Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json)
Hash identifier: RUtNoknkQkyN5y0O3gURiAo4klNcSRkCqbcTSATUpT8=
Subject key identifier: 2A:74:81:59:CF:09:1C:82:B2:20:AC:D7:EC:DE:48:9A:C9:2F:F1:D1
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 0199FB0F27E02CD5AC26925371442F9D7128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
Manifest number: 0D5D
Signing time: Sun 19 Oct 2025 06:01:38 +0000
Manifest this update: Sun 19 Oct 2025 06:01:38 +0000
Manifest next update: Mon 20 Oct 2025 06:01:38 +0000
Files and hashes: 1: H4mX0idq9aa-2-behcELkDI1jEk.roa (hash: huYpiP8shZ1qtuKsgdaiOX3XPq9aXGUT/wJFL/doYxg=)
2: HOFuYJA21RRv709Gkqp-YVI1pnc.roa (hash: /Ilnzb7fkIj0wD4Gc1ajFjx70b+0n8vZYhfy5zJo85s=)
3: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: ASpK7LfbBoNmts6UJVkRpHmPoWwU0Q56j8glMZJpk4A=)
4: h_anGgdZ4cfeg8zc-pQ4qHc-1_A.roa (hash: 8cDGdFkVExOuODcCOnTk0hCvBOjo8Y4Ys8gUcQeAHNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:27:e0:2c:d5:ac:26:92:53:71:44:2f:9d:71:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Oct 19 06:01:38 2025 GMT
Not After : Oct 20 06:01:38 2025 GMT
Subject: CN=2a748159cf091c82b220acd7ecde489ac92ff1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:b4:e2:e7:ef:be:24:94:0a:6c:34:a9:b6:
a4:d3:18:bc:2b:1d:b7:56:93:a3:70:73:0c:8e:a8:
fd:1b:c3:30:03:84:34:25:74:f3:71:8e:20:8d:9c:
6c:ac:d2:4e:83:e9:56:b7:9c:ba:c4:d3:b6:28:39:
40:57:98:15:bf:d7:f7:3e:63:ce:c8:9f:77:8d:2f:
a4:65:b7:da:a1:6d:f7:78:f9:58:61:78:41:be:55:
01:c6:a3:a0:6f:6d:03:eb:f9:33:cd:c0:ba:08:e4:
ed:4d:e3:68:81:cd:8d:3d:dc:e8:cc:21:0e:26:68:
81:78:c9:3e:66:1d:cf:04:70:18:2a:63:ae:1c:d5:
fd:b9:0c:fe:ab:67:64:9f:ac:56:c0:8c:e0:d2:b4:
9b:52:f4:cf:9b:b4:b4:50:7b:47:24:73:bd:14:aa:
5d:6a:47:be:3c:9b:06:58:a5:0a:d6:55:cf:d3:9f:
be:6c:be:0d:09:ea:61:26:bd:8d:a0:37:c5:4f:f4:
4d:b0:b7:70:2c:62:e1:91:65:e6:c5:f4:a1:18:92:
6a:65:c6:49:45:e5:29:49:07:dc:5a:cd:fa:c1:2a:
89:63:eb:f8:36:05:d4:ef:98:68:11:81:e4:00:96:
eb:5e:6a:01:6a:d7:b4:b4:b3:da:30:ed:0e:cb:8f:
2d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:74:81:59:CF:09:1C:82:B2:20:AC:D7:EC:DE:48:9A:C9:2F:F1:D1
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:1d:75:13:ee:c5:26:af:e2:1f:4f:48:9a:f5:61:80:31:e8:
46:9a:ef:e2:39:aa:77:2e:a5:52:0e:63:04:3c:92:48:8f:04:
fd:b9:b9:cd:7b:5a:b8:5b:46:73:18:83:50:50:3e:84:79:f3:
7d:10:9b:99:f3:05:e9:56:82:c2:44:78:0c:58:a4:c4:22:cd:
74:70:5f:5a:7d:1c:a0:18:7b:95:c3:63:59:8f:b6:83:a1:be:
f4:cd:6d:d0:93:0e:21:29:fe:f3:2f:78:90:f2:2b:68:d8:02:
88:fc:53:4b:4d:ae:fb:27:35:ff:ee:c0:aa:bc:2c:b3:99:45:
e4:c6:5b:f7:95:94:17:83:5b:30:47:31:48:b5:dc:3f:c5:a7:
0d:39:e5:c8:91:0f:8f:69:40:f3:3e:be:57:29:d7:45:c0:d1:
78:21:74:ee:18:74:bd:b6:c7:0a:c0:0a:30:68:f7:89:d2:9b:
05:1a:be:3c:f0:c1:67:a9:ee:94:ae:6f:27:0d:10:42:14:ed:
ef:6f:05:0d:9f:90:6e:a4:63:14:12:a5:30:27:37:b5:41:e0:
e5:f5:e0:78:c4:9f:9e:0d:23:a4:6b:99:c3:0a:2d:c0:b5:9a:
6f:40:75:e9:82:0e:ae:0c:b7:3a:ef:69:4c:ec:e0:c4:dd:83:
cc:64:80:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:55 2025 by rpki-client