Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
File: SjQVWNugttuUxVzgbjBv9lGdbvE.mft (raw, json)
Hash identifier: jp5SyqjomOs/231cWiD9ttIl1WSuov02fyRBIoPBCnA=
Subject key identifier: D8:F0:C5:07:6A:26:90:20:D3:5C:0F:3A:B0:36:FC:D4:6C:72:A3:3B
Authority key identifier: 4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1
Certificate issuer: /CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
Certificate serial: 019A5375C9791763386A8CAEE98B49A29CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
Manifest number: 0947
Signing time: Wed 05 Nov 2025 10:00:19 +0000
Manifest this update: Wed 05 Nov 2025 10:00:19 +0000
Manifest next update: Thu 06 Nov 2025 10:00:19 +0000
Files and hashes: 1: SjQVWNugttuUxVzgbjBv9lGdbvE.crl (hash: vM21IE8+Ov4HtKUBdLGnWytoPWPnJOF2wvfNGxpnWWU=)
2: yPI4iRYmm1fwcu2gPm48e2JKRd8.roa (hash: BDXqRGsDwDyhjpTf6VKbLY0k53gndOvrvWCUreaVIQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:c9:79:17:63:38:6a:8c:ae:e9:8b:49:a2:9c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
Validity
Not Before: Nov 5 10:00:19 2025 GMT
Not After : Nov 6 10:00:19 2025 GMT
Subject: CN=d8f0c5076a269020d35c0f3ab036fcd46c72a33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:56:15:cb:42:04:5a:05:fe:d6:11:67:4e:3e:
a2:ae:95:1e:50:6f:25:56:69:f2:04:33:db:79:8b:
61:a2:80:bd:00:bf:37:4a:53:dc:07:97:60:94:60:
97:55:c4:d5:5c:49:15:db:c7:67:04:06:31:93:4f:
c0:70:e1:2e:97:f5:1e:58:2f:d1:20:0a:6f:71:f9:
14:81:1b:4c:22:bb:ff:6c:be:fb:1a:fe:58:1c:bc:
1a:bc:8d:d0:72:c5:9b:2a:7e:3d:bd:a3:2d:35:ef:
92:87:98:12:4f:64:9c:ce:3f:86:92:6d:a5:d5:d3:
db:77:8c:70:c7:10:59:68:79:96:6b:2b:cd:43:1e:
cb:7d:4b:24:6c:d1:1e:a0:22:3d:73:61:9b:c9:ec:
90:47:d5:ee:7e:55:98:c8:9e:fa:d6:f6:d6:eb:81:
04:7a:57:6d:f9:81:cf:45:a8:4d:ad:c4:be:6a:b4:
4c:43:09:7c:e7:1a:ce:08:4b:c0:58:15:ec:6e:9e:
7f:55:14:12:b0:19:fe:0d:e4:81:81:be:f8:41:b3:
97:fc:a5:8b:0e:fb:63:46:8e:e8:89:c7:d3:a1:d5:
54:62:13:3d:5d:36:ae:a3:43:e9:ba:fe:dc:e6:c2:
95:fe:1a:8d:ac:02:d2:0f:96:a3:e8:f1:eb:c9:af:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F0:C5:07:6A:26:90:20:D3:5C:0F:3A:B0:36:FC:D4:6C:72:A3:3B
X509v3 Authority Key Identifier:
keyid:4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4a:f8:27:a8:ab:ad:7f:58:fb:df:1e:5a:56:fa:fe:29:8e:
74:0b:ec:6b:f5:bf:b3:a0:f2:6d:c1:18:ed:08:f4:5c:d1:ad:
3c:a7:bc:0a:82:c4:78:84:cc:52:a7:cd:6c:4b:19:a8:ad:4a:
29:d5:5c:46:37:90:a8:eb:bb:ba:5d:85:41:6b:ed:e3:e0:2a:
f2:9f:8e:a4:d9:14:70:3d:6d:35:0f:cb:d5:9e:50:0f:78:a5:
2d:b2:01:c0:38:e0:bc:04:26:81:61:21:38:25:56:04:ec:45:
cb:ac:f4:53:4d:85:40:f7:02:d4:42:4a:8b:0f:ba:06:e3:46:
2b:8e:1e:79:33:99:3d:e9:33:58:8b:90:34:90:05:3e:fb:06:
c6:ac:0b:cb:ea:68:c7:5b:17:cc:28:99:9d:f1:1c:03:de:62:
86:b2:64:38:29:64:61:34:ef:bd:5b:51:14:0f:9d:d4:39:c0:
83:ab:c2:98:5e:6e:80:5d:22:59:8e:46:bc:1d:4a:a3:da:43:
7c:7e:bd:b4:9e:c7:cb:5d:5b:01:0d:96:32:1e:7d:9f:e2:ca:
95:1b:90:2b:7f:97:87:24:3b:a2:71:48:50:51:28:cc:d4:09:
70:c3:aa:f0:f2:aa:ed:25:f3:4c:5c:e4:c8:cf:9a:c5:1a:85:
22:70:af:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:04:54 2025 by rpki-client