Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
File: SF92J0yAXSWxFaOtuh0uoVTe6tc.mft (raw, json)
Hash identifier: oPbPiHX2ADGnVzEsCXTQbo+1GqIl1TQYCE8l+y0wrq8=
Subject key identifier: 07:23:98:F7:6D:5D:77:68:5D:6A:57:6E:5A:34:58:5D:0A:BB:CA:B9
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial: 019A51505A80C0394D688ED1E89127FB8B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
Manifest number: 1101
Signing time: Wed 05 Nov 2025 00:00:11 +0000
Manifest this update: Wed 05 Nov 2025 00:00:11 +0000
Manifest next update: Thu 06 Nov 2025 00:00:11 +0000
Files and hashes: 1: JWbxkXMT1AbpQisEDcJK6XiKzB0.roa (hash: j5i4M4w+YBqEaXEsOz14p6tq/xzrFVxmrAYSCZG3o+M=)
2: S81leN1fuHkrYmn7HxOWRSa_EgA.roa (hash: jKDEc5FdU7Yds63BEna9vHfX9LdcVE/wlCXgfCTj304=)
3: SF92J0yAXSWxFaOtuh0uoVTe6tc.crl (hash: rdje1vK1II96hTfoXBtkYY5moc89jOAzIw9Tgl6juB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:5a:80:c0:39:4d:68:8e:d1:e8:91:27:fb:8b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
Validity
Not Before: Nov 5 00:00:11 2025 GMT
Not After : Nov 6 00:00:11 2025 GMT
Subject: CN=072398f76d5d77685d6a576e5a34585d0abbcab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:68:df:21:d9:ab:40:47:74:05:23:30:0e:
35:3f:e0:56:c6:63:d7:e1:fa:a0:2b:99:86:32:c9:
17:f0:dc:fc:bc:da:bb:3f:1c:81:ee:bf:85:c0:ee:
af:48:f2:ec:42:22:37:5d:cd:6d:60:eb:34:71:91:
55:fb:9b:61:2b:5a:08:89:ec:48:c2:bb:37:0f:5a:
b8:72:5a:30:bd:b7:2b:fd:2e:24:78:f9:3b:8f:10:
e3:ba:d0:51:45:c4:a0:f6:55:e3:fd:9a:13:57:9e:
dd:64:af:d7:39:57:1d:6e:6f:f6:cc:77:04:c1:bf:
db:7b:7b:7a:c2:81:3e:eb:3a:06:90:b6:bd:00:15:
66:4c:07:5e:d2:73:1b:a7:a4:44:44:c7:62:3e:43:
97:13:15:88:4c:8b:28:a6:12:3f:d0:36:37:1e:39:
f5:e9:35:1c:f1:e8:0c:0e:b0:bc:50:e7:84:15:fe:
96:d2:a8:28:c0:ef:38:c8:1e:3b:4c:01:1c:c6:3e:
d3:7a:28:27:7b:40:dc:c2:b5:e3:f4:a8:60:ad:c7:
82:0a:c4:31:dc:15:2e:68:71:51:1c:37:b9:d3:7f:
03:d4:3f:6b:39:f4:ac:85:95:7e:76:a2:ba:4a:6e:
d1:75:80:0c:8f:82:66:66:16:01:b3:e7:8b:bc:1e:
60:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:23:98:F7:6D:5D:77:68:5D:6A:57:6E:5A:34:58:5D:0A:BB:CA:B9
X509v3 Authority Key Identifier:
keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:56:e6:0b:85:e7:74:c9:54:b5:e9:ba:78:f7:09:cc:19:d3:
c4:35:06:75:f7:f2:6c:de:d2:11:b7:b7:df:b4:a1:4c:30:2e:
7f:ee:67:c1:2f:74:20:c2:15:5f:c2:a5:a2:e0:57:50:0f:4d:
88:25:c2:cf:56:c8:d9:17:91:b6:4f:d6:90:f0:5a:28:b9:14:
20:ea:7c:80:f5:76:d5:19:bb:d6:06:38:a8:02:54:10:dc:0e:
c9:21:2c:5f:32:85:e8:36:26:51:63:4f:59:36:35:c2:e7:0d:
41:43:94:fe:90:5d:68:fb:4e:75:78:0a:0e:5f:ed:a1:e1:98:
bf:ff:21:7a:d9:28:e2:6b:82:98:8e:38:f6:b9:2e:02:33:1f:
56:8e:b7:4d:49:37:72:b6:6a:29:12:40:72:75:b8:ab:90:ab:
c5:9e:79:07:ee:40:1d:33:55:a7:bf:f5:6c:b3:6b:f5:60:88:
fd:57:f7:3a:9f:62:58:71:56:f9:0d:f5:c8:bf:f4:ac:68:80:
e3:d2:ee:3f:11:65:37:0e:0b:1b:71:ee:45:d6:c8:43:b5:46:
8e:9b:4a:fa:bd:67:2f:61:15:5b:a0:9b:9e:44:25:87:15:13:
b0:04:8d:0e:7e:50:de:ed:e2:c4:96:11:84:df:65:75:a5:f1:
97:e7:f1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:50:43 2025 by rpki-client