Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
File: SFldSlTtZEITxEYZXjb3jsGig5k.mft (raw, json)
Hash identifier: quSghV39JwAQ6JvUW39MfNViy5ESk/ma05SwWEO6f/c=
Subject key identifier: 46:59:FC:08:1C:35:DA:0C:0B:EE:9A:65:F7:15:2C:6F:8F:14:23:C1
Authority key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
Certificate issuer: /CN=48595d4a54ed644213c446195e36f78ec1a28399
Certificate serial: 019A00A36DBF8B38FB6AF25E150B0AE3FB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 08:01:41 +0000
Manifest this update: Mon 20 Oct 2025 08:01:41 +0000
Manifest next update: Tue 21 Oct 2025 08:01:41 +0000
Files and hashes: 1: 5TwfULMH-unHdDYOcT1BkwSNVj4.roa (hash: MnqaA2gAqS7okflGRdl3L2EkczyiAqyp5YnJcnh49kE=)
2: SFldSlTtZEITxEYZXjb3jsGig5k.crl (hash: /BrUv5ThDPOfDkDb+b8BLPEj4v1tOqlpfb+D/Urul84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:6d:bf:8b:38:fb:6a:f2:5e:15:0b:0a:e3:fb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48595d4a54ed644213c446195e36f78ec1a28399
Validity
Not Before: Oct 20 08:01:41 2025 GMT
Not After : Oct 21 08:01:41 2025 GMT
Subject: CN=4659fc081c35da0c0bee9a65f7152c6f8f1423c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:ce:e7:76:83:b1:0d:31:18:12:c6:eb:30:
c8:bd:ae:27:7b:78:78:67:b8:f8:d0:7f:27:5e:33:
8e:7f:32:68:ac:11:ea:af:cc:6b:2d:99:f1:b4:84:
7d:16:79:1a:62:e4:08:2a:de:a5:63:04:91:f6:59:
fe:e5:31:d0:dc:67:dd:ca:9d:e9:a3:ba:85:f5:2f:
b8:b5:ca:28:93:df:7c:30:25:78:95:05:47:a8:ea:
d4:ab:cd:4a:b0:08:67:5a:39:74:21:b9:76:6e:4b:
9d:c6:cf:5c:78:a9:8b:52:78:15:c3:c8:ff:94:9d:
ea:6e:23:f7:f4:ad:02:46:8c:a8:1d:73:ba:f1:17:
37:a5:11:0f:ec:d7:27:5a:83:4a:29:f9:8e:cf:99:
42:b6:79:dc:22:56:ee:63:6c:37:47:47:2b:41:c7:
57:ed:96:a8:b0:c8:54:eb:1e:54:dd:91:a1:40:31:
56:44:ff:a6:b6:8a:67:98:7d:ae:05:18:27:15:c8:
45:bc:c7:19:5a:8f:3d:a2:c9:ab:d8:d8:bc:f4:8e:
70:46:24:43:79:c3:a8:a2:4b:33:f6:1c:45:44:00:
98:38:93:1b:0f:47:00:a1:a8:ee:56:43:75:3a:b4:
15:14:e1:b3:2b:d0:f4:18:cb:b2:e7:e0:c9:30:fc:
f4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:59:FC:08:1C:35:DA:0C:0B:EE:9A:65:F7:15:2C:6F:8F:14:23:C1
X509v3 Authority Key Identifier:
keyid:48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:16:8b:ee:05:6d:a8:e8:bd:58:8a:30:04:66:f2:ad:c7:c7:
4c:64:31:7d:f0:a9:a3:69:a3:e5:9f:5f:ea:9e:91:a8:50:a6:
40:5f:68:78:c4:35:c0:f2:54:24:0d:52:91:b9:e4:bd:0f:d2:
ec:8f:12:00:f6:96:47:2f:18:95:d8:06:3a:f3:bd:fb:d0:aa:
ab:2c:53:62:dd:6c:45:8b:c8:00:57:ce:b1:5f:48:87:08:aa:
e4:af:49:95:a6:81:8a:c8:5a:d7:91:6a:bf:57:2b:da:88:80:
b9:42:ef:04:27:e2:3f:ec:a5:23:5c:fc:18:52:13:25:79:6c:
d8:6a:78:e9:9f:19:87:f6:d4:12:2a:70:75:27:a7:f6:c2:ef:
89:3e:13:0c:d1:ac:fe:1e:03:f8:0e:3f:e4:24:e9:11:15:14:
a6:3e:23:6b:20:2d:71:51:64:cd:91:57:b4:69:e8:dc:6d:f4:
fb:d4:8a:54:cf:c1:e7:67:c4:46:44:c9:7b:b6:ea:f5:eb:c3:
47:d0:af:05:75:5e:a0:67:4d:73:b9:a8:88:61:bd:63:78:85:
1f:00:95:60:71:46:f5:9e:77:39:46:62:d7:9a:85:d0:7a:1b:
f3:52:b5:8d:b2:2d:fd:0d:d4:31:1a:3f:26:4f:02:03:3c:46:
40:57:03:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:00:34 2025 by rpki-client