Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
File: 1SGSgT0i76BLy7JOC_D-NNjfukg.mft (raw, json)
Hash identifier: Uy7Tdb6PZm74NyQ2BxczvIfY73hIgQnQmGrUag5JNMk=
Subject key identifier: B9:2F:3F:A2:46:FE:13:EE:F9:5A:21:82:16:2C:D8:41:85:34:CF:4D
Authority key identifier: D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
Certificate issuer: /CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Certificate serial: 0199FB45FE306FC2D83D884D9341A3B8CF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
Manifest number: 0304
Signing time: Sun 19 Oct 2025 07:01:32 +0000
Manifest this update: Sun 19 Oct 2025 07:01:32 +0000
Manifest next update: Mon 20 Oct 2025 07:01:32 +0000
Files and hashes: 1: 1SGSgT0i76BLy7JOC_D-NNjfukg.crl (hash: Ck+vkDbFRZodS0epW61t8Awoy1tahcRRJOiBhBUy8lA=)
2: eDQ7Rqa20D_hI8gI5USdLHd-gF8.roa (hash: r3EJNmKQgbbo4j5pe3uk2ZFcWeVkHRAZ7TxCivW3QgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:fe:30:6f:c2:d8:3d:88:4d:93:41:a3:b8:cf:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Validity
Not Before: Oct 19 07:01:32 2025 GMT
Not After : Oct 20 07:01:32 2025 GMT
Subject: CN=b92f3fa246fe13eef95a2182162cd8418534cf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:42:6d:63:aa:1d:cb:ca:fb:59:bc:cf:46:fa:
f2:44:58:b0:63:d9:d7:ed:df:11:4b:f9:a1:84:91:
40:ce:c7:bb:ff:a5:a3:e7:b6:51:d0:0a:82:a2:49:
7e:64:0f:84:fc:15:5d:23:7f:fc:2d:c6:ba:2d:69:
50:34:88:39:16:a0:fb:e4:a1:0e:a5:04:44:5d:4e:
8e:83:ce:eb:cb:21:8c:0b:2a:3a:82:a0:0b:7a:6d:
29:20:13:27:b3:18:98:dc:3a:31:c5:68:1f:ec:d0:
18:68:bd:b6:61:91:2b:83:c9:af:44:28:10:1e:51:
dd:a0:e5:be:43:4a:e7:ac:65:ef:8b:a2:4b:3a:dd:
c1:e1:fc:ad:5b:4f:87:06:af:60:6d:b7:6b:ca:10:
b0:86:b8:76:59:f9:19:c8:7d:30:d7:40:61:38:25:
d1:30:e3:94:7c:44:08:fc:de:e0:9b:0c:90:44:80:
c7:05:ca:6d:a5:df:cc:70:22:25:32:1c:1f:42:ed:
66:26:ff:40:8f:06:ee:24:84:49:a2:85:af:03:b9:
7c:51:bd:c2:67:cf:ad:a4:27:f3:4c:1b:34:c7:a2:
79:e8:15:67:f0:b9:52:2e:1d:a1:6e:6c:4e:08:83:
8b:15:ed:e4:24:c6:68:d1:e8:65:5d:e4:b4:42:ce:
e3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2F:3F:A2:46:FE:13:EE:F9:5A:21:82:16:2C:D8:41:85:34:CF:4D
X509v3 Authority Key Identifier:
keyid:D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:49:0c:d8:b2:21:7e:4b:71:85:0e:b9:54:04:f3:8e:2a:9b:
0f:0f:66:14:9f:be:5e:0b:4c:3f:d9:78:94:a0:96:48:2e:b5:
67:f4:8c:0b:7b:ea:54:1c:3c:75:64:7b:99:2a:37:fd:0e:1c:
af:5d:3d:22:a5:49:10:01:3d:be:51:9f:a1:58:3a:ef:09:85:
4b:cf:f5:67:de:3a:51:1a:24:e1:7c:7f:ec:33:7e:15:90:26:
78:99:7c:c1:4e:70:48:d5:3c:60:77:88:87:e6:7e:4e:75:68:
d4:f1:73:fc:c5:d6:da:e6:d0:e9:b1:ef:aa:c7:14:b9:a4:ef:
f6:ed:2e:5c:9b:61:f7:b8:77:e2:c6:b4:60:79:69:75:1a:0d:
1b:8f:60:09:62:01:4a:69:6c:19:db:0c:e9:35:13:76:13:1d:
92:ed:33:97:4b:03:6a:a7:2a:24:47:de:1b:81:39:ca:39:81:
a7:2f:ee:2f:81:b3:3c:45:2f:d1:0c:42:f2:90:14:28:b2:21:
3c:fc:a0:f0:af:ef:09:fb:c3:31:d3:c6:f5:16:aa:0b:6c:d4:
73:b9:2d:86:6c:e2:fa:f4:97:3d:72:97:90:4d:f3:a2:9a:49:
55:e1:b7:fc:2c:65:08:c1:1f:bb:36:ae:26:2f:28:66:f2:99:
66:95:a4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:55 2025 by rpki-client