Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
File: SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json)
Hash identifier: h3eQAYk5RhHOGw0kaVNJjmqMpWlLqMEIZO3sepAtFbg=
Subject key identifier: 4B:A9:92:75:DA:FE:48:A4:03:1C:CA:53:E2:67:2C:5C:7A:2E:AC:61
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial: 0199FBEAB3582D8B8B3E957D5DCF0AD3F1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
Manifest number: 11D7
Signing time: Sun 19 Oct 2025 10:01:26 +0000
Manifest this update: Sun 19 Oct 2025 10:01:26 +0000
Manifest next update: Mon 20 Oct 2025 10:01:26 +0000
Files and hashes: 1: N_mB8DyGTMyRNtWdzOHezqUOwxA.roa (hash: 0iM1AEZNlQrcAYLQC9NYhgIr9GaQK1NMxQpbyZpHQKI=)
2: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: jEv8e+K/OtI/CXQwXnpyEoZsk4MEfy6oBbbsdGjJYx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b3:58:2d:8b:8b:3e:95:7d:5d:cf:0a:d3:f1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
Validity
Not Before: Oct 19 10:01:26 2025 GMT
Not After : Oct 20 10:01:26 2025 GMT
Subject: CN=4ba99275dafe48a4031cca53e2672c5c7a2eac61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c4:b3:88:68:ed:1f:17:ab:6f:8a:63:77:83:
47:5b:ef:3e:f0:5e:0d:a0:ca:b1:61:8b:6b:9b:ee:
08:39:45:72:14:02:91:93:af:b3:a8:b8:02:d9:5d:
9a:be:89:47:ac:a5:ba:33:f2:c6:aa:2d:24:2b:6e:
2b:48:26:3c:77:ec:d9:8a:62:0b:74:94:61:bd:fa:
4d:53:be:d6:3e:cb:e2:92:5a:8c:63:ed:70:cd:66:
ad:4d:e4:23:20:50:15:77:6d:b5:63:31:e7:ef:17:
09:22:e8:0d:4d:bc:64:7a:ea:86:8b:d3:1b:2d:76:
81:c9:f3:b2:60:42:a5:0a:f6:88:bc:2e:94:df:a0:
14:05:a4:9e:a4:5f:2d:8a:39:e1:13:75:ac:40:70:
c3:11:d2:58:83:a5:02:3e:55:a2:78:67:5c:0b:3d:
ad:c5:9a:98:27:0d:6d:a2:1a:b6:4e:d7:67:0a:ad:
9b:63:32:bf:e7:ec:25:8e:69:0f:50:cf:0d:cd:58:
a2:29:05:a4:01:fa:63:5d:17:3a:57:5e:ba:d9:02:
1b:72:ad:fa:eb:74:ed:9c:72:54:e5:5b:58:02:66:
f7:89:e5:85:b8:e2:95:b1:17:27:6d:a6:7f:22:42:
01:40:a1:bc:21:ef:6d:f5:4c:21:6a:b0:7e:11:ee:
31:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A9:92:75:DA:FE:48:A4:03:1C:CA:53:E2:67:2C:5C:7A:2E:AC:61
X509v3 Authority Key Identifier:
keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:00:5a:0f:76:e3:f5:aa:22:65:96:3e:91:39:1b:a8:74:dc:
72:0f:49:64:0e:0b:e6:0a:38:28:46:69:eb:45:7b:a8:ed:7f:
aa:63:9c:dd:f9:9b:bb:1d:c1:ad:55:61:93:72:d4:21:0c:4d:
8f:ef:43:bb:22:6a:3e:c0:ac:ce:38:6a:aa:a0:10:41:53:b5:
04:cf:3d:2a:02:fa:e7:06:98:e6:93:5d:29:cf:43:db:50:09:
d8:a5:5a:6d:c2:e2:b1:da:13:e6:16:61:0e:0e:d8:97:5e:f3:
c8:ec:b5:1a:0d:cc:49:bd:96:cb:29:b1:74:1f:6e:bf:44:ae:
fe:9c:ad:14:da:82:ab:80:7e:d2:68:ba:64:36:98:10:8f:e4:
00:1b:94:0b:ec:d3:95:dc:32:06:4e:68:b9:3f:f3:62:a8:67:
4e:bb:45:b9:b2:87:4d:1d:5f:17:b6:28:9d:98:ec:03:78:c6:
c7:e8:1f:0b:da:8b:38:7c:da:10:94:f0:74:3d:9b:41:12:f3:
c0:47:23:f9:e7:ec:23:8d:d0:7f:e9:66:4d:fd:d8:b7:66:7e:
fa:a3:33:ad:90:2e:a0:99:a4:65:11:87:58:e4:8a:e2:71:54:
fd:a7:19:2d:70:43:37:40:16:13:4e:31:02:83:d0:2d:4b:7f:
4a:5d:e0:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76rNYLYuLPpV9Xc8K0/HJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTE5NjczZGQwYTljZjU3ODk1NTIwYWYzN2MyYTgxODNk
Y2UxNjgwHhcNMjUxMDE5MTAwMTI2WhcNMjUxMDIwMTAwMTI2WjAzMTEwLwYDVQQD
Eyg0YmE5OTI3NWRhZmU0OGE0MDMxY2NhNTNlMjY3MmM1YzdhMmVhYzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MSziGjtHxerb4pjd4NHW+8+8F4N
oMqxYYtrm+4IOUVyFAKRk6+zqLgC2V2avolHrKW6M/LGqi0kK24rSCY8d+zZimIL
dJRhvfpNU77WPsviklqMY+1wzWatTeQjIFAVd221YzHn7xcJIugNTbxkeuqGi9Mb
LXaByfOyYEKlCvaIvC6U36AUBaSepF8tijnhE3WsQHDDEdJYg6UCPlWieGdcCz2t
xZqYJw1tohq2TtdnCq2bYzK/5+wljmkPUM8NzViiKQWkAfpjXRc6V1662QIbcq36
63TtnHJU5VtYAmb3ieWFuOKVsRcnbaZ/IkIBQKG8Ie9t9UwharB+Ee4xewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEupknXa/kikAxzKU+JnLFx6LqxhMB8GA1UdIwQY
MBaAFEhRlnPdCpz1eJVSCvN8KoGD3OFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zYmQ1OWEtMmQwYy00MDkzLTkxM2Et
ZmUzNmNlZGE2MzE2LzEvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8zYmQ1OWEtMmQwYy00MDkzLTkxM2EtZmUzNmNlZGE2MzE2
LzEvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwBaD3bj
9aoiZZY+kTkbqHTccg9JZA4L5go4KEZp60V7qO1/qmOc3fmbux3BrVVhk3LUIQxN
j+9DuyJqPsCszjhqqqAQQVO1BM89KgL65waY5pNdKc9D21AJ2KVabcLisdoT5hZh
Dg7Yl17zyOy1Gg3MSb2WyymxdB9uv0Su/pytFNqCq4B+0mi6ZDaYEI/kABuUC+zT
ldwyBk5ouT/zYqhnTrtFubKHTR1fF7YonZjsA3jGx+gfC9qLOHzaEJTwdD2bQRLz
wEcj+efsI43Qf+lmTf3Yt2Z++qMzrZAuoJmkZRGHWOSK4nFU/acZLXBDN0AWE04x
AoPQLUt/Sl3giQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:40 2025 by rpki-client