Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
File: sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json)
Hash identifier: Mx67GoxfY4klncLQG0/vVXVCkhqoPYP+5ondroKkgnc=
Subject key identifier: 89:3E:F2:40:EB:A5:B2:DE:51:D3:2B:D1:60:2B:5A:5A:70:60:92:4F
Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
Certificate issuer: /CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Certificate serial: 0199FDDA573033DBD481B46E7487A19F0355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
Manifest number: 0A74
Signing time: Sun 19 Oct 2025 19:02:48 +0000
Manifest this update: Sun 19 Oct 2025 19:02:48 +0000
Manifest next update: Mon 20 Oct 2025 19:02:48 +0000
Files and hashes: 1: YijLZfZ1VVcQMfbO2kW4jsYTug8.roa (hash: f055fbJfO/jOl/pVZwNG+0XakEEdz2iyjouPpXHwKII=)
2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: zVyMnDLOFhF/gYvvDEo40XD5joKwsA/BMpfci9g787I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:57:30:33:db:d4:81:b4:6e:74:87:a1:9f:03:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Validity
Not Before: Oct 19 19:02:48 2025 GMT
Not After : Oct 20 19:02:48 2025 GMT
Subject: CN=893ef240eba5b2de51d32bd1602b5a5a7060924f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:46:08:79:69:c2:d6:bd:a5:fd:b3:fd:1d:
f3:fc:a1:28:b1:52:f8:e7:b4:60:03:71:13:8c:d0:
a7:db:63:6c:24:ca:b7:47:76:2a:d0:cb:5b:1d:28:
e1:8a:d2:7f:50:2d:7e:49:40:04:fd:cb:d0:64:aa:
ad:66:f6:cb:6e:a6:29:7f:f5:4f:28:e5:22:18:fe:
67:9c:53:3e:76:4e:b4:97:b7:99:c3:03:6a:9e:3b:
f3:0c:b1:e8:6e:3c:1e:c5:9a:05:c5:69:ee:1c:a9:
79:51:0c:51:73:20:2a:2e:88:ab:9a:2a:f5:1c:79:
b7:9e:dd:e3:5d:ad:ac:20:b1:c7:08:70:ba:fb:ad:
d3:92:6b:08:cd:54:72:b3:67:03:fb:ed:e3:88:4d:
ac:87:d7:2c:f5:1e:bb:9d:8a:01:f3:37:d5:12:dd:
26:58:67:1b:ff:d3:9c:fd:d8:49:68:35:ed:6c:9e:
af:f1:9d:be:b4:25:55:85:87:4b:24:ff:fa:31:41:
49:83:21:2c:3e:d1:b3:f7:c5:15:c6:c0:72:0e:63:
61:e7:c5:e5:f6:7a:09:1d:47:35:ee:b8:27:93:ab:
9f:81:10:1b:fc:bc:32:92:a2:c4:fa:33:de:72:a8:
99:6e:51:19:62:05:3b:da:05:e5:1e:a6:57:93:1a:
ed:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3E:F2:40:EB:A5:B2:DE:51:D3:2B:D1:60:2B:5A:5A:70:60:92:4F
X509v3 Authority Key Identifier:
keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:55:27:8a:a8:a7:9e:b5:98:68:26:75:d4:fb:41:6c:c7:83:
9b:78:e1:f6:84:6a:d3:d3:84:1e:29:c3:8c:24:46:89:53:d0:
f0:7c:1c:19:22:9d:18:91:79:af:f1:cb:01:7a:81:d6:c5:c8:
db:a2:c5:5c:ba:5c:3a:67:7a:ff:15:a7:bd:27:25:08:47:50:
0f:01:2f:0c:5b:e4:84:54:49:c5:4f:cb:b5:1b:cf:4e:4c:70:
1e:77:d3:21:58:17:05:25:c4:99:69:4c:98:f9:f2:bb:95:66:
ff:3b:2e:0c:ab:29:ef:d3:bd:59:be:18:ac:64:80:99:8b:67:
e1:14:cb:21:c2:20:a5:5c:46:c9:b7:1f:d4:f6:bc:76:d4:5c:
fb:cd:23:65:d1:b1:11:07:9e:1a:b3:d6:75:bf:c5:ef:74:e0:
63:18:e5:00:c0:a4:05:2a:8c:b4:8f:77:dc:80:82:cd:62:5b:
f3:14:6e:77:e9:01:c3:1b:36:a6:dc:cc:7f:ca:fa:cb:93:4e:
1f:e7:60:2b:b0:94:4f:ac:e0:07:06:12:ce:2d:93:23:71:91:
6e:6d:05:b8:94:46:e4:54:84:9d:f0:8b:41:7b:ed:52:eb:96:
da:ec:7f:1e:02:09:30:6c:bb:24:7d:93:0b:0b:f9:26:5e:b6:
5a:40:e2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:03 2025 by rpki-client