Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
File: sglyH0VIwmzzYulEqBsazueyS1M.mft (raw, json)
Hash identifier: pUA6lstPd6gV22i6cKz7JmNJ9f+21PEKY/ZDIwYpCiM=
Subject key identifier: 20:1C:AD:9E:41:E5:F5:EA:88:7E:59:45:FA:67:89:51:9B:63:D3:22
Authority key identifier: B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
Certificate issuer: /CN=b209721f4548c26cf362e944a81b1acee7b24b53
Certificate serial: 019A4E862D83A0639231A82BA4C4AA18DB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 11:00:07 +0000
Manifest this update: Tue 04 Nov 2025 11:00:07 +0000
Manifest next update: Wed 05 Nov 2025 11:00:07 +0000
Files and hashes: 1: Kn5YPKTavnkR9we3GavTZvxru0g.roa (hash: xBxCBv93EeHCLyNABUtZ7jn766Ch4SgbtDnPEkzOvDM=)
2: aM2Mmp7rYQ9Ds0NTfBSW1lSTHx4.roa (hash: MOXkGsTfJLVwHpeFy8hnMbfGHfgWVvoGY31VFj0P0FE=)
3: bELo5qIIpuod7qBLIUKqwA9Ds9w.roa (hash: WzrJgL+uq92c99WVaAJUBgvncMaquptkbbkZrtxJTI8=)
4: sglyH0VIwmzzYulEqBsazueyS1M.crl (hash: /pRVDQ8PtVEyM3ALumqQYN1zps8gC8M4Yp3vxmoPDWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:2d:83:a0:63:92:31:a8:2b:a4:c4:aa:18:db:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209721f4548c26cf362e944a81b1acee7b24b53
Validity
Not Before: Nov 4 11:00:07 2025 GMT
Not After : Nov 5 11:00:07 2025 GMT
Subject: CN=201cad9e41e5f5ea887e5945fa6789519b63d322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:b1:5a:dd:d8:19:90:59:54:73:42:07:18:
db:7c:c7:12:ff:93:80:ff:db:d8:73:be:40:16:1a:
04:ac:be:c9:7f:4e:e3:56:f0:cc:c3:85:86:a8:dc:
6c:97:5b:65:70:c7:6c:15:cd:ca:a1:f3:f5:cd:d3:
d0:40:56:94:68:ed:a4:f7:49:46:53:dd:40:2b:a0:
dc:e3:51:2f:7a:d0:78:91:1a:db:d0:84:7a:90:ad:
fe:ba:c4:b9:8e:a1:c9:7c:61:3b:e2:98:5a:aa:1d:
7a:68:6b:f9:1e:8c:db:c0:ae:ed:81:48:56:71:37:
ec:29:c3:5e:51:db:63:11:21:f0:9f:29:bd:ac:02:
df:b1:01:a3:a0:1f:f2:c6:c1:58:95:87:90:38:13:
e8:11:45:7e:84:75:1f:a2:22:33:fd:3d:f1:26:b0:
2c:e6:a8:45:ed:aa:44:b3:5b:0b:10:f2:69:4f:b2:
55:2d:a6:5f:fc:40:f8:5c:07:31:a4:3a:49:b4:b9:
44:14:85:3b:de:36:ff:fb:54:31:93:f6:f1:a4:15:
a0:d2:6f:a6:a8:47:c9:39:06:31:6c:b3:8d:9d:52:
22:60:f8:78:b4:82:3c:b5:f0:31:5b:b2:8f:0a:7d:
99:1a:f4:2a:53:8a:ec:1f:e5:53:5f:03:ea:1a:31:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1C:AD:9E:41:E5:F5:EA:88:7E:59:45:FA:67:89:51:9B:63:D3:22
X509v3 Authority Key Identifier:
keyid:B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b3:11:7c:60:3b:6d:73:1a:ef:de:82:c3:1d:9d:e0:88:f9:
99:43:15:71:51:4b:b4:89:5d:81:4e:25:b4:e5:aa:c4:b1:72:
18:4c:4b:d9:ef:2c:b6:24:8a:a7:ec:82:10:80:19:83:9a:92:
92:85:57:36:c3:b1:53:3f:c0:45:b6:85:71:90:cf:97:01:1a:
a8:66:92:0f:68:75:76:1b:f9:9b:f7:d5:6d:b6:87:a6:05:73:
3f:18:54:70:0c:d6:1f:b7:4f:81:93:91:51:9f:7e:f4:01:ef:
eb:26:0c:31:83:d1:a9:2a:5e:ee:8a:0c:cd:af:4e:54:80:51:
19:34:75:06:15:36:d1:e3:1f:86:2e:57:18:b7:1c:70:82:4d:
24:dc:a9:39:d3:40:a2:b7:58:00:db:2c:86:ee:06:80:0c:49:
f2:96:09:d0:9b:c7:dd:7e:98:5c:ed:f8:1b:54:4a:0c:95:15:
69:52:c6:76:a5:a7:30:ce:72:e7:5a:55:4c:9f:65:af:96:2b:
c1:7d:35:b9:97:6a:a6:b2:2a:37:9d:22:45:e1:69:87:55:fe:
48:49:2c:7d:19:7c:e6:13:d4:fb:36:64:d4:5a:ca:ac:57:fb:
5b:df:4b:d5:5d:14:b5:65:75:b0:8b:fd:4c:b5:e1:21:37:05:
3a:11:dd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:14 2025 by rpki-client