Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
File: sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json)
Hash identifier: YuWAXUOncR7CoPLld/CeJNir5CuSZFki1/aylfRMYeY=
Subject key identifier: 7C:BA:92:C5:3D:45:B2:84:D8:FE:C6:90:E5:64:B1:0D:AE:C3:31:12
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial: 0199FF228B048673BF4F8C84EFE55C1EDE23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
Manifest number: 0408
Signing time: Mon 20 Oct 2025 01:01:17 +0000
Manifest this update: Mon 20 Oct 2025 01:01:17 +0000
Manifest next update: Tue 21 Oct 2025 01:01:17 +0000
Files and hashes: 1: WuP_ar5p0VQaYjgm5CdF94AIxBs.roa (hash: ydupRdA76pUpd82bhv9cS8ujQ+gdAK4Xhs2n/s0tNgc=)
2: m74VvsI6EdMo76uevvan59QpkqE.roa (hash: 1fe03vMMsl3oUUL4Se2ddc8JmIOlm8Qdn5iC5j3XfoY=)
3: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: MHs0JTJ2NPJlW12ync48RgM+Ky8XD1lO2Qpyhhn2gJU=)
4: yVlE6wtOmHPbBbPTbGfVtRfQk3I.roa (hash: kF1ch8ftfefkwMb34eMIq7SQs/1Z3Ao5ZWwxrMyDhdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:8b:04:86:73:bf:4f:8c:84:ef:e5:5c:1e:de:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Validity
Not Before: Oct 20 01:01:17 2025 GMT
Not After : Oct 21 01:01:17 2025 GMT
Subject: CN=7cba92c53d45b284d8fec690e564b10daec33112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:e1:e0:31:e5:17:0a:21:db:cb:b4:5b:1c:
80:62:86:c7:4b:9f:df:2d:3c:2d:f5:e0:3a:85:eb:
21:1e:55:88:e7:21:e2:83:4d:b5:78:85:db:ab:eb:
be:f0:d4:0b:ac:0a:d2:bb:5a:06:9a:3f:53:01:a8:
b2:de:e2:e9:04:be:3d:e9:7a:33:e1:6f:1c:07:a7:
5f:7b:8a:23:f3:d4:57:5d:de:46:57:e9:26:8d:6d:
6b:79:62:e1:c5:42:05:0b:06:3e:17:9b:50:27:3a:
f8:eb:c2:6a:9f:d2:ce:fb:cf:f7:68:6e:46:11:f5:
cf:1b:ec:cb:a4:b5:1f:6b:ef:a1:d8:7c:fe:77:59:
c7:9b:ea:5a:d3:1d:39:86:b1:a3:ac:39:74:75:6e:
2b:2a:6b:dc:e9:6e:6c:b2:91:1c:06:48:0e:06:24:
fa:7f:a0:4a:ee:e7:16:8f:ed:8b:97:61:22:e5:12:
ee:bf:21:d0:bb:a4:5a:13:e1:9b:50:77:39:09:bc:
ec:49:bc:94:07:88:be:fc:50:87:19:80:b6:5e:af:
1d:6b:ad:77:ef:3d:4a:6e:a2:58:3b:e1:1c:2b:85:
33:fe:28:0b:cb:7b:33:6e:c8:34:e8:05:25:5d:95:
1d:df:6f:da:d6:5e:d7:fe:98:a2:02:3e:c3:8e:73:
d1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BA:92:C5:3D:45:B2:84:D8:FE:C6:90:E5:64:B1:0D:AE:C3:31:12
X509v3 Authority Key Identifier:
keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a0:87:9f:d1:6f:65:02:83:48:3c:6d:43:3f:aa:f0:58:15:
a4:31:4d:c5:b8:39:5f:7a:f6:90:af:6b:59:7d:74:cc:68:c3:
81:f8:a4:43:b4:07:16:b0:04:48:75:57:ce:b6:9b:27:ca:bf:
76:94:91:bd:ce:bc:13:7a:3a:27:2e:2e:d0:fb:d0:b9:c0:06:
76:0f:2d:50:29:e8:36:cf:90:8d:bb:56:2e:4f:9a:3a:b8:dc:
35:e9:36:c5:22:03:94:4c:1d:a4:37:7f:08:b3:97:84:cc:5e:
ec:bb:5e:a3:58:29:76:45:2f:bd:99:ae:dc:1b:fc:a7:20:95:
d3:41:47:d6:45:e1:e4:7b:44:38:da:d1:2c:1e:34:f5:0f:b1:
bd:1c:dc:7d:18:9c:33:18:20:90:3e:8a:a6:0f:d7:d3:02:ec:
f1:5d:fb:86:8b:f8:89:e0:9b:1f:da:d9:6a:1e:2f:80:8f:87:
c7:36:e1:73:c3:40:07:aa:fc:9e:bd:7f:94:18:dc:41:0b:a2:
8b:8c:01:7f:88:cf:0b:a6:65:31:ca:66:69:f9:54:03:25:e7:
96:b9:99:bd:c4:51:ad:ac:08:5d:e0:fc:a7:b0:7b:b0:5f:46:
7a:86:b6:da:10:17:f6:2f:c3:bb:39:2d:ae:13:1c:64:e9:87:
ba:2a:b9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:36:47 2025 by rpki-client