Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
File: SA4-gK7rhMMmEvT60RbiaQpUbHo.mft (raw, json)
Hash identifier: jaGl8m6shOp7vBb2FZKDvq2l7O8T2u4q+IEWk3IOJbE=
Subject key identifier: 60:62:3D:DC:BA:4E:80:69:94:79:F5:5A:0B:39:DE:BC:A8:78:9D:D2
Authority key identifier: 48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
Certificate issuer: /CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Certificate serial: 019A50076083C4988BE14D00FB3C64E52EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
Manifest number: 06C6
Signing time: Tue 04 Nov 2025 18:00:52 +0000
Manifest this update: Tue 04 Nov 2025 18:00:52 +0000
Manifest next update: Wed 05 Nov 2025 18:00:52 +0000
Files and hashes: 1: SA4-gK7rhMMmEvT60RbiaQpUbHo.crl (hash: uj7pPEkDHd5pa8DzUL2bzfUeBBDlUco2nUMo6gPyvOo=)
2: UgsM9IySNlxMAMu3nxLBQeRmBwM.roa (hash: iWc/Vehzon/VP/j65KvlMpaDrurTE8lXeWv7jdRc8u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:60:83:c4:98:8b:e1:4d:00:fb:3c:64:e5:2e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Validity
Not Before: Nov 4 18:00:52 2025 GMT
Not After : Nov 5 18:00:52 2025 GMT
Subject: CN=60623ddcba4e80699479f55a0b39debca8789dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:1e:93:3f:c4:e7:66:e8:10:94:fd:30:84:
ae:63:12:7f:1f:91:45:73:5f:74:33:98:70:0d:e4:
de:dd:ca:c5:a8:16:5d:d7:fb:16:f3:05:50:b7:bf:
a7:d6:c5:e5:9e:18:7c:62:c4:16:71:1f:20:5b:75:
72:1e:23:21:48:a8:dc:87:db:16:be:86:4d:ea:fc:
85:7e:4e:21:6f:c9:25:95:54:a0:20:7d:fc:f8:41:
96:37:fd:cd:0a:31:72:31:1e:a0:4b:b1:e6:4d:ac:
c0:e6:a3:42:35:d1:10:ba:e8:16:dd:c3:36:7c:de:
f4:b2:aa:3c:6f:62:89:b7:dc:d6:d6:ff:9e:30:21:
81:74:ec:e7:a3:6f:92:9f:44:6a:74:8e:9f:3b:67:
22:92:14:17:38:38:5a:56:92:8e:b5:b1:2b:b3:3b:
c7:f9:4f:37:d5:2f:70:58:43:24:b8:c5:dd:84:6c:
17:c3:8c:cf:a5:d9:aa:91:a9:05:af:b9:54:85:0a:
8c:a6:fc:0d:23:cf:c7:6d:9b:23:f4:06:7a:5b:db:
db:12:13:81:0a:bc:b3:db:d4:5c:0b:3d:4b:b4:1a:
c4:e7:f5:58:39:c7:97:70:67:24:f1:99:f8:4e:ae:
5f:c3:d3:39:0a:dc:0d:23:58:92:b0:4d:76:b3:24:
42:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:62:3D:DC:BA:4E:80:69:94:79:F5:5A:0B:39:DE:BC:A8:78:9D:D2
X509v3 Authority Key Identifier:
keyid:48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a6:3f:d9:07:79:d4:d7:af:56:ce:eb:8e:f7:74:c0:2d:7e:
0f:a2:3b:09:28:55:4c:6f:ce:3c:8a:12:76:f0:de:92:23:57:
c2:fd:4e:34:3e:79:ff:f8:9a:5a:3a:44:a4:30:77:1c:a1:06:
fc:0c:96:2d:69:44:c4:ff:01:24:75:07:c7:09:eb:39:0e:1d:
50:0e:05:7d:a9:ad:b6:10:ea:90:7d:0c:db:06:1b:75:5c:97:
a7:7c:f3:ab:34:10:3e:b6:5f:8b:1f:00:15:46:30:0e:fd:15:
fb:47:98:ce:ac:f7:28:b7:fc:73:58:1e:ac:43:de:b5:03:40:
0d:f3:99:d1:fb:9e:50:76:ea:5a:5f:9e:6c:e3:c4:cb:17:12:
15:41:8a:aa:7b:fd:92:68:9d:02:92:0f:ef:18:f8:62:ea:b6:
c2:1a:17:45:7b:93:be:f7:4e:5a:56:2e:e7:ec:3a:9d:01:d1:
46:14:1e:35:e5:d5:09:3a:ed:26:e6:52:3c:87:72:cf:25:51:
78:d5:58:d5:31:6f:c5:ad:ad:a6:66:0c:e9:26:24:96:1d:61:
32:e2:39:ff:bf:17:eb:37:e5:aa:77:0d:b0:6f:8f:e8:98:bd:
a6:95:be:8a:a5:f1:db:64:f7:dc:a7:7b:1d:54:3d:48:52:12:
33:cb:df:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:14:36 2025 by rpki-client