Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
File: SGwtivTOUM5vQ-ffROC1A3AKhsA.mft (raw, json)
Hash identifier: yUxsuPBlONvvFlsFcpWTEKKtnvnNV23XCWvD/VfO4uM=
Subject key identifier: 5A:0A:60:54:23:5B:CC:1A:F4:CA:3A:7A:F0:FC:60:FC:D5:96:18:C3
Authority key identifier: 48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0
Certificate issuer: /CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0
Certificate serial: 019A01B558C77A417768B4E75AF9183BC897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
Manifest number: 07A5
Signing time: Mon 20 Oct 2025 13:00:53 +0000
Manifest this update: Mon 20 Oct 2025 13:00:53 +0000
Manifest next update: Tue 21 Oct 2025 13:00:53 +0000
Files and hashes: 1: HfFJEDDUnETMgv_-tGTektHgOG0.roa (hash: n6Dq1dMrKgJPnJf8bwIr5DpzEFmjQ+eea+XVV9e+HTg=)
2: SGwtivTOUM5vQ-ffROC1A3AKhsA.crl (hash: /E0So01YE8GU7fq+AHYyQbWJigtkRD5y2RuTUgVefcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:58:c7:7a:41:77:68:b4:e7:5a:f9:18:3b:c8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0
Validity
Not Before: Oct 20 13:00:53 2025 GMT
Not After : Oct 21 13:00:53 2025 GMT
Subject: CN=5a0a6054235bcc1af4ca3a7af0fc60fcd59618c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:d5:9d:68:5f:7d:d8:89:81:85:b2:ca:61:
6e:d4:7d:c6:89:d0:d3:cc:e3:87:99:9d:d4:16:9e:
07:44:e6:91:30:25:98:ef:c5:99:82:f5:8a:52:e0:
2d:1c:e4:7b:ff:3c:07:a6:40:49:69:60:f8:b8:41:
a4:47:8c:ee:6b:04:56:ed:11:3f:94:e2:3f:dd:7c:
14:2b:57:2a:43:e2:94:8e:cc:41:65:62:c2:08:2a:
69:b0:be:45:e4:83:71:5b:95:f9:57:fe:40:c3:62:
b4:0f:ee:87:98:64:d7:a9:a0:98:5d:97:a9:06:6a:
48:74:ee:6c:3a:cc:07:7f:60:32:2d:c4:94:f7:f0:
bc:72:e9:79:80:7a:a9:46:9e:54:36:7b:f7:ed:5f:
d7:1b:46:88:31:c1:3f:ce:5f:b5:54:d0:ee:3e:87:
fc:c2:f2:4d:72:97:21:b3:88:47:ff:81:23:64:0d:
80:04:86:ce:4a:a2:47:bd:f1:8a:3a:37:1f:be:8b:
c7:e4:19:e9:54:29:dd:ef:55:71:9a:6b:e4:e8:d0:
2e:b6:a4:6d:58:e3:b7:08:24:53:62:5b:00:98:f1:
58:8d:1a:75:fb:3e:76:85:34:7e:b3:e3:07:43:8d:
49:c5:25:3f:b5:c8:17:5f:9b:38:ea:03:aa:e9:f6:
81:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0A:60:54:23:5B:CC:1A:F4:CA:3A:7A:F0:FC:60:FC:D5:96:18:C3
X509v3 Authority Key Identifier:
keyid:48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3d:f7:e1:c6:dd:7a:94:9a:fc:34:24:3b:24:51:8e:2b:a4:
54:fb:7b:d0:7d:4f:b0:d4:67:7a:6e:0b:19:ea:7f:b7:5f:fd:
2b:9f:fe:4c:73:b3:6a:fa:62:f5:62:5c:fd:04:0e:a5:ac:24:
f9:3a:14:f7:14:53:47:4a:a2:ba:03:6b:4d:fb:71:ef:bf:c4:
06:c3:38:da:35:fc:a4:3e:1d:ce:74:6b:b0:a3:17:ee:11:e7:
bb:70:fc:8a:df:a0:35:fa:b8:de:48:f1:27:a9:f0:90:b5:5d:
7f:d7:6b:70:c7:bd:5f:e8:b3:2e:bf:1c:b2:b9:94:d1:89:cd:
5c:77:d8:04:4b:c3:61:47:0b:1d:1e:82:8c:18:95:ee:c8:c3:
1c:ff:aa:9f:a5:74:5d:c9:47:e9:64:80:20:d6:fb:7a:3a:ac:
50:77:ba:91:9b:b3:bc:18:24:7c:51:c9:25:7a:4d:92:75:4b:
d5:f6:66:f4:5b:f8:6b:87:7f:72:70:4f:91:80:0f:de:ae:c4:
1f:03:26:5b:a1:99:2e:4e:2f:c7:7d:e1:5e:60:53:c1:c5:d1:
42:83:44:9c:9a:59:a8:de:cd:74:bc:57:f8:97:e3:37:6d:7d:
d8:b0:2c:b7:c4:7f:7c:14:06:8d:29:b9:8f:e7:0d:a6:16:cd:
9f:8b:a4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:40:25 2025 by rpki-client