Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
File: sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json)
Hash identifier: tXBpKcIDQswzMFr8hTC5UToAZQ83KDlE1cvC46EMW30=
Subject key identifier: A6:10:B0:9B:57:F9:34:30:91:3A:7F:17:AC:72:50:6B:0B:1E:57:7D
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial: 019A0111019C2EDB766E19D420C0CF391CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
Manifest number: 0409
Signing time: Mon 20 Oct 2025 10:01:22 +0000
Manifest this update: Mon 20 Oct 2025 10:01:22 +0000
Manifest next update: Tue 21 Oct 2025 10:01:22 +0000
Files and hashes: 1: WuP_ar5p0VQaYjgm5CdF94AIxBs.roa (hash: ydupRdA76pUpd82bhv9cS8ujQ+gdAK4Xhs2n/s0tNgc=)
2: m74VvsI6EdMo76uevvan59QpkqE.roa (hash: 1fe03vMMsl3oUUL4Se2ddc8JmIOlm8Qdn5iC5j3XfoY=)
3: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: nX/OiIlKrPmncCSRN0vBIxCeG6I8+2b8qTt0zVv0Jsk=)
4: yVlE6wtOmHPbBbPTbGfVtRfQk3I.roa (hash: kF1ch8ftfefkwMb34eMIq7SQs/1Z3Ao5ZWwxrMyDhdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:01:9c:2e:db:76:6e:19:d4:20:c0:cf:39:1c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Validity
Not Before: Oct 20 10:01:22 2025 GMT
Not After : Oct 21 10:01:22 2025 GMT
Subject: CN=a610b09b57f93430913a7f17ac72506b0b1e577d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:85:5a:7b:83:d3:3f:b0:37:00:cb:a7:ae:
95:ae:6e:3d:48:9f:87:e7:96:0b:7a:1f:1d:be:99:
8a:67:36:ef:e1:fa:24:02:2c:0c:09:50:f2:7d:db:
e9:1c:a9:d7:2e:22:76:63:e9:08:13:a2:ae:12:5a:
30:1c:d0:6c:2d:24:97:7d:c4:e9:c6:0e:ef:37:0c:
a1:78:60:78:3a:5b:c7:bb:58:26:5b:38:23:fd:e5:
20:f7:6e:20:46:ee:d0:8d:58:4c:59:29:28:a3:69:
54:91:0e:dc:3d:e2:9d:36:e9:06:16:9b:3d:86:5b:
18:87:82:72:02:ac:4c:97:74:2d:10:b6:9a:22:ff:
e3:69:9b:bf:5e:85:3e:71:54:a0:ac:1a:2a:80:6d:
a8:22:a8:6d:ed:61:1a:b9:70:32:f0:b0:56:f2:ee:
54:5d:a0:7d:69:10:c2:3b:31:6f:4d:82:ba:be:e1:
06:c3:b4:be:c0:78:e0:7d:9c:b9:18:06:84:7a:1f:
c9:73:62:75:3f:87:d0:3a:b4:82:cb:66:34:e9:9a:
fc:fa:cf:ac:de:5f:eb:04:46:ad:70:ec:ce:c4:e4:
73:d7:cc:b0:85:b0:4f:00:94:c8:4c:2f:40:89:ce:
75:06:82:9a:9d:3e:8e:07:ee:54:32:cb:4b:9b:54:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:10:B0:9B:57:F9:34:30:91:3A:7F:17:AC:72:50:6B:0B:1E:57:7D
X509v3 Authority Key Identifier:
keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e4:9f:c4:b1:e8:6f:c8:b3:02:9f:71:8a:b5:52:c0:43:b8:
b2:65:0f:69:e6:55:a1:3d:24:00:94:f1:d8:d4:9b:b5:52:dc:
9d:33:ae:70:4e:65:3c:44:73:6c:b3:88:0e:3d:37:96:92:28:
59:c8:8b:83:c6:98:79:81:7f:c3:66:4e:69:66:31:e6:c4:f4:
0f:9f:ec:34:c8:9b:5f:90:fc:c6:54:12:d0:e9:f1:d0:b5:8b:
0c:f2:34:e7:f2:d7:15:38:67:58:28:ca:2c:a4:e0:70:4f:7f:
13:60:b8:ad:1c:d1:6a:5b:e7:30:e2:3d:32:b8:71:2f:67:74:
cf:d7:ec:5f:c6:fb:05:59:c7:19:60:92:16:2f:e8:9a:a5:d5:
d3:2b:3e:72:dc:82:09:4a:d2:df:fa:e1:7b:48:30:e8:08:3a:
79:4d:a0:c1:f4:31:2c:f2:b0:6a:b5:fa:28:a7:65:0f:ed:7a:
25:b8:da:31:24:a0:50:56:1d:cd:cf:ad:4e:22:c2:b0:87:30:
1f:49:34:2b:4c:84:c4:96:8b:0a:5b:2f:75:83:9d:42:4d:57:
4f:ee:3f:0b:9e:f9:45:c3:26:b1:f4:9b:98:e4:c4:8e:8b:38:
a7:e1:62:8f:89:1d:cc:5b:b0:e0:65:e5:4e:33:5a:d9:8f:3b:
ea:5d:c9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:54:05 2025 by rpki-client