Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: OgzTcDVZ8OMKTV713IJCHOIJ37JHgHLXvvIt16hbELA=
Subject key identifier: 9B:7F:4C:FB:82:46:1E:9A:CE:7B:3B:32:5D:0D:20:52:A2:75:74:92
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 019A4D742F8876DD768E7A3E12C5040AF43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 0E40
Signing time: Tue 04 Nov 2025 06:00:51 +0000
Manifest this update: Tue 04 Nov 2025 06:00:51 +0000
Manifest next update: Wed 05 Nov 2025 06:00:51 +0000
Files and hashes: 1: 9mLiZaXlrMh-SLMVWKWdzKIZreg.roa (hash: JOVJ8r+m2mKwk5/18fVmvxGEIuiFVBEZYaB5XFvwZO8=)
2: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: icpRxbju0Wekv2uZ71GBxtkD1CrFMoyHA7aDl0U5Kd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:2f:88:76:dd:76:8e:7a:3e:12:c5:04:0a:f4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Nov 4 06:00:51 2025 GMT
Not After : Nov 5 06:00:51 2025 GMT
Subject: CN=9b7f4cfb82461e9ace7b3b325d0d2052a2757492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:e5:16:a2:b8:52:c1:2e:38:3b:1b:84:db:
e4:fe:66:cd:b3:f6:14:96:f9:a0:5d:93:41:41:c1:
64:d8:52:c6:94:a5:c7:07:fa:ce:cb:d3:07:90:4c:
d1:e9:54:7f:99:e2:68:de:75:00:a4:1c:b3:1e:8c:
47:5a:fa:27:da:2e:78:a6:f3:ca:4f:9f:c4:77:65:
51:71:a3:e0:4a:a1:f9:3a:78:2d:28:5c:7d:17:fb:
6f:6c:20:4f:8e:31:d8:10:61:3f:70:d9:bd:4e:28:
75:97:22:d8:3f:db:dd:ff:cf:22:17:be:b1:6c:e5:
cf:b8:d7:4a:15:ef:0a:e2:37:f4:a6:55:53:8a:eb:
40:38:6b:77:a8:9d:59:ae:94:f3:b6:94:83:cd:b3:
0f:8b:ef:c5:b4:cc:e8:63:37:b6:ac:5d:e1:37:3b:
b3:eb:92:20:b3:ca:ed:cb:3e:15:eb:0d:9f:a7:23:
9d:d7:83:68:4c:f0:95:58:9d:dc:0e:6a:70:46:9a:
55:c8:45:72:4a:ba:d2:cf:03:83:c0:54:14:52:2b:
8f:ad:c5:d1:10:0d:ca:ff:f5:6f:d6:46:03:92:c4:
4d:9e:77:5d:08:14:4d:27:6a:a1:1a:50:9a:ce:b5:
ae:0b:7e:c5:c8:52:2b:2e:ab:3b:a6:01:98:65:55:
62:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7F:4C:FB:82:46:1E:9A:CE:7B:3B:32:5D:0D:20:52:A2:75:74:92
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:aa:eb:c9:6f:6d:6d:b6:b9:90:63:69:73:ed:07:62:b6:61:
f2:00:ba:1a:58:9b:9a:ae:59:fe:09:94:88:6d:58:f8:0c:3d:
e6:ae:6f:a4:52:fe:6f:fa:76:4a:65:f4:f1:66:fd:4c:75:a0:
f4:0d:4c:05:ec:a8:63:46:6c:1b:25:75:ae:35:6d:12:78:97:
b8:55:05:0e:ff:cd:15:c7:76:ad:1d:a4:6c:0b:81:45:c4:6d:
73:e5:de:46:7a:18:15:3c:40:5d:5b:9a:52:a6:d0:4e:47:bb:
b1:d1:73:3b:32:94:2c:b9:90:b7:21:4b:33:41:20:84:7d:ea:
72:c5:38:8a:a8:54:87:54:fc:d4:04:64:11:df:1e:07:15:32:
f1:6d:4d:b5:77:19:81:fc:6e:29:38:78:ab:6d:42:32:ae:63:
fa:52:2a:6c:7a:09:82:2d:d6:bb:ad:bd:31:54:76:43:e7:18:
17:1f:f4:78:21:43:46:c0:d3:83:d0:e0:57:84:04:43:e4:f1:
91:14:d4:d1:e7:76:99:56:a4:34:81:c0:4e:2b:8b:d7:a7:16:
6c:34:75:d1:53:a0:4d:e2:d7:73:bb:0a:17:a9:fd:95:02:1d:
6f:71:5d:65:db:b9:fc:6b:85:42:2e:fe:ad:2a:27:5b:e3:ea:
f7:76:05:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:39 2025 by rpki-client