Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
File: SF92J0yAXSWxFaOtuh0uoVTe6tc.mft (raw, json)
Hash identifier: Y36VEHAzhR7CTnathNRviVWg+/1hjNEfOrBp7R2/8K0=
Subject key identifier: B4:79:D1:C9:E3:88:E8:A5:8D:B2:7A:16:6A:ED:1A:76:AF:4C:9B:35
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial: 019A0035A001DCE5761F7F4617A3498B4F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
Manifest number: 10D7
Signing time: Mon 20 Oct 2025 06:01:45 +0000
Manifest this update: Mon 20 Oct 2025 06:01:45 +0000
Manifest next update: Tue 21 Oct 2025 06:01:45 +0000
Files and hashes: 1: JWbxkXMT1AbpQisEDcJK6XiKzB0.roa (hash: j5i4M4w+YBqEaXEsOz14p6tq/xzrFVxmrAYSCZG3o+M=)
2: S81leN1fuHkrYmn7HxOWRSa_EgA.roa (hash: jKDEc5FdU7Yds63BEna9vHfX9LdcVE/wlCXgfCTj304=)
3: SF92J0yAXSWxFaOtuh0uoVTe6tc.crl (hash: gZGlXHoEu2PYFoyVKZ/dAM8GqWUcZrPQ8ay7QlX+Q2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:a0:01:dc:e5:76:1f:7f:46:17:a3:49:8b:4f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
Validity
Not Before: Oct 20 06:01:45 2025 GMT
Not After : Oct 21 06:01:45 2025 GMT
Subject: CN=b479d1c9e388e8a58db27a166aed1a76af4c9b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b8:0b:36:87:a8:95:ef:5c:f6:20:00:d5:3b:
c5:c4:bc:8e:ee:2d:0c:ac:b1:76:5c:24:0d:75:18:
57:4a:be:64:7d:97:7d:d4:fd:72:c2:e1:3d:19:f1:
5f:fb:5c:a7:4e:92:4c:9f:a3:2f:e8:a9:28:be:39:
54:58:25:1f:20:f9:87:3f:99:06:ae:8a:42:39:c8:
4a:b3:eb:21:db:d9:02:23:29:0e:31:7d:0e:f8:3d:
12:4c:75:59:cd:bc:bf:55:29:05:1c:04:dc:c3:2f:
a7:da:50:b7:44:de:16:18:f4:2c:38:23:6c:1a:36:
a5:35:70:d4:06:5d:c7:04:d9:c6:50:3f:61:6c:fa:
f7:d2:78:10:54:8e:2d:bc:26:3c:d5:f0:cf:d6:f9:
fd:fe:fc:eb:9f:7d:66:70:cd:d4:4f:ee:e3:c2:fd:
a2:2e:71:dd:e3:91:d9:38:6a:99:27:9f:f0:06:5b:
66:c8:cf:f1:9f:96:cf:3b:d9:b8:ab:66:80:c0:f5:
f4:37:71:5c:f2:f6:19:18:a3:2f:2d:98:f2:12:cf:
69:e4:9b:c9:a7:29:d0:f7:6e:d5:81:e1:78:16:f1:
de:7e:25:0e:13:3d:a4:e2:85:0e:b3:f2:d8:df:4c:
2b:dd:f0:91:33:18:60:e3:6e:60:25:65:f9:cf:ed:
3a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:79:D1:C9:E3:88:E8:A5:8D:B2:7A:16:6A:ED:1A:76:AF:4C:9B:35
X509v3 Authority Key Identifier:
keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:80:47:18:33:07:2b:fa:e2:c3:f1:e0:ab:ef:e2:d3:1f:09:
e1:a4:02:b9:47:40:bc:4b:74:e2:ee:14:3a:b1:d7:a9:f6:99:
b0:e7:2f:6d:ed:f3:8a:3a:ed:9a:63:bb:08:48:85:f2:9e:ba:
c3:a4:90:4b:20:f3:0a:fe:a9:5d:72:a7:c1:59:de:9f:7d:aa:
14:f8:08:09:02:e7:02:e9:5e:87:1e:0c:55:27:1f:2a:a0:3c:
28:00:7e:4e:fe:b5:39:59:8b:fe:cc:23:5d:6a:c8:03:24:69:
6d:e8:eb:12:09:2b:63:0c:ea:c1:9b:2d:5f:4c:99:b0:7f:63:
79:1e:c6:47:17:73:4d:18:3e:65:fb:c1:bd:de:07:75:87:b2:
2a:0c:fd:af:75:2b:2f:b4:cd:63:a9:a8:db:21:ba:ae:06:43:
85:de:72:2f:06:f2:cd:fb:9a:a6:ef:9c:51:70:6b:5c:7d:5d:
c5:f6:f5:d2:68:77:59:84:f2:4b:31:b3:f7:c8:cc:7a:7e:58:
48:b5:e5:bc:8d:e7:3c:08:25:74:86:a8:57:04:19:9f:0e:48:
3b:02:5a:23:e0:73:0a:9c:5e:d6:b1:6e:09:6e:5b:b6:48:79:
11:27:13:34:4e:42:d9:9a:2c:5b:f2:84:c8:af:58:5b:df:6f:
b0:93:db:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:15:56 2025 by rpki-client