
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
File: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft (raw, json)
Hash identifier: BPfQarOrGwYBip3pTdxOZqQCc7AiSP7PQScuTD7sWF8=
Subject key identifier: 23:B3:41:16:13:D7:93:56:E6:B7:4A:8F:F4:2D:D3:06:D6:8A:6C:3D
Authority key identifier: 48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
Certificate issuer: /CN=480423aa17d04f56c690040345d6762bbfd1f88b
Certificate serial: 0199FBEBA9402C1BA073F232C19566BC11E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
Manifest number: 119A
Signing time: Sun 19 Oct 2025 10:02:29 +0000
Manifest this update: Sun 19 Oct 2025 10:02:29 +0000
Manifest next update: Mon 20 Oct 2025 10:02:29 +0000
Files and hashes: 1: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl (hash: RBtOyaEeUAEXFusscW0/uDJfq7dDazGIPJeHYvf3C0M=)
2: a4eWXe9mLzZdOuJF4g-i_sTPTK8.roa (hash: Nl6At3QtcKnCDV2p7jnqUB0ktT1iDDCBQexgyMCnTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a9:40:2c:1b:a0:73:f2:32:c1:95:66:bc:11:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480423aa17d04f56c690040345d6762bbfd1f88b
Validity
Not Before: Oct 19 10:02:29 2025 GMT
Not After : Oct 20 10:02:29 2025 GMT
Subject: CN=23b3411613d79356e6b74a8ff42dd306d68a6c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e3:87:3a:70:9a:fd:1d:9b:c7:73:4a:1f:95:
8a:ee:b8:5a:f1:43:4b:cb:37:cd:4c:d0:6a:56:00:
80:88:0f:34:ea:72:cd:e0:75:9e:04:6d:1e:40:a8:
d5:e5:16:9a:0e:a9:36:27:66:1d:7c:f8:c8:1c:44:
b6:94:df:3a:5e:47:33:75:48:82:43:35:12:60:4f:
b4:65:12:13:48:87:41:14:3c:9c:78:2d:bb:cb:4c:
e4:2b:27:d3:30:c9:e0:09:30:36:ea:21:0c:dc:92:
d6:37:ab:ab:c7:cf:42:7d:09:5e:49:6f:27:f9:4e:
35:57:3b:5c:6f:fd:e9:02:f1:4c:8a:ad:13:3a:a6:
00:af:24:e2:5d:50:50:f6:ca:95:da:1b:86:27:f1:
55:1c:cd:2a:62:f7:9f:d2:52:d6:40:a5:f4:85:11:
c1:48:5c:74:c5:5d:c5:0e:5b:db:41:0e:9a:d6:e0:
4e:9a:f4:ec:18:24:b1:f5:7d:e1:be:4d:eb:01:c0:
cd:89:e0:3a:cb:d4:06:c7:7e:7b:59:45:b9:18:da:
18:5a:79:63:0f:ea:82:01:c6:61:31:8b:e0:da:95:
d6:69:cd:12:43:1d:f3:5e:21:83:36:8b:b6:9e:85:
d3:29:d2:d1:02:0b:b9:5c:fa:1a:4e:6e:9d:19:dd:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B3:41:16:13:D7:93:56:E6:B7:4A:8F:F4:2D:D3:06:D6:8A:6C:3D
X509v3 Authority Key Identifier:
keyid:48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:47:4c:62:4b:63:b3:8c:c2:40:c3:a1:54:64:da:b9:06:d4:
42:cd:3d:78:ae:fc:f3:6f:e1:a9:b7:89:67:93:f2:4d:97:1d:
54:a5:a8:0a:07:35:ce:56:74:59:65:5d:35:cc:fc:26:48:d0:
c6:bd:9e:61:3d:68:1d:3c:30:38:04:fa:ae:1d:e9:c5:c6:f5:
60:a3:c8:1d:90:ee:e3:ab:f1:2b:e0:d0:cf:72:00:05:0b:7e:
b7:7f:95:58:64:bb:60:7e:f1:e3:22:64:c1:82:ed:26:e0:17:
5b:24:37:06:88:2f:44:69:f3:dd:50:34:4e:b0:a3:49:2d:ab:
95:89:50:32:dc:e5:fa:53:9c:53:d9:df:70:9b:bc:10:c1:89:
ca:0a:e2:4b:94:8b:06:19:72:91:6c:ec:b8:08:25:15:f9:34:
41:4d:41:21:b7:37:20:4a:12:f0:66:8b:b5:0a:58:ac:72:6a:
a2:89:95:8b:6d:22:06:76:c3:6f:d4:83:87:23:62:89:11:59:
17:2c:8a:4c:c2:4d:fc:92:eb:83:04:32:67:5c:12:f0:51:5e:
94:82:c4:64:b1:45:77:bc:fa:15:75:97:62:80:33:4a:d8:9a:
e9:97:4c:d4:41:8e:38:5c:c6:43:46:fc:bb:61:a4:c0:5a:bb:
a9:c8:7f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:36 2025 by rpki-client