Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
File: SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json)
Hash identifier: DKiJxYYV1l427LyjPCEZpy4Z0FdNg5oam34i+PyQjls=
Subject key identifier: 9F:B1:19:BD:AF:EE:64:9C:39:2B:30:DA:E0:79:B1:88:8A:18:1A:DF
Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
Certificate issuer: /CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Certificate serial: 0199FCFD34C4FEB8164F3BFF9B0770F8A930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
Manifest number: 16CB
Signing time: Sun 19 Oct 2025 15:01:16 +0000
Manifest this update: Sun 19 Oct 2025 15:01:16 +0000
Manifest next update: Mon 20 Oct 2025 15:01:16 +0000
Files and hashes: 1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: XaY/OKIrdrJmr+a3fNfE4in0cqcpK/b/1NPl2pNM9GY=)
2: qamXgGdELqVwuCRXcGaE5fyjphY.roa (hash: XwiZQCHwX+Vwexgrkkuz5eMSgh62jyoQLxKiqhe1Bqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:34:c4:fe:b8:16:4f:3b:ff:9b:07:70:f8:a9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Validity
Not Before: Oct 19 15:01:16 2025 GMT
Not After : Oct 20 15:01:16 2025 GMT
Subject: CN=9fb119bdafee649c392b30dae079b1888a181adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e9:ee:be:64:f1:56:30:5f:f5:83:43:0e:43:
c8:fc:68:5d:2c:c8:ff:55:5f:07:7c:66:15:38:3a:
d5:7d:51:3b:4a:70:12:c0:87:9c:f3:57:10:7e:fa:
1c:2b:05:1b:8e:d1:13:31:1c:71:78:c1:7c:1f:53:
d0:b8:33:88:61:60:12:ac:e4:d6:d2:98:99:c2:2f:
7c:db:bb:32:21:e6:9f:d4:4c:ec:72:b7:3a:cc:4e:
cd:92:93:fc:84:96:91:99:67:e1:67:55:3b:d9:45:
a0:52:a5:33:46:cb:eb:61:04:78:21:a5:c2:77:78:
f0:94:32:3b:a0:13:42:20:fd:15:2b:4f:ef:19:ac:
fe:6d:65:a1:e6:bf:74:be:8a:a1:78:3b:12:b1:f1:
df:74:26:4e:e4:2e:92:11:a8:6f:d4:12:5c:da:db:
94:b9:c7:27:61:fc:a7:c8:b0:47:05:85:be:f1:b9:
f4:7d:34:98:25:91:2e:fc:62:55:7f:bb:98:82:ad:
4e:43:46:ce:39:3e:81:93:b2:b0:34:6b:c1:38:f3:
66:8c:ef:e5:03:96:0f:61:f8:86:ec:58:4c:75:90:
cb:6e:a0:8a:8f:c4:ae:4a:11:06:81:ae:cd:d0:8d:
cc:70:a6:01:25:d3:79:37:85:a6:94:cf:5d:b5:c7:
4a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B1:19:BD:AF:EE:64:9C:39:2B:30:DA:E0:79:B1:88:8A:18:1A:DF
X509v3 Authority Key Identifier:
keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f2:f1:bd:86:b4:53:1b:24:ab:05:34:eb:31:34:0b:1c:a3:
ed:f6:85:a6:e9:48:27:91:b6:5f:20:ce:f3:31:ad:68:47:3c:
81:5f:cb:d9:aa:55:c9:18:58:c9:d7:cb:3b:b1:bf:8e:10:99:
38:4d:0b:51:f7:87:ce:e6:e5:c7:4b:c9:72:97:95:40:fc:09:
dd:47:30:12:cb:7a:7c:12:15:1f:06:d8:3d:f9:fc:b9:88:66:
d5:5d:ae:2a:8f:3f:4e:db:0d:a2:c4:21:0b:97:48:9a:5a:19:
5e:4b:c5:52:02:73:a1:f2:be:35:c1:d0:b3:36:00:45:a8:b0:
78:bb:de:e7:01:d0:10:3f:0d:75:a4:a6:77:86:f9:06:58:c5:
52:38:78:e8:7e:f5:2e:8c:48:f0:d3:b6:c3:42:ed:a8:02:88:
fc:4c:ce:9f:05:74:b7:12:20:2d:d9:0b:ab:9b:90:54:d7:c9:
60:c4:53:1e:f4:96:81:e1:ed:52:0e:00:d4:70:40:69:65:3a:
c8:69:2b:5e:bd:09:88:e1:1e:32:0a:f7:42:3c:b6:de:3f:c1:
ad:a4:a8:60:7a:37:13:71:9b:81:56:c9:37:f8:eb:8c:c6:b2:
41:4c:43:38:6e:0c:19:a4:b9:18:8c:ad:42:b9:b1:f6:01:f5:
0a:1a:2e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:28 2025 by rpki-client