
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
File: SGbUAn3jwn6JfXKtsshth6t-WsI.mft (raw, json)
Hash identifier: rw4TZAgfXv4BgBGBkAs3JRP4mEPXDQKMTG2/qHfiwkc=
Subject key identifier: 41:18:29:56:1D:DE:CC:5F:A1:CC:AE:99:BB:25:DA:AD:62:A6:D4:D5
Authority key identifier: 48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2
Certificate issuer: /CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2
Certificate serial: 0199FBEB0B89784333DC46BE8CD19CD2D73C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 10:01:49 +0000
Manifest this update: Sun 19 Oct 2025 10:01:49 +0000
Manifest next update: Mon 20 Oct 2025 10:01:49 +0000
Files and hashes: 1: MXST_7VxoAANhfz5HopBnTAfZfE.roa (hash: WwAleikgSWf+4k301L6Hz+MXSbtdCoBSAXsJKdsGXBk=)
2: SGbUAn3jwn6JfXKtsshth6t-WsI.crl (hash: y5Rg7+K/ayMaWzJtyLXkpVLPoGMeAkheR8buTxTjrYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0b:89:78:43:33:dc:46:be:8c:d1:9c:d2:d7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2
Validity
Not Before: Oct 19 10:01:49 2025 GMT
Not After : Oct 20 10:01:49 2025 GMT
Subject: CN=411829561ddecc5fa1ccae99bb25daad62a6d4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:72:25:2d:5e:97:2b:94:68:91:c8:e1:a9:e9:
8c:71:59:b7:92:0b:02:65:d4:17:f2:4b:22:07:74:
c2:61:dd:99:38:57:c8:5a:c4:a7:d9:81:9e:70:2c:
6d:c7:05:bc:0c:7c:c6:54:13:21:48:6f:13:ef:d1:
31:71:86:9e:74:65:05:4e:b5:3a:4a:6d:18:09:38:
c3:2f:a6:aa:ad:c2:51:b4:fb:4d:c7:7e:be:4d:96:
89:6f:3f:2c:16:5d:54:f3:29:af:81:15:0f:5d:00:
e7:62:e8:fa:56:f4:e5:97:aa:f4:da:f7:c0:6f:f9:
e7:30:9a:d9:06:c0:9e:66:94:e4:05:21:67:71:8a:
0f:0e:dc:73:31:4d:4c:be:ce:5d:f8:0c:e0:86:1e:
f8:a7:ef:1d:8b:42:55:b0:82:be:c4:05:99:91:a5:
9b:ef:aa:74:5a:c0:4a:ec:7a:ea:4d:c3:49:06:3e:
bd:34:db:9d:fa:4a:ee:39:31:83:9b:82:55:75:03:
57:44:b5:fd:b4:14:7e:c1:a5:42:be:5b:9e:86:5c:
a8:e7:77:48:a2:6b:dc:d9:75:a8:25:be:ec:d3:81:
13:6b:be:b1:5b:cc:70:2f:4e:d5:d2:ec:e4:93:bc:
6d:e1:29:18:1d:9a:b4:24:97:a9:85:be:3e:99:4b:
6b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:18:29:56:1D:DE:CC:5F:A1:CC:AE:99:BB:25:DA:AD:62:A6:D4:D5
X509v3 Authority Key Identifier:
keyid:48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:80:bf:e3:4f:97:e6:38:85:34:17:45:19:51:b0:5f:08:d6:
02:dd:32:10:45:e9:93:7f:8f:35:71:25:53:e9:1c:1b:3b:4c:
ec:b4:3f:53:30:06:95:5a:49:be:b3:23:0b:2c:95:90:47:af:
30:d2:e1:f4:2b:5c:27:2c:8a:31:fb:2d:f9:9c:c3:8b:c2:9a:
0c:1f:e3:76:a9:7a:ca:a5:7c:6b:27:b2:59:57:f4:cf:5f:c3:
06:b8:04:c6:de:6e:73:25:a9:d5:2e:76:90:c4:65:f0:c1:ac:
e5:43:4e:59:25:56:55:4e:cb:59:9a:82:49:b7:40:79:dd:31:
b3:fd:3a:5b:62:52:d9:4b:2d:9d:96:72:99:74:8f:d1:da:bd:
a7:30:ab:5d:25:b8:c1:c0:46:ee:a0:41:31:77:70:e4:16:5d:
b1:b6:d9:df:4c:96:d8:2b:2a:99:54:6a:27:00:58:9a:a3:85:
eb:bd:2f:b1:23:b6:19:a8:65:d1:ac:e5:f8:c4:5d:7d:0b:fb:
b6:e3:bf:89:60:68:e0:4a:d6:38:e2:62:59:0c:e7:64:71:fe:
36:a6:33:06:0f:f5:61:d3:4f:ca:d6:ac:6a:9a:0d:98:df:48:
8d:4b:1a:4c:1a:23:bf:cc:8b:3d:35:2f:8d:50:b9:b5:47:70:
1a:66:58:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:01 2025 by rpki-client