Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
File: SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft (raw, json)
Hash identifier: XLgYz/BvnxA5uHnOn6QALqjrPzEPiZZdHfeeAeQq78o=
Subject key identifier: 2A:37:A5:07:A1:66:7A:62:0B:8D:85:AE:10:54:06:F1:74:68:27:92
Authority key identifier: 48:94:9D:3C:87:35:03:DB:D2:96:BD:A6:0E:B7:77:BC:54:1D:51:4E
Certificate issuer: /CN=48949d3c873503dbd296bda60eb777bc541d514e
Certificate serial: 019A03355B9C8AE49F614EBAACBDE06302FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
Manifest number: 04A1
Signing time: Mon 20 Oct 2025 20:00:19 +0000
Manifest this update: Mon 20 Oct 2025 20:00:19 +0000
Manifest next update: Tue 21 Oct 2025 20:00:19 +0000
Files and hashes: 1: SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl (hash: loSgHXCmJg/IHpXvxv9r35pe71SP6dzQz5RdrwreQIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:35:5b:9c:8a:e4:9f:61:4e:ba:ac:bd:e0:63:02:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48949d3c873503dbd296bda60eb777bc541d514e
Validity
Not Before: Oct 20 20:00:19 2025 GMT
Not After : Oct 21 20:00:19 2025 GMT
Subject: CN=2a37a507a1667a620b8d85ae105406f174682792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d0:60:db:30:b8:08:43:93:85:9a:f5:a2:13:
ad:5b:72:73:b2:0a:f7:fc:cf:f8:2c:a2:59:b5:70:
98:37:54:d7:e1:c1:b5:9a:a3:00:a7:02:f3:90:0b:
23:03:ca:5e:5e:51:e6:4b:e7:c4:ab:3a:73:9b:78:
1d:2c:cc:83:5e:ca:e2:86:e3:40:61:0f:f5:02:d7:
cf:5c:a9:cd:b4:80:80:77:fd:30:6b:04:ab:a0:2e:
6c:3f:90:29:1d:50:03:55:85:38:4c:a9:5f:eb:1c:
8a:65:9b:bb:28:36:cd:68:80:25:4a:00:da:e9:79:
e0:f8:c5:68:11:17:82:32:91:5d:7b:b4:88:13:f2:
bc:0f:a4:9f:37:cf:44:66:ea:fc:88:72:90:7e:19:
75:ae:0d:0e:cc:5f:de:24:81:87:2d:c5:fd:16:b0:
1b:38:9f:06:22:a6:05:c9:04:b1:eb:c5:1b:ad:45:
52:17:78:28:43:d2:a0:26:d5:d2:2e:7b:15:34:62:
0a:f4:37:bd:d2:4a:35:d9:30:64:76:c8:25:e0:28:
27:6b:02:04:5f:ca:a6:27:a6:fd:b2:c0:14:41:7d:
4e:c7:cd:97:d9:16:35:60:61:fc:c0:0c:66:4e:42:
6a:b1:8c:9e:5e:8d:db:e5:67:d3:de:15:f2:2e:eb:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:37:A5:07:A1:66:7A:62:0B:8D:85:AE:10:54:06:F1:74:68:27:92
X509v3 Authority Key Identifier:
keyid:48:94:9D:3C:87:35:03:DB:D2:96:BD:A6:0E:B7:77:BC:54:1D:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:06:f9:54:72:e0:ad:ba:3f:23:7e:94:d5:d1:58:98:44:21:
1d:0d:4e:c1:54:81:b9:95:25:2b:5b:e1:dc:6a:23:e8:38:18:
