:1a:
4b:13:62:54:9d:8c:c6:01:1b:1e:87:62:63:df:94:79:45:9d:
34:ad:39:99:26:b0:88:4a:f7:85:69:33:3e:c1:10:a8:bc:1f:
51:01:6e:4d:57:24:9c:02:0d:48:53:c7:05:e1:8b:81:48:ce:
50:1e:89:a4:ce:ca:ae:be:3c:49:06:07:bc:da:f4:f4:6d:2c:
bb:ef:5c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:30:06 2025 by rpki-client