Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
File: SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft (raw, json)
Hash identifier: moXhibEiW4N58R3cLxFeX4lUvxLnKmmoDFh9+51CVFA=
Subject key identifier: CB:16:15:09:B3:62:7D:F7:81:F4:C9:C4:F3:99:95:05:6D:90:F1:40
Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
Certificate issuer: /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Certificate serial: 019A4EF418347520CF11FE95F03B00B6715E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 13:00:10 +0000
Manifest this update: Tue 04 Nov 2025 13:00:10 +0000
Manifest next update: Wed 05 Nov 2025 13:00:10 +0000
Files and hashes: 1: 8J4KQUM3SG2tOx7Qy412tzcCyVE.roa (hash: WDRfkd7NWCeGm5AnO0id+VmgIMVtNw9JsJNLGC4miyg=)
2: F3xqvw__Ry6FbR1QISJmpPzSw80.roa (hash: lZUN0lo02iToEWBcU9heTh5ikClvs/fsdLuL0ZtWzgs=)
3: SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl (hash: dp08PHR3ugfJTu/aRsL7+QiwuFt/MUayK8X4oYFZgkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:18:34:75:20:cf:11:fe:95:f0:3b:00:b6:71:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Validity
Not Before: Nov 4 13:00:10 2025 GMT
Not After : Nov 5 13:00:10 2025 GMT
Subject: CN=cb161509b3627df781f4c9c4f39995056d90f140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d2:6c:43:57:d4:93:aa:ed:55:41:2a:de:08:
dc:40:f1:21:cd:b7:48:b0:0f:34:03:9c:4b:d4:a7:
7b:19:de:5f:b3:43:61:f4:c5:f1:f4:df:d5:9e:fa:
6d:a0:09:12:4d:fb:f1:b2:99:2c:ee:32:c1:fd:47:
08:bb:77:18:2c:4f:72:63:73:55:69:bb:8f:d9:4b:
03:1a:b3:d0:7b:5a:54:31:89:0d:a7:1c:54:50:2f:
03:02:c0:ce:0b:cf:9b:2d:a5:61:bf:27:05:54:a4:
67:cf:90:73:dc:6e:a5:7f:f1:34:d7:39:e7:7d:bc:
46:bf:3b:9f:d6:54:14:f1:26:b2:be:96:ba:3b:fa:
ca:a9:a3:ca:f2:4e:04:77:75:bf:1e:7c:ee:1b:ab:
90:72:5d:6d:b9:b9:9c:ce:27:95:4d:f8:ec:1b:aa:
97:ce:1c:9d:63:a4:78:05:f1:d0:96:c1:e1:14:a2:
67:76:5a:c5:00:45:67:ae:00:3c:06:91:8d:e1:2a:
53:ca:9a:32:c6:f3:06:82:1f:e4:2e:31:2f:ef:61:
21:4f:02:42:5f:e6:58:3c:b6:d1:9d:1a:6a:a5:ca:
59:65:1c:05:11:00:dd:46:76:1a:87:2b:20:0b:d3:
4c:ad:a3:2c:33:08:b4:5c:a5:38:e1:c7:2e:23:34:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:16:15:09:B3:62:7D:F7:81:F4:C9:C4:F3:99:95:05:6D:90:F1:40
X509v3 Authority Key Identifier:
keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ac:c6:8b:79:a5:20:13:24:76:e4:1d:60:02:b2:66:6b:f4:
9b:2b:0a:83:87:62:42:ac:6c:f0:2e:d4:67:24:8e:a9:fe:5e:
35:aa:8e:c3:a6:fd:2b:b7:41:51:12:2e:b0:05:06:f6:66:bb:
19:a4:6a:cc:a5:8a:97:64:71:fe:fe:7d:57:04:8e:96:a9:3c:
56:76:80:2c:b7:61:e1:af:00:41:5e:dd:b2:38:96:98:69:85:
c5:62:71:df:54:6a:20:cb:86:25:e4:19:94:47:88:6f:1a:a7:
ab:45:a9:94:e5:2a:27:4e:64:38:6a:07:58:56:7d:bb:fa:03:
85:62:55:0a:5a:1f:39:5e:1b:86:11:82:09:32:e8:b6:34:06:
51:62:66:10:3c:3c:53:53:1d:7c:f3:66:6d:7b:14:65:60:39:
61:fe:74:55:9d:74:25:0e:9b:21:e4:4d:06:76:cd:08:c9:ff:
20:19:b3:e8:8c:4c:6d:a3:50:08:88:1e:9b:c0:e3:1a:c4:28:
b8:5d:7d:37:02:46:5d:37:93:09:d9:4c:20:dd:4f:6b:85:45:
23:97:43:27:1e:81:b4:5b:b4:fe:d5:5f:00:58:1b:49:99:fb:
ac:9b:23:f5:47:5c:d8:db:27:6c:cd:4f:ec:fa:88:09:6b:54:
e7:f7:87:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:52 2025 by rpki-client