Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
File: SfCTu46K0RxMg07f0t9U1By0n3k.mft (raw, json)
Hash identifier: Q3IihCSC4p2ePvYq5LJK2hw2AMPK7hu3jvpqwA3gkKM=
Subject key identifier: E6:F2:D2:61:0A:65:7A:FD:3E:BC:6B:BB:7B:A5:93:6F:51:27:47:0E
Authority key identifier: 49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
Certificate issuer: /CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Certificate serial: 0199FF2274146C0BC310C34172D48A46B5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
Manifest number: 0546
Signing time: Mon 20 Oct 2025 01:01:11 +0000
Manifest this update: Mon 20 Oct 2025 01:01:11 +0000
Manifest next update: Tue 21 Oct 2025 01:01:11 +0000
Files and hashes: 1: 5GNPm8h48A-gwMWqDZ4JoMYcVZc.roa (hash: 9ZBWY++nE/D6/RJTqjkk/4Q4ufkyFaszCX0qNKOcYVk=)
2: SfCTu46K0RxMg07f0t9U1By0n3k.crl (hash: BDu1TXMR/uzsdhJ0BPy+ZMXiAEYwTHYKGfYvJy7oXjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:74:14:6c:0b:c3:10:c3:41:72:d4:8a:46:b5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Validity
Not Before: Oct 20 01:01:11 2025 GMT
Not After : Oct 21 01:01:11 2025 GMT
Subject: CN=e6f2d2610a657afd3ebc6bbb7ba5936f5127470e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:be:bc:3c:64:05:0f:94:3e:00:76:b5:d6:
c6:11:a7:21:50:7d:fd:65:97:73:c5:ec:23:8f:bf:
ff:87:92:de:c7:2a:53:0b:b0:6b:60:95:42:9b:b2:
f1:f1:7a:da:53:bc:46:89:90:df:4d:fd:2b:84:e3:
d0:32:a9:5c:86:ba:7f:1c:ec:1d:ba:38:25:92:e2:
ab:ea:61:6f:a9:04:6d:39:fc:01:01:72:aa:f6:79:
ef:2e:2a:ca:f8:c0:c5:08:c4:3d:62:df:48:58:f1:
e6:51:ff:1e:ff:8b:92:c6:91:00:f4:a0:dd:83:f4:
81:37:48:e7:5a:56:67:81:ec:f4:45:37:71:26:42:
0e:2d:5e:3f:f8:f3:32:3d:c6:24:5b:32:19:e9:ed:
05:bf:48:e1:80:9e:23:ba:a6:8f:2f:38:a6:0e:47:
21:c9:08:98:33:a5:40:c7:eb:4c:ae:3f:b2:af:cd:
11:1d:1a:95:4b:18:93:40:18:be:cf:05:cc:b1:50:
c9:7f:c1:ac:2a:b0:32:c3:1a:ca:14:4c:5c:ca:14:
53:bf:4e:aa:10:57:c1:05:c3:90:06:2b:d9:85:e9:
fb:92:c5:38:ce:a5:60:cb:a0:c5:3b:d7:ad:54:e9:
5f:38:92:98:f3:6f:83:a8:c7:ee:65:4a:c1:cf:62:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F2:D2:61:0A:65:7A:FD:3E:BC:6B:BB:7B:A5:93:6F:51:27:47:0E
X509v3 Authority Key Identifier:
keyid:49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:95:e2:9e:d2:e5:0c:d3:da:84:fb:d3:6c:18:ef:9a:b7:6e:
da:9b:f6:e7:22:63:f6:b3:03:d1:68:bb:ae:71:f1:1c:1c:28:
2b:a8:cf:1c:7d:53:d7:e8:f5:55:ef:fe:82:10:0f:d0:d5:02:
47:76:9e:f0:76:dc:d6:a6:5f:a3:c8:50:3f:30:61:91:ee:cb:
d2:3d:94:db:4e:e2:f7:f9:69:dd:9a:27:0c:15:6a:25:a0:d0:
d2:b0:8a:dd:d9:3c:98:f3:d8:90:19:68:3b:7a:48:55:13:11:
87:62:38:97:d8:cd:8f:59:d4:0e:bf:3a:45:a9:7e:5e:b3:8b:
9d:aa:f6:b3:24:d8:ff:e4:50:95:16:99:94:57:84:e1:48:f3:
b7:e1:02:00:6a:7b:4d:0d:f1:2a:49:b7:88:58:55:74:bf:89:
98:2d:f0:5c:d5:39:04:db:81:73:52:c6:a1:9c:4b:22:f6:00:
d9:b1:54:f1:36:db:e4:39:9b:b1:e8:fa:27:85:ea:54:e4:2e:
9d:35:4b:67:8f:89:70:af:b5:ac:be:32:d2:62:a6:79:06:53:
d1:38:e6:c5:68:4c:6b:ac:74:36:b8:c6:7e:4b:a8:5c:b5:74:
db:e5:31:c8:4b:c8:9f:bb:60:40:f5:2f:77:b1:1e:1d:c6:eb:
76:7b:12:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:20 2025 by rpki-client