Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json)
Hash identifier: OC+hI4Fh07QA6RNAG/oDn8YvRJGrONwO0U9GYdUIvv8=
Subject key identifier: 49:E4:22:EC:3E:7B:7E:D3:90:5D:21:7B:7D:FC:FB:D5:93:4B:68:21
Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c
Certificate serial: 019A4D73CF15D8915A7768148A1E9794120E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
Manifest number: 10D8
Signing time: Tue 04 Nov 2025 06:00:26 +0000
Manifest this update: Tue 04 Nov 2025 06:00:26 +0000
Manifest next update: Wed 05 Nov 2025 06:00:26 +0000
Files and hashes: 1: JUMv7Yi2cpE5n4jH_daU8-Wkj_s.roa (hash: 8Ur2YBrwEIHwiqas+AFAXGNfkZXPANsLJAnLoARlVGk=)
2: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: o826fFTBAxQJZQzMiFY5RVJ2/doXmmwniuMVtT9+QKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:cf:15:d8:91:5a:77:68:14:8a:1e:97:94:12:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c
Validity
Not Before: Nov 4 06:00:26 2025 GMT
Not After : Nov 5 06:00:26 2025 GMT
Subject: CN=49e422ec3e7b7ed3905d217b7dfcfbd5934b6821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:94:e0:b4:26:17:3f:06:90:a6:26:29:4c:
c1:eb:62:bd:72:26:5f:f5:c5:f9:df:64:c0:4b:6a:
9c:3a:04:f3:18:6e:37:1d:9b:23:b1:48:19:bf:cd:
32:53:b9:e5:a8:63:f7:22:52:d5:65:2b:07:79:d5:
fe:a2:64:95:11:4b:67:a9:df:48:51:50:70:da:b2:
ca:28:3f:bb:ce:c1:55:0d:76:55:9f:3f:bd:79:bd:
d3:93:6c:97:0a:28:8e:1c:13:3e:a4:6d:5b:a6:f0:
39:db:b3:03:0b:de:93:db:c7:e0:02:af:e4:49:3a:
c8:65:ab:a5:dd:52:ff:34:66:0c:85:25:85:b7:67:
10:71:74:34:d8:a9:57:0e:93:10:fa:5e:88:f3:da:
36:81:da:10:25:c9:1a:2b:40:ff:09:34:21:f6:eb:
69:a6:90:bc:cd:73:a8:db:5f:ed:0f:50:7d:26:67:
6b:21:ec:6b:be:1a:12:88:1c:5a:8a:f3:d9:fb:f0:
b0:82:f1:b4:63:43:ab:3f:f6:34:4c:da:5a:84:10:
30:1f:68:be:d6:32:b7:0e:13:97:b5:35:9b:c5:1e:
25:df:bc:fa:15:1a:1a:ca:a0:99:45:4f:4d:2a:ae:
bd:9b:a5:73:bf:bc:bd:74:d5:09:e9:5e:00:37:f5:
0b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E4:22:EC:3E:7B:7E:D3:90:5D:21:7B:7D:FC:FB:D5:93:4B:68:21
X509v3 Authority Key Identifier:
keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4b:76:ff:17:55:06:f7:47:d2:ac:32:3c:25:cd:d5:1b:89:
81:bf:f0:a0:33:8b:51:13:ef:dc:8f:4a:ce:e0:b5:bb:38:0c:
4d:de:e3:3e:9a:2e:25:11:04:e5:4c:89:fc:d2:0a:0c:8d:ac:
07:af:98:14:5c:54:5d:f9:1f:80:49:bc:04:b2:2e:a1:58:05:
a8:fc:3c:8e:f5:64:89:90:b0:ad:0a:a8:71:06:65:2a:fc:b3:
69:90:59:e5:d4:02:dd:20:75:7f:67:3a:85:e8:4a:1d:1c:59:
1b:cb:3c:f6:b4:45:05:76:0b:00:e5:1e:0a:de:d7:49:8f:d3:
88:b5:ce:85:f7:df:62:80:85:6a:65:94:f0:cd:0a:6b:1a:7d:
b7:9d:42:a0:37:fe:06:3c:b9:88:08:49:15:ce:6e:77:10:7f:
8c:32:cc:bd:e3:59:bf:42:c1:ae:64:f0:b6:25:bc:8b:f8:3f:
66:8e:d8:54:ea:11:a5:58:33:f8:7c:41:a4:21:0f:46:6c:1a:
2f:af:d7:f1:d0:b2:4e:85:be:64:09:2a:ef:a5:ff:c9:8f:73:
28:2d:20:48:c6:41:43:16:c2:57:db:50:d4:b7:1d:95:95:30:
7f:df:1f:94:36:67:14:78:56:d1:b3:37:94:89:b8:46:6b:d2:
4b:d5:b4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:25 2025 by rpki-client