Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
File: SInGeZ92tFIvCZH2uTNP1ttUHVs.mft (raw, json)
Hash identifier: 8siVii8m1MvRAjwZfV2nBjxkKnMAz9Lt3+enH4fbBKo=
Subject key identifier: CD:D7:6A:7C:31:82:0B:5F:B0:ED:C5:BB:9E:B5:58:EE:05:09:18:7F
Authority key identifier: 48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B
Certificate issuer: /CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
Certificate serial: 0199FC2167F8A8FD3D55B67F001EB4CBCC74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
Manifest number: 11DD
Signing time: Sun 19 Oct 2025 11:01:11 +0000
Manifest this update: Sun 19 Oct 2025 11:01:11 +0000
Manifest next update: Mon 20 Oct 2025 11:01:11 +0000
Files and hashes: 1: SInGeZ92tFIvCZH2uTNP1ttUHVs.crl (hash: 4inQ/Lpm4PZHczXCdrSMb+txRZXHQw3S8IbJbyGve9g=)
2: W9LIimzmvADZP7RqK5-CS9hx7F8.roa (hash: 0bKnzD+/f66zg904NSAl0qUDPLAd/0RlfEWM3sOW+wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:67:f8:a8:fd:3d:55:b6:7f:00:1e:b4:cb:cc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
Validity
Not Before: Oct 19 11:01:11 2025 GMT
Not After : Oct 20 11:01:11 2025 GMT
Subject: CN=cdd76a7c31820b5fb0edc5bb9eb558ee0509187f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:82:e1:2e:9d:2b:5b:a8:bf:69:46:d1:76:f1:
32:5d:bf:5c:63:9c:c7:28:9b:27:60:39:ee:fe:62:
42:bd:f1:83:e7:2a:77:d0:68:d8:80:e5:59:41:8f:
19:87:f3:e0:92:7e:4b:0f:0c:f1:27:2a:d1:8a:97:
16:9f:6b:75:13:ce:16:c4:06:96:2b:81:07:73:f7:
2f:25:cb:e3:ac:2d:81:9e:6d:24:27:0e:0a:16:0b:
d4:6a:12:80:2f:41:81:f9:77:30:a6:43:ca:46:7e:
22:7b:50:62:6a:c4:e9:80:9c:ee:91:96:9a:0d:91:
e0:ed:5f:41:a6:af:93:5b:db:a9:8a:c0:ff:f9:a9:
56:29:8d:f2:8c:10:5d:e7:d1:ac:9f:61:87:6c:a0:
9d:ce:b1:08:8f:f7:b2:bd:58:f9:1f:f6:01:7f:5c:
be:b7:a2:6b:dd:05:57:62:5d:7f:07:ab:35:7d:a5:
3b:67:2b:07:c1:2b:f4:23:4b:ba:34:56:81:76:75:
f5:96:77:f7:b2:f4:4f:95:a8:97:b4:be:c2:62:81:
25:3d:5a:a9:cf:7d:4e:29:20:d2:52:77:04:4a:03:
51:3f:0b:eb:79:b3:76:d3:2a:6c:60:23:d6:64:aa:
53:9f:08:31:28:17:ad:ee:c2:0a:5c:41:62:be:c2:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D7:6A:7C:31:82:0B:5F:B0:ED:C5:BB:9E:B5:58:EE:05:09:18:7F
X509v3 Authority Key Identifier:
keyid:48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ba:f4:f6:4f:56:d4:0c:b4:8a:7e:95:41:87:d3:58:46:6e:
08:1b:1d:b1:21:1d:8c:fb:f6:e3:2b:bb:28:5b:b8:01:cb:30:
23:65:d1:b2:25:2d:f0:70:59:1b:1c:26:fe:9f:4e:7e:f9:f3:
cc:5d:be:2b:bd:fc:88:ce:2e:72:7a:de:db:3e:48:df:8a:58:
fe:d6:91:a6:64:0b:d5:d3:18:4b:53:67:35:0b:1d:69:82:c5:
a7:89:4a:e5:bf:70:42:48:81:b7:3b:bd:eb:de:ac:eb:f8:ed:
5d:b4:e4:de:12:c4:d3:62:35:7c:60:2b:ff:ed:47:a3:98:56:
ea:96:6f:7e:7e:b1:20:46:9d:d8:5a:7b:18:68:5a:38:11:a5:
3a:fe:4a:3a:29:88:58:6d:29:fe:c8:07:33:4e:a1:69:57:c1:
b1:0e:d9:94:ad:18:05:f2:d1:67:b8:2b:d3:76:ea:bf:7f:ff:
77:87:df:b4:ca:8f:00:18:e9:07:18:1a:b4:cd:e0:f9:4a:2b:
8d:83:9c:88:25:1a:ab:e2:f4:da:27:b4:35:d2:76:32:21:71:
0b:07:b0:86:66:5b:15:d5:eb:8f:0f:7c:a1:0c:e1:37:d2:e3:
c4:65:ec:47:c5:de:20:e5:c6:f3:e3:f3:f0:97:a7:d7:ed:10:
57:c6:c8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:03 2025 by rpki-client