
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
File: SInGeZ92tFIvCZH2uTNP1ttUHVs.mft (raw, json)
Hash identifier: uXbp5V5VDEOCeXp//QKy+VkzNlUzjxY5RYGRxIAt0lc=
Subject key identifier: 95:77:AF:39:E1:0C:55:A8:D5:55:03:E0:2B:8C:48:E5:33:6F:CE:30
Authority key identifier: 48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B
Certificate issuer: /CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
Certificate serial: 019A4F2B6905DBF670F7ABB928115D883090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
Manifest number: 1208
Signing time: Tue 04 Nov 2025 14:00:36 +0000
Manifest this update: Tue 04 Nov 2025 14:00:36 +0000
Manifest next update: Wed 05 Nov 2025 14:00:36 +0000
Files and hashes: 1: SInGeZ92tFIvCZH2uTNP1ttUHVs.crl (hash: lWZimQNXEnBixvu2BJ+ekjO9kTZ+g6GmduAGXftS8Fc=)
2: W9LIimzmvADZP7RqK5-CS9hx7F8.roa (hash: 0bKnzD+/f66zg904NSAl0qUDPLAd/0RlfEWM3sOW+wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:69:05:db:f6:70:f7:ab:b9:28:11:5d:88:30:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
Validity
Not Before: Nov 4 14:00:36 2025 GMT
Not After : Nov 5 14:00:36 2025 GMT
Subject: CN=9577af39e10c55a8d55503e02b8c48e5336fce30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:c2:0c:10:ad:45:7e:72:cc:ef:70:32:9e:
3e:67:2c:5c:2a:16:d1:79:91:d7:12:a1:81:7f:64:
b5:35:e1:5c:06:b8:1e:a9:01:1f:07:96:3d:28:3f:
ba:d0:7c:98:34:e1:40:fb:58:c0:dc:06:30:51:1f:
87:4f:b4:59:19:01:99:e0:ef:0e:32:82:30:87:b5:
49:0d:b1:b5:ca:64:a1:af:d5:08:a1:53:15:e3:2f:
32:6a:5b:ed:18:87:66:00:a8:87:6e:3c:08:56:fb:
4d:e2:dd:17:a3:02:d3:ac:e4:6e:dc:c9:a7:2a:2d:
5b:e2:45:cd:2c:33:cd:1b:da:94:9e:eb:e8:45:81:
3e:f7:56:2a:1e:31:27:2c:87:19:25:6b:bb:36:39:
75:66:ea:45:d6:6a:bb:9e:39:6d:ea:7a:19:49:bb:
0a:e3:9f:53:6f:56:c7:a8:11:98:6b:b6:7a:56:ce:
1e:9c:46:cf:cb:d1:7f:da:f6:16:2f:0c:6f:38:6b:
e7:b4:32:bf:f1:73:f4:16:cd:c8:58:2a:73:d0:5f:
45:65:9a:10:ea:f7:4e:8d:44:fd:40:d2:83:2b:fa:
cd:2d:fb:8c:ac:0a:d1:25:cc:bf:80:10:bf:55:1a:
46:df:c7:83:35:7c:ea:63:90:7f:25:8b:5d:d7:11:
69:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:77:AF:39:E1:0C:55:A8:D5:55:03:E0:2B:8C:48:E5:33:6F:CE:30
X509v3 Authority Key Identifier:
keyid:48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:15:c7:be:5f:b6:4a:2f:c1:56:23:fb:f2:86:73:cf:98:15:
f8:fd:52:dd:49:04:0b:c5:de:e6:7f:8c:11:76:7f:f0:68:b2:
