Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
File: SGUQoxFpcvztleiova_W5FXe0Lo.mft (raw, json)
Hash identifier: DDGwHeb23sLof8GlfuIGBATC9rpgUN/5pGSoV768ZaQ=
Subject key identifier: 91:CF:3D:C8:06:14:0B:A1:E2:AE:52:F4:41:83:F1:ED:6E:B1:1B:66
Authority key identifier: 48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
Certificate issuer: /CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Certificate serial: 019A4F623556239536577193DDEEE396328A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 15:00:27 +0000
Manifest this update: Tue 04 Nov 2025 15:00:27 +0000
Manifest next update: Wed 05 Nov 2025 15:00:27 +0000
Files and hashes: 1: SGUQoxFpcvztleiova_W5FXe0Lo.crl (hash: Vd1SyVsxY6oDIcjv+q3jE4wNECzCBk8ohG5MKmR5jpo=)
2: SNsRs_4WTuL917-zEoDb2DAW4Cs.roa (hash: N22szcBJgG6xZhKtnqlshnG6vFReTJVV2XmRzhmuoSw=)
3: lQwR3y5IAJ7kyCCFVo104fC4SsY.roa (hash: MwEmP7Sqq33K1HUPXLtLK+kd2q/HJrM3DtuK+SIM+zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:35:56:23:95:36:57:71:93:dd:ee:e3:96:32:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Validity
Not Before: Nov 4 15:00:27 2025 GMT
Not After : Nov 5 15:00:27 2025 GMT
Subject: CN=91cf3dc806140ba1e2ae52f44183f1ed6eb11b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:f4:46:ad:8b:80:c6:af:c0:19:09:26:9c:
71:d6:49:53:79:dc:bd:65:f3:72:b2:3b:bf:41:94:
de:6a:b0:c5:3e:8b:a3:19:ab:5b:d0:6f:86:e2:e2:
ce:c9:23:34:3e:88:9b:c8:8d:08:68:36:60:4d:71:
10:1e:e2:08:c6:22:8a:df:a8:8d:b1:cf:99:e1:a0:
39:6f:24:91:68:e2:d5:cd:d3:7d:23:bb:f1:8f:70:
5d:38:96:f3:d9:76:e2:82:42:5a:01:72:f2:45:ed:
87:71:50:92:0c:5f:3f:36:b4:67:72:ca:e6:18:15:
27:bb:d5:e6:2b:e4:1b:34:75:7d:f5:42:d8:06:21:
52:be:83:a4:9a:8b:3b:d3:4a:7f:a7:8c:af:fa:80:
61:ed:91:f8:b2:d6:10:c5:29:54:af:52:64:40:79:
a4:28:bd:bd:d6:d3:ce:a2:ce:f6:17:e7:4b:e3:f9:
41:71:ce:ee:da:1f:c4:f8:45:7c:16:da:e0:cc:48:
8a:58:73:ca:b0:ba:9c:2d:f2:3d:01:d2:b5:f3:06:
58:d4:08:4f:88:81:b6:3c:ff:0b:ac:ea:c3:ac:a8:
fe:b2:1a:f6:af:cc:47:ac:e7:e4:73:95:f9:ac:69:
df:bb:f1:8f:4f:c2:e1:62:4f:11:d2:12:87:90:63:
a1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CF:3D:C8:06:14:0B:A1:E2:AE:52:F4:41:83:F1:ED:6E:B1:1B:66
X509v3 Authority Key Identifier:
keyid:48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:15:b0:0b:1a:21:b4:d3:00:be:71:03:2a:df:84:12:92:f4:
f2:61:e0:89:ca:46:d5:1d:e3:e5:79:d4:1f:72:20:f6:62:a5:
90:3b:f4:c1:22:74:17:88:32:5f:5d:a9:7d:e1:d1:92:28:2a:
3b:30:4e:ec:4c:53:5d:60:49:f4:0b:f3:bb:af:25:9c:f5:ec:
db:71:7c:32:6b:a0:01:49:38:3d:70:d8:90:e0:e4:8b:8b:b7:
3a:3d:64:5a:3e:0b:00:77:36:a9:a9:c4:8e:f5:62:73:95:66:
46:8e:3b:53:11:68:98:71:9a:8f:a4:cc:fe:78:81:e9:c7:0a:
7b:c7:d4:03:8e:c7:f1:ef:1f:f9:eb:0a:10:1e:28:11:17:54:
8d:1a:92:b3:b5:63:25:29:74:77:62:6d:bb:a0:fd:1d:76:6e:
30:73:77:5c:3c:4b:a1:07:6c:21:3d:70:15:34:46:19:ff:d8:
66:ef:c7:56:a5:d6:4b:ba:f9:99:4d:fa:3d:4f:85:de:07:0c:
cb:a6:ac:6e:6f:90:1c:13:2a:9d:45:93:0e:33:62:ad:7f:cc:
f8:de:f2:03:ea:e4:79:52:23:c5:2b:4f:24:56:83:bb:84:ee:
18:db:d4:a3:7b:7f:26:9f:99:17:41:15:c3:d4:33:24:59:9a:
49:77:85:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:40 2025 by rpki-client