Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
File: sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json)
Hash identifier: eBDdmknl5ww36q8+Muh/es9q9K/6BczWOIi0S6aPnhU=
Subject key identifier: 16:02:D8:8D:59:AA:A8:7D:09:0F:CE:48:79:7E:4E:39:91:57:65:81
Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
Certificate issuer: /CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Certificate serial: 019A50E2A5737FA36CED167F55CE741BE4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
Manifest number: 0A9F
Signing time: Tue 04 Nov 2025 22:00:22 +0000
Manifest this update: Tue 04 Nov 2025 22:00:22 +0000
Manifest next update: Wed 05 Nov 2025 22:00:22 +0000
Files and hashes: 1: YijLZfZ1VVcQMfbO2kW4jsYTug8.roa (hash: f055fbJfO/jOl/pVZwNG+0XakEEdz2iyjouPpXHwKII=)
2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: Az/VN7KiXRqccE8xt1g+Nzf0JkhN3k4D+EDEu+i6HPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:a5:73:7f:a3:6c:ed:16:7f:55:ce:74:1b:e4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Validity
Not Before: Nov 4 22:00:22 2025 GMT
Not After : Nov 5 22:00:22 2025 GMT
Subject: CN=1602d88d59aaa87d090fce48797e4e3991576581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c6:73:2c:3e:99:d8:fa:c9:e2:1d:df:87:ec:
da:d8:64:d6:4f:42:d6:60:35:62:59:6e:78:14:e1:
7b:de:c7:7c:bc:20:05:e5:0a:7a:3d:f4:3a:6c:2f:
4d:21:f2:3e:22:f3:87:b9:96:4e:55:b5:8c:53:66:
76:6f:e7:21:32:c0:c4:84:fe:fd:0a:59:16:d5:a1:
e9:13:ac:4b:9a:11:8d:1c:e1:40:5c:c9:38:79:cf:
d8:f8:06:9c:7c:cf:e2:c5:1d:9a:9f:1d:05:7c:4f:
dd:d0:b6:75:40:29:d8:25:6a:e3:3d:b9:02:b4:60:
2b:25:46:dd:90:76:42:93:68:03:d3:b6:64:2a:d2:
66:a5:31:8e:50:08:2d:47:1d:98:f4:83:e6:02:cd:
34:9e:43:09:72:96:92:13:5f:e0:f4:b9:31:cc:5c:
12:0e:1f:3c:f8:35:d7:50:a9:ef:a1:11:0c:bd:9f:
29:32:cb:96:35:d7:9e:26:0a:1f:c0:49:5a:32:84:
b6:49:33:64:84:2c:35:03:3e:2f:f6:86:29:6a:86:
0b:43:a4:2f:42:cc:ce:90:33:a3:e9:6a:0b:e9:bf:
7e:22:ec:a7:c7:c2:01:66:30:09:bb:b0:a1:c4:65:
76:29:78:03:c1:99:b4:2a:31:78:74:cc:8c:b8:3a:
bf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:02:D8:8D:59:AA:A8:7D:09:0F:CE:48:79:7E:4E:39:91:57:65:81
X509v3 Authority Key Identifier:
keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d6:6e:bc:4d:c3:74:2a:81:6b:9f:3b:b8:5d:44:12:a1:79:
99:b3:3e:2a:12:4a:e5:9b:aa:aa:84:7b:3c:a3:92:bd:a5:fd:
ff:21:cf:b1:77:fa:15:ad:92:4a:8c:07:1c:29:d5:9b:cb:f5:
17:5d:92:be:d8:aa:b5:c4:61:e3:de:a3:59:d3:fd:e9:ca:dc:
e1:51:e9:c7:f9:59:0e:d7:4e:e8:d8:a8:ed:39:31:7a:16:bb:
cf:6c:c2:6b:a9:d7:d2:36:47:a9:04:9d:2d:0e:d0:94:1f:20:
b2:66:07:7f:57:af:13:af:a4:62:c7:52:23:a5:27:7a:59:48:
63:6b:64:93:a1:f8:06:7d:3a:cf:f4:17:2e:0c:f2:ff:7b:f7:
b6:91:98:f4:ba:e6:e3:7a:98:05:8e:47:85:23:51:47:f3:0b:
e7:c4:1f:f7:04:49:c9:81:0d:ec:92:d4:24:0a:93:61:2a:95:
d9:d0:43:e7:34:2d:3d:d6:59:68:1d:65:d1:05:67:b2:c9:2a:
e8:05:b6:17:e6:35:52:ed:aa:0b:92:ca:70:c6:93:a1:ef:6e:
0a:ae:9c:39:88:c1:f1:16:08:37:1f:a8:dc:7f:a9:0f:58:5f:
11:fc:c4:d4:1a:60:28:66:4d:aa:f2:51:99:2a:43:d6:ca:c1:
95:56:d1:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4qVzf6Ns7RZ/Vc50G+ShMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNjFiZDNjY2EzZDMzNjQ1YTI3NmUwZjMyMjRmZjg5ZWVl
NDQ4NTcwHhcNMjUxMTA0MjIwMDIyWhcNMjUxMTA1MjIwMDIyWjAzMTEwLwYDVQQD
EygxNjAyZDg4ZDU5YWFhODdkMDkwZmNlNDg3OTdlNGUzOTkxNTc2NTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MZzLD6Z2PrJ4h3fh+za2GTWT0LW
YDViWW54FOF73sd8vCAF5Qp6PfQ6bC9NIfI+IvOHuZZOVbWMU2Z2b+chMsDEhP79
ClkW1aHpE6xLmhGNHOFAXMk4ec/Y+AacfM/ixR2anx0FfE/d0LZ1QCnYJWrjPbkC
tGArJUbdkHZCk2gD07ZkKtJmpTGOUAgtRx2Y9IPmAs00nkMJcpaSE1/g9LkxzFwS
Dh88+DXXUKnvoREMvZ8pMsuWNdeeJgofwElaMoS2STNkhCw1Az4v9oYpaoYLQ6Qv
QszOkDOj6WoL6b9+Iuynx8IBZjAJu7ChxGV2KXgDwZm0KjF4dMyMuDq/vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYC2I1Zqqh9CQ/OSHl+TjmRV2WBMB8GA1UdIwQY
MBaAFLBhvTzKPTNkWiduDzIk/4nu5EhXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEt
MzJmZGEzMTE4NmVmLzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEtMzJmZGEzMTE4NmVm
LzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdZuvE3D
dCqBa587uF1EEqF5mbM+KhJK5ZuqqoR7PKOSvaX9/yHPsXf6Fa2SSowHHCnVm8v1
F12SvtiqtcRh496jWdP96crc4VHpx/lZDtdO6Nio7Tkxeha7z2zCa6nX0jZHqQSd
LQ7QlB8gsmYHf1evE6+kYsdSI6UnellIY2tkk6H4Bn06z/QXLgzy/3v3tpGY9Lrm
43qYBY5HhSNRR/ML58Qf9wRJyYEN7JLUJAqTYSqV2dBD5zQtPdZZaB1l0QVnsskq
6AW2F+Y1Uu2qC5LKcMaToe9uCq6cOYjB8RYINx+o3H+pD1hfEfzE1BpgKGZNqvJR
mSpD1srBlVbRyQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:58:25 2025 by rpki-client