Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
File: SFk-QNpaUvMi21oEwg-0htThVQI.mft (raw, json)
Hash identifier: xrUI8+S5z9h/Uz5Dk4sw8Kyd3GTjY3y/JVK5ZltUghI=
Subject key identifier: 4A:7E:CB:1B:DE:84:FB:9A:D6:18:1F:80:85:3A:19:F7:DE:90:8D:A5
Authority key identifier: 48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
Certificate issuer: /CN=48593e40da5a52f322db5a04c20fb486d4e15502
Certificate serial: 0199FDDA563DC6A95D07365E995F90E3F490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
Manifest number: 139E
Signing time: Sun 19 Oct 2025 19:02:48 +0000
Manifest this update: Sun 19 Oct 2025 19:02:48 +0000
Manifest next update: Mon 20 Oct 2025 19:02:48 +0000
Files and hashes: 1: SFk-QNpaUvMi21oEwg-0htThVQI.crl (hash: kcnxkMkMG7YofamCNbTBLBouh9xIEr6U9k0pc0fZLJA=)
2: Xe1gxuRIIOL95lwNFDlJJ4LeD98.roa (hash: E3ThdKoNF/zSVQO/0Rh8O4e1tJqwTsPdKIVV0WmD0l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:56:3d:c6:a9:5d:07:36:5e:99:5f:90:e3:f4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48593e40da5a52f322db5a04c20fb486d4e15502
Validity
Not Before: Oct 19 19:02:48 2025 GMT
Not After : Oct 20 19:02:48 2025 GMT
Subject: CN=4a7ecb1bde84fb9ad6181f80853a19f7de908da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:d1:a6:54:95:df:ea:1b:ec:db:f8:1e:c5:
c1:e6:ef:b0:1a:d2:62:bb:35:cb:d0:b2:dd:03:62:
82:25:81:ae:eb:3a:d8:c3:af:db:ac:73:ee:71:e1:
8e:6c:b4:f1:20:84:70:7b:d4:4c:ef:63:7d:f5:ff:
28:10:f0:e2:72:83:a6:c0:c4:94:6c:8f:02:aa:fe:
7e:52:18:3e:f8:46:47:8a:6c:63:6a:3f:7e:c6:67:
23:9d:55:2e:d2:dc:6a:a2:39:9c:db:ed:63:f9:98:
80:a3:a0:70:22:c1:6a:f2:00:26:07:fa:18:36:58:
d9:6c:cd:07:cc:b6:29:ec:ec:df:53:d3:50:79:43:
a7:4d:61:08:63:c4:ef:40:2b:4a:38:0d:5e:99:48:
e7:18:9c:61:cf:6a:69:9c:b4:1c:00:b3:82:f2:81:
f3:ff:94:65:06:c6:29:84:5e:3e:95:0e:db:4c:e6:
28:64:b3:12:7b:b5:7a:24:d4:fa:d8:a5:55:99:fc:
42:cc:86:42:d5:d3:fb:d1:3f:b8:40:9b:cb:41:a3:
b2:c7:ff:13:ca:ef:15:a8:1d:ba:5d:42:f6:9c:a5:
71:07:4e:ad:a1:ea:b0:2a:d9:22:4a:ff:bd:c5:4d:
f6:a4:7f:21:ff:31:59:b2:ab:29:52:90:ec:df:9a:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7E:CB:1B:DE:84:FB:9A:D6:18:1F:80:85:3A:19:F7:DE:90:8D:A5
X509v3 Authority Key Identifier:
keyid:48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:24:3f:03:a5:b0:c1:3b:04:e4:9d:ed:11:c6:12:3f:64:4f:
df:3c:b0:24:9d:57:8a:6b:19:c6:c9:16:6e:d5:34:e5:a9:57:
57:7d:d2:80:03:e8:bd:af:72:e7:f1:8c:46:06:f9:f9:e8:4c:
fd:43:65:77:24:6e:53:48:81:9a:0b:75:a2:71:db:e9:72:ec:
b7:b4:f1:41:e8:bd:ea:8e:f0:35:aa:2a:67:bf:c2:1a:99:dd:
bb:3d:9d:37:f1:cc:93:35:35:50:2a:00:e8:4d:97:0c:a7:0d:
75:9e:cf:f6:23:7d:2d:f0:e2:7d:10:c8:9b:43:2a:a9:0c:a3:
a5:e6:d0:aa:b4:e4:fc:35:a7:c5:93:83:67:4f:c5:c1:84:f2:
6c:0a:d3:e6:a0:ed:ed:e0:b5:19:c8:11:f9:d8:fb:9f:ba:1e:
5b:ea:f7:0c:45:f1:1e:20:08:b3:13:85:81:c0:e2:da:c4:21:
7e:6c:10:ef:c2:97:68:3a:75:2e:b9:f0:6e:fe:fb:7c:ab:bb:
c4:2e:25:54:73:2c:44:13:52:3d:68:4c:7f:9d:1b:7f:59:06:
41:cf:7f:b1:26:48:b3:23:0b:f3:8f:50:e0:7d:75:cf:98:46:
dc:3d:0c:0a:ba:cf:29:b5:f6:b5:1f:50:4e:3b:87:64:e2:12:
15:69:3f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:00:24 2025 by rpki-client