Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
File: SfJiM_W7QibCp6e5ADAI0Z40eFs.mft (raw, json)
Hash identifier: wJ7fx3LsdAQWTd6Pf/zFOWcYNz/R5zIRnIySfziTInk=
Subject key identifier: AA:BB:17:25:D1:24:64:4A:BC:7C:FA:AF:B6:2E:63:BE:D7:A2:71:0D
Authority key identifier: 49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B
Certificate issuer: /CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
Certificate serial: 019A4FD024FED553685BC7A9DC4CA6E23BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
Manifest number: 129C
Signing time: Tue 04 Nov 2025 17:00:32 +0000
Manifest this update: Tue 04 Nov 2025 17:00:32 +0000
Manifest next update: Wed 05 Nov 2025 17:00:32 +0000
Files and hashes: 1: SfJiM_W7QibCp6e5ADAI0Z40eFs.crl (hash: n79jytrnqldvfAQ0TVr+XR7ARLefuHblx2+0D9EKeTE=)
2: TmwIzb5OMEe4RHPaC68IjB6na0k.roa (hash: dW1pEtOcDuseosGnHRvKaebls+Ju6AZ6FoBVPM8QbJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:24:fe:d5:53:68:5b:c7:a9:dc:4c:a6:e2:3b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
Validity
Not Before: Nov 4 17:00:32 2025 GMT
Not After : Nov 5 17:00:32 2025 GMT
Subject: CN=aabb1725d124644abc7cfaafb62e63bed7a2710d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:3e:33:49:cb:c3:23:0b:d8:0b:6f:79:46:
fe:ba:f8:8c:b6:a8:ad:bb:bb:60:c8:f9:29:3b:f2:
74:a3:9a:37:f7:81:18:35:be:93:16:0f:9b:a3:94:
02:16:7f:31:38:8f:d0:3e:2d:99:96:44:fe:35:ec:
11:36:60:1a:b4:22:f5:72:f5:a1:e3:50:ff:05:8f:
7c:02:06:f5:19:ac:f8:48:cb:b3:e8:d7:91:4c:1a:
aa:47:f8:6e:6c:fc:ea:5c:88:06:59:16:3f:be:7d:
00:41:c3:01:b5:e0:92:93:f3:e8:d1:6d:dc:a8:f1:
06:be:58:b5:e4:cd:7d:c2:bd:6b:d8:8b:de:98:3c:
fb:96:bd:39:24:16:4a:8f:ef:52:92:c0:b8:6a:88:
94:9a:6b:f6:ba:69:80:c1:5b:a7:b7:bb:c1:69:e6:
75:f2:df:7b:a1:e8:f5:f2:24:f7:89:6f:e9:43:37:
ec:32:c7:89:6a:b5:ae:f4:66:46:57:65:90:02:7a:
53:d9:65:18:a7:a2:9b:eb:66:fc:72:c4:50:23:f2:
17:16:71:38:72:9e:8a:71:1f:84:bd:f7:dd:d4:81:
d3:be:e5:55:9e:ed:ad:c6:ea:4c:28:c6:9d:1d:74:
fe:1e:0a:69:48:d3:cc:6f:72:a9:5d:95:87:f4:0c:
6e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BB:17:25:D1:24:64:4A:BC:7C:FA:AF:B6:2E:63:BE:D7:A2:71:0D
X509v3 Authority Key Identifier:
keyid:49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ea:4c:07:fb:4e:0d:10:da:39:65:be:7c:5b:8f:a4:1f:40:
01:8e:05:4f:7b:8d:d6:43:b8:44:a1:87:d1:c6:92:10:6e:b2:
73:fa:02:5c:46:4c:f8:14:51:0c:6c:96:60:cb:cd:8f:a5:f4:
fa:4b:2d:57:32:a4:97:aa:7a:07:b8:8a:d5:55:e8:93:3a:11:
40:63:7c:1a:8b:d7:c5:b4:64:d9:32:7b:64:6c:18:89:2a:26:
bc:c6:52:46:16:34:99:e0:f2:06:b9:f8:c6:d7:9b:6c:99:8a:
bd:04:7d:a3:6b:24:7b:85:70:16:09:6a:29:67:0a:0e:c4:05:
d5:1a:a4:af:69:67:76:a6:22:2b:a0:8a:74:3a:57:0f:26:d3:
91:57:19:e2:49:c0:dc:28:f6:b0:22:31:79:ec:57:74:e1:ba:
e4:0f:b6:76:50:df:c0:3c:5c:8e:89:c6:8f:f6:c9:25:96:39:
e2:1c:c9:03:28:a9:db:61:c8:45:08:27:88:27:b1:e7:30:6e:
3e:9e:3d:91:79:56:f8:4b:a0:8b:2c:a3:81:0e:61:0a:fc:79:
3d:e1:cd:9a:2a:e6:f6:ed:3e:3f:1c:cd:a0:e9:76:b6:f0:86:
98:cc:c1:49:02:bc:e5:61:54:c9:18:78:c0:de:86:87:73:3b:
a9:2f:7a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:36 2025 by rpki-client