Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
File: SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json)
Hash identifier: dWPsQpR046lVcYsx8sXXEPnW76xCoCnBgBAhvkDaEic=
Subject key identifier: CA:E5:19:A2:C5:CA:4C:20:37:DD:7C:53:FA:3B:08:5D:30:EE:9D:37
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial: 019A50E34D48907863A37ACBD891CEBA0D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
Manifest number: 1203
Signing time: Tue 04 Nov 2025 22:01:04 +0000
Manifest this update: Tue 04 Nov 2025 22:01:04 +0000
Manifest next update: Wed 05 Nov 2025 22:01:04 +0000
Files and hashes: 1: N_mB8DyGTMyRNtWdzOHezqUOwxA.roa (hash: 0iM1AEZNlQrcAYLQC9NYhgIr9GaQK1NMxQpbyZpHQKI=)
2: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: Mi4Qa7amrvkmmwQxcA4X3KhpNT2mnmJj/0X3yaWTUWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:4d:48:90:78:63:a3:7a:cb:d8:91:ce:ba:0d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
Validity
Not Before: Nov 4 22:01:04 2025 GMT
Not After : Nov 5 22:01:04 2025 GMT
Subject: CN=cae519a2c5ca4c2037dd7c53fa3b085d30ee9d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:73:de:c5:b9:28:bb:cc:16:24:bd:52:f7:
b5:57:c6:90:e8:d6:37:e0:e9:51:3d:57:93:2d:92:
5a:00:fa:2d:16:b1:fb:5a:ea:d7:e9:e9:90:a6:78:
63:eb:ac:20:c2:0d:8a:c0:6c:3d:be:76:20:b4:e5:
8f:40:d4:98:a8:8c:e7:fc:d5:44:17:22:a4:41:c3:
d3:64:6a:d3:78:64:c9:86:fa:fa:6b:ec:35:d9:40:
b8:77:74:9a:c9:f0:5e:2d:67:86:79:25:88:9d:63:
4b:c1:b3:34:a8:c4:68:85:6a:a8:10:b8:a2:88:09:
f4:3f:86:d0:67:04:6a:6b:24:c1:40:4a:7d:33:48:
5f:f3:eb:b0:4c:32:35:64:b0:2c:5f:b7:68:06:87:
9d:f6:80:c2:ea:4b:63:e6:9e:00:43:0b:83:a4:a7:
29:4e:95:76:02:a2:eb:5d:f7:b7:c1:eb:48:34:e2:
99:76:20:a2:a2:e7:c0:e3:6c:f7:87:f2:09:a0:68:
70:bd:fd:35:52:0d:8c:e0:9d:fa:c9:12:69:bf:ce:
69:61:24:34:46:eb:8c:76:47:1f:d4:1d:ee:11:8e:
ec:c2:9a:1e:c2:26:0b:e9:f4:9b:29:27:7c:f6:49:
c1:2d:35:90:6e:d7:35:ad:4e:27:b6:4b:7b:0c:60:
35:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E5:19:A2:C5:CA:4C:20:37:DD:7C:53:FA:3B:08:5D:30:EE:9D:37
X509v3 Authority Key Identifier:
keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4d:5f:b1:5b:b5:09:25:33:35:9c:a2:ad:48:31:4a:22:69:
69:9b:f8:33:2f:31:c1:b6:cb:6d:c4:c4:8a:ab:61:92:1d:15:
ff:44:4c:e8:f3:ad:9f:a4:c4:f7:88:3c:cc:9e:0b:2b:c8:a2:
20:db:df:66:bf:7d:76:a4:47:c9:a6:4e:68:56:cd:e7:4d:fa:
dc:9b:1d:43:8f:cb:ed:74:cf:c8:d1:fb:81:b0:72:34:0f:2c:
57:0b:ac:ea:ac:c1:bf:e4:1f:eb:bb:24:da:0c:9b:ce:8b:4b:
54:3f:e7:22:6a:48:3d:7b:81:da:28:f6:eb:77:83:54:10:2d:
8f:9d:7d:73:63:33:89:1f:31:92:ce:53:ce:90:d6:44:c3:32:
0e:35:5b:90:00:b2:86:30:6c:75:83:21:3a:bd:8f:3c:b0:3b:
82:22:fa:b6:fa:b4:cf:d7:54:70:f8:58:7a:9a:80:28:02:e8:
2c:d7:d2:59:0a:ef:fb:c4:16:e1:89:dd:28:42:f9:e2:0e:18:
3f:53:ff:2c:ef:dc:c8:9e:8d:29:f8:95:44:90:9e:ad:f4:2a:
5f:99:61:da:8a:86:9f:f2:2a:a0:13:e5:2a:e8:82:d4:c2:64:
48:3f:52:ea:c7:92:61:41:57:7c:6f:59:1b:b2:d7:03:d3:d4:
d1:3e:64:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:57 2025 by rpki-client