Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
File: SffBpGd-t4JtrmneAaaZtiAdYkQ.mft (raw, json)
Hash identifier: 0Z/raNUzppu7BC18q9/6JmI0w8Vw4udKVWvC1XMuk8U=
Subject key identifier: 68:9E:C8:B5:0D:9D:5E:FB:DA:DF:84:A1:7F:BC:26:66:DA:D5:7E:83
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 019A503E583F4B03224D8E4EB9A4B8A0718C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
Manifest number: 08E4
Signing time: Tue 04 Nov 2025 19:00:54 +0000
Manifest this update: Tue 04 Nov 2025 19:00:54 +0000
Manifest next update: Wed 05 Nov 2025 19:00:54 +0000
Files and hashes: 1: 1fEhDLG2T1y1zCMSekjeKTFgEiE.roa (hash: qkZRZL3uEJ/IofMfb0sGApiJ8jObyAIyttVh0abUKHc=)
2: SffBpGd-t4JtrmneAaaZtiAdYkQ.crl (hash: GvP2Jze0bWphxl60ub5P3nOOah+SZ5XxfUrVHGVnTRk=)
3: Ungcud01aQHgTMIDHqxKgOj76qo.roa (hash: vzFsWzaNMb5tmpdLeHM9BlzRIek6QkO8MJb/yx40U/I=)
4: aNjEb5eKDyYkgeaI_pw6s6Nyxio.roa (hash: LXIG7QItKisSD3lO6v16i6iN7S5ddhKshFToQIqNXAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:58:3f:4b:03:22:4d:8e:4e:b9:a4:b8:a0:71:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: Nov 4 19:00:54 2025 GMT
Not After : Nov 5 19:00:54 2025 GMT
Subject: CN=689ec8b50d9d5efbdadf84a17fbc2666dad57e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:53:d7:43:3b:66:8a:d0:41:22:fe:31:88:f0:
df:7e:b1:10:a9:dc:ea:80:b1:68:a9:88:1e:a1:0b:
bd:4d:0e:ec:9b:63:bf:a7:1b:da:fe:0a:06:1e:ea:
de:8b:c2:e0:c5:d9:ec:86:97:5b:12:04:25:c8:62:
aa:9f:37:b2:c7:18:bb:3f:4a:da:47:ee:b0:07:16:
10:b9:af:2d:36:54:09:3d:15:67:6c:5e:2c:0a:f2:
d1:c0:88:a1:db:22:ef:1c:8f:db:7b:cf:79:78:84:
09:9d:1a:24:e7:b7:45:c9:d1:7c:20:83:f9:74:66:
1c:0b:8e:c1:8c:c7:21:2a:6d:b6:c8:7f:ad:41:5c:
7c:c9:91:5a:1b:e4:d1:c3:79:19:77:7d:a2:e4:3d:
10:22:21:fd:aa:67:aa:3b:35:95:2e:38:2a:fe:ac:
e9:f6:36:c4:f5:21:05:85:38:31:a2:c2:54:e2:03:
29:3a:4e:f1:9c:03:87:83:1e:d0:12:70:b6:d5:1b:
f8:94:84:87:9d:d6:13:fa:d2:83:ab:14:f9:92:9c:
02:0d:f2:4b:a8:2b:1b:47:23:62:4a:a2:0b:f4:7f:
28:57:50:2d:bc:c3:62:9c:0d:30:f8:07:f4:0f:12:
75:17:1d:c2:4d:a6:9b:53:c9:6a:a4:fc:6e:5d:d0:
41:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9E:C8:B5:0D:9D:5E:FB:DA:DF:84:A1:7F:BC:26:66:DA:D5:7E:83
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:98:13:e4:11:d8:ac:16:48:22:14:49:89:d4:6d:bb:86:ef:
18:2f:c3:dc:72:6d:2a:6d:4a:a0:5a:11:7a:1c:50:53:f7:d3:
ff:60:5c:aa:f2:49:d6:2d:06:b8:1a:aa:8b:b8:62:d5:1e:71:
83:7f:bc:24:96:31:51:ec:3b:86:d1:c5:44:03:7a:c4:ac:37:
6b:fd:8d:31:5d:50:ac:bb:00:7e:e2:07:37:1b:22:9a:27:39:
ff:19:66:ef:9e:83:44:15:1e:f3:3d:ba:d3:d9:1d:15:75:d2:
07:57:ac:51:53:67:a7:63:ad:a7:84:c7:56:ee:3a:af:a8:1f:
d5:5e:7f:30:a8:23:46:62:6c:bf:aa:d1:2f:7c:bb:17:a7:43:
cd:c7:07:ee:8d:3c:9b:fb:2e:c8:d8:7c:14:3a:b1:63:e0:33:
ec:52:c9:f3:0c:a7:fb:d3:e2:54:30:9c:b1:15:8e:4d:f5:9c:
13:96:b7:3b:c8:99:29:79:0a:8c:c3:17:b6:75:19:75:99:4c:
16:37:1e:26:ca:9b:e9:9c:fe:ca:7f:f8:fd:bb:ca:61:4b:15:
ff:69:bd:c7:b9:a2:8c:30:e8:1a:c9:5b:22:7d:62:fb:ff:92:
0a:4f:d4:bd:e2:6d:ef:41:3f:d9:fd:a0:9a:47:11:98:da:58:
37:a1:b2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:48:47 2025 by rpki-client