Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft
File: SPWbrFHUhS0vyW6LTPu5__i0qTk.mft (raw, json)
Hash identifier: SISWErZzyhiniBpzxC64pxsXc+HJBrFjGTOdm/WRDvc=
Subject key identifier: AE:CB:81:07:32:BC:7B:A5:5E:F8:4A:B7:53:79:42:04:19:4B:AA:08
Authority key identifier: 48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39
Certificate issuer: /CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939
Certificate serial: 019A4D3D32C4E5914A7899888904A012B3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft
Manifest number: 14B3
Signing time: Tue 04 Nov 2025 05:00:47 +0000
Manifest this update: Tue 04 Nov 2025 05:00:47 +0000
Manifest next update: Wed 05 Nov 2025 05:00:47 +0000
Files and hashes: 1: 5nrGKW5FRerRHdO1Dy3ViuoBo2w.roa (hash: +MtkJFHMNS/IgvjNh3QorGfog9rrCct1jj019c8Teh4=)
2: SPWbrFHUhS0vyW6LTPu5__i0qTk.crl (hash: 06OFAt8Dnofi7c+O1tPfyFoY82YxF/vSiuUBzbbuO30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:32:c4:e5:91:4a:78:99:88:89:04:a0:12:b3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939
Validity
Not Before: Nov 4 05:00:47 2025 GMT
Not After : Nov 5 05:00:47 2025 GMT
Subject: CN=aecb810732bc7ba55ef84ab753794204194baa08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6e:3e:d3:29:c2:48:69:75:70:86:76:4a:e8:
94:1d:4b:42:54:42:55:14:dc:ec:a0:62:c2:19:e6:
fc:07:88:dc:6c:92:0c:b5:94:90:1e:8a:59:80:a5:
40:5d:bf:8b:12:41:96:74:93:6d:2c:f5:24:b8:52:
1f:ae:07:ce:15:6d:f2:e6:35:8b:38:d4:6d:54:fa:
d7:36:0d:4b:9e:f8:fd:87:c2:96:26:c5:9f:04:18:
1e:88:c2:34:1b:6e:fd:04:57:ef:0d:3f:91:ff:00:
a8:0c:7a:60:33:1e:e5:92:cc:42:fc:3b:04:67:4a:
ae:e0:05:d9:67:cc:75:4b:91:c8:ad:e7:46:99:f6:
8a:33:9b:f7:49:da:99:c3:3c:51:59:ea:7e:d2:f6:
e6:76:ba:1f:f9:07:92:09:5b:61:c0:c0:b2:1c:db:
08:b9:03:d4:6a:4a:17:4d:04:99:ed:25:d0:e9:23:
c3:68:ec:c0:6e:44:94:fb:ff:c3:88:8b:61:9c:04:
fa:33:4d:31:39:c0:b2:62:3d:4d:aa:64:15:87:a4:
d9:6b:4c:8d:5c:29:38:6c:4c:25:43:fd:bb:eb:c3:
61:42:b9:29:64:ac:99:02:da:07:fb:96:0e:c6:37:
c6:7b:ba:97:1c:90:15:e3:69:ca:89:25:77:6a:da:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CB:81:07:32:BC:7B:A5:5E:F8:4A:B7:53:79:42:04:19:4B:AA:08
X509v3 Authority Key Identifier:
keyid:48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:08:e1:09:c1:ae:58:71:62:61:f2:18:15:2e:cd:f4:56:54:
80:f9:50:4c:9f:9c:ca:5f:43:86:b1:23:8a:d3:08:66:12:49:
c2:54:32:d4:e5:45:60:2d:a5:6c:94:e7:c8:26:15:cf:98:6d:
a7:e0:64:ee:92:e3:b4:5a:c5:6a:84:aa:21:d9:67:82:fd:00:
b1:38:91:27:95:1e:5e:49:10:57:10:e8:61:0a:21:4a:12:7d:
5a:11:8a:8d:33:89:ad:48:e1:47:fa:12:8f:7b:e0:fc:a9:5c:
0d:6a:28:5a:12:ce:de:d7:02:89:3a:8d:44:de:c3:05:63:a0:
ff:9c:df:27:fd:2a:ec:99:bd:da:6e:bd:eb:73:73:ac:1f:8f:
af:ba:7e:86:f8:73:fa:f0:5d:ab:d3:b4:c2:da:9f:93:ab:f9:
01:26:01:31:6a:c9:b3:ff:d2:f0:1a:2b:a6:45:e2:cf:03:04:
5f:60:39:b3:21:7d:b1:a4:db:48:47:42:08:4d:30:8b:a7:9f:
40:28:16:bd:bd:f3:9c:2d:cd:3b:91:63:9b:a5:a1:2a:eb:3a:
6d:41:19:5f:87:4f:e3:d7:93:e6:f7:2a:08:47:ff:3f:67:14:
06:fe:8d:25:4f:74:1c:d0:8b:ad:7e:f6:ec:be:52:ff:71:f8:
76:a5:35:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:35 2025 by rpki-client