cd:77:22:cb:77:74:51:20:94:3e:55:b3:b2:0c:af:f6:d4:15:
de:9d:5a:a0:9c:27:e8:71:38:6e:81:92:a9:c4:aa:65:00:c3:
71:49:47:e4:e6:a8:e0:f7:e4:18:c7:e5:5b:88:07:18:2a:96:
28:25:c2:0f:af:c2:7d:ea:ac:64:45:48:6c:4b:df:07:aa:6f:
ef:7d:8b:12:79:35:11:82:d5:f2:5e:50:e7:9b:0c:1e:67:c5:
cb:4e:0d:d3:f5:dd:c1:a6:f9:01:97:d7:46:82:49:3c:1e:7d:
e2:77:cb:4b:23:e6:25:41:78:a8:44:92:29:41:1a:0e:0b:5b:
02:7d:76:9c:22:b2:f1:f6:87:33:38:d1:f3:b9:8a:01:b7:a3:
69:37:ed:9d:46:c2:a8:e8:05:6e:fe:01:c8:79:86:de:6b:b0:
e6:da:8d:75:df:ff:40:2b:77:b5:4e:62:84:40:94:d2:03:a6:
b4:8c:49:86:96:b7:f9:71:e2:b4:a2:a4:b5:d3:4c:3f:02:a4:
19:a6:5e:6b:bc:fa:28:ee:27:d2:cf:5c:c4:65:76:24:c9:9e:
69:6e:cc:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK2kF2/Zw96u5KBFdiDCQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ODljNjc5OWY3NmI0NTIyZjA5OTFmNmI5MzM0ZmQ2ZGI1
NDFkNWIwHhcNMjUxMTA0MTQwMDM2WhcNMjUxMTA1MTQwMDM2WjAzMTEwLwYDVQQD
Eyg5NTc3YWYzOWUxMGM1NWE4ZDU1NTAzZTAyYjhjNDhlNTMzNmZjZTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XDCDBCtRX5yzO9wMp4+ZyxcKhbR
eZHXEqGBf2S1NeFcBrgeqQEfB5Y9KD+60HyYNOFA+1jA3AYwUR+HT7RZGQGZ4O8O
MoIwh7VJDbG1ymShr9UIoVMV4y8yalvtGIdmAKiHbjwIVvtN4t0XowLTrORu3Mmn
Ki1b4kXNLDPNG9qUnuvoRYE+91YqHjEnLIcZJWu7Njl1ZupF1mq7njlt6noZSbsK
459Tb1bHqBGYa7Z6Vs4enEbPy9F/2vYWLwxvOGvntDK/8XP0Fs3IWCpz0F9FZZoQ
6vdOjUT9QNKDK/rNLfuMrArRJcy/gBC/VRpG38eDNXzqY5B/JYtd1xFpSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJV3rznhDFWo1VUD4CuMSOUzb84wMB8GA1UdIwQY
MBaAFEiJxnmfdrRSLwmR9rkzT9bbVB1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0luR2VaOTJ0Rkl2Q1pIMnVUTlAxdHRVSFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi85YWQ3N2EtNzI5ZC00NzI3LTlhYWEt
ZjU3YmRjYzczYjE2LzEvU0luR2VaOTJ0Rkl2Q1pIMnVUTlAxdHRVSFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi85YWQ3N2EtNzI5ZC00NzI3LTlhYWEtZjU3YmRjYzczYjE2
LzEvU0luR2VaOTJ0Rkl2Q1pIMnVUTlAxdHRVSFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRXHvl+2
Si/BViP78oZzz5gV+P1S3UkEC8Xe5n+MEXZ/8GiyzXciy3d0USCUPlWzsgyv9tQV
3p1aoJwn6HE4boGSqcSqZQDDcUlH5Oao4PfkGMflW4gHGCqWKCXCD6/CfeqsZEVI
bEvfB6pv732LEnk1EYLV8l5Q55sMHmfFy04N0/Xdwab5AZfXRoJJPB594nfLSyPm
JUF4qESSKUEaDgtbAn12nCKy8faHMzjR87mKAbejaTftnUbCqOgFbv4ByHmG3muw
5tqNdd//QCt3tU5ihECU0gOmtIxJhpa3+XHitKKktdNMPwKkGaZea7z6KO4n0s9c
xGV2JMmeaW7MSg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:17 2025 by rpki-client