3f:86:0c:23:fc:b0:22:db:cd:bc:0c:a8:bf:09:bb:aa:c1:3e:
dc:93:e7:01:2f:d2:03:8a:24:69:0b:6c:dc:2a:6a:20:0b:7b:
ca:66:94:1e:2a:1c:74:8c:96:2b:8d:d0:f1:b4:78:bc:d5:88:
40:77:c7:a0:73:bb:f5:45:c1:e6:fb:a4:b3:e4:93:ce:96:0e:
39:ce:ba:f2:c8:da:7f:92:de:60:8d:19:12:b6:8d:94:de:14:
8f:fa:22:09:14:17:73:ff:8f:80:dd:6f:77:63:38:69:19:14:
0d:9a:ce:0f:54:d7:7e:61:91:a1:d6:2f:8c:b9:4d:56:d1:ed:
a0:c5:2b:a7:b0:7f:4b:c7:63:f7:ef:65:d4:13:c0:82:8e:fa:
08:d8:78:a7:44:28:b7:13:3f:61:b1:bf:6f:47:51:de:2f:61:
4e:46:00:fd:a7:42:d5:e6:fa:6a:f4:01:2e:3d:74:e7:ab:d8:
71:2c:71:b8:7a:3d:9d:2e:16:b1:0a:e8:fb:f2:9a:68:eb:40:
96:95:22:6c:07:3a:fb:90:63:7e:55:ec:3e:7e:a7:fc:8c:b9:
f7:33:a1:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoDNVuciuSfYU66rL3gYwL8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4OTQ5ZDNjODczNTAzZGJkMjk2YmRhNjBlYjc3N2JjNTQx
ZDUxNGUwHhcNMjUxMDIwMjAwMDE5WhcNMjUxMDIxMjAwMDE5WjAzMTEwLwYDVQQD
EygyYTM3YTUwN2ExNjY3YTYyMGI4ZDg1YWUxMDU0MDZmMTc0NjgyNzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNBg2zC4CEOThZr1ohOtW3Jzsgr3
/M/4LKJZtXCYN1TX4cG1mqMApwLzkAsjA8peXlHmS+fEqzpzm3gdLMyDXsrihuNA
YQ/1AtfPXKnNtICAd/0wawSroC5sP5ApHVADVYU4TKlf6xyKZZu7KDbNaIAlSgDa
6Xng+MVoEReCMpFde7SIE/K8D6SfN89EZur8iHKQfhl1rg0OzF/eJIGHLcX9FrAb
OJ8GIqYFyQSx68UbrUVSF3goQ9KgJtXSLnsVNGIK9De90ko12TBkdsgl4CgnawIE
X8qmJ6b9ssAUQX1Ox82X2RY1YGH8wAxmTkJqsYyeXo3b5WfT3hXyLuuYpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCo3pQehZnpiC42FrhBUBvF0aCeSMB8GA1UdIwQY
MBaAFEiUnTyHNQPb0pa9pg63d7xUHVFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0pTZFBJYzFBOXZTbHIybURyZDN2RlFkVVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lNGU2MzctNzI5Yi00N2JlLWEwYWIt
NTM0OTYyMDE5NDYwLzEvU0pTZFBJYzFBOXZTbHIybURyZDN2RlFkVVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lNGU2MzctNzI5Yi00N2JlLWEwYWItNTM0OTYyMDE5NDYw
LzEvU0pTZFBJYzFBOXZTbHIybURyZDN2RlFkVVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuwb5VHLg
rbo/I36U1dFYmEQhHQ1OwVSBuZUlK1vh3Goj6DgYP4YMI/ywItvNvAyovwm7qsE+
3JPnAS/SA4okaQts3CpqIAt7ymaUHiocdIyWK43Q8bR4vNWIQHfHoHO79UXB5vuk
s+STzpYOOc668sjaf5LeYI0ZEraNlN4Uj/oiCRQXc/+PgN1vd2M4aRkUDZrOD1TX
fmGRodYvjLlNVtHtoMUrp7B/S8dj9+9l1BPAgo76CNh4p0QotxM/YbG/b0dR3i9h
TkYA/adC1eb6avQBLj1056vYcSxxuHo9nS4WsQro+/KaaOtAlpUibAc6+5BjflXs
Pn6n/Iy59zOh8A==
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:52:46 2025 by rpki-client