Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
File: SffBpGd-t4JtrmneAaaZtiAdYkQ.mft (raw, json)
Hash identifier: hUOqahhDh6dzmRh5iaGU029mp/qPmBQlU1zIgAZsNqE=
Subject key identifier: 0F:11:1B:40:3F:BB:EC:5A:B6:E4:EF:55:A6:A5:36:7B:2B:D8:20:BF
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 0199FF226CAD028598F2D5DF7E01FE3566B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
Manifest number: 08BA
Signing time: Mon 20 Oct 2025 01:01:10 +0000
Manifest this update: Mon 20 Oct 2025 01:01:10 +0000
Manifest next update: Tue 21 Oct 2025 01:01:10 +0000
Files and hashes: 1: 1fEhDLG2T1y1zCMSekjeKTFgEiE.roa (hash: qkZRZL3uEJ/IofMfb0sGApiJ8jObyAIyttVh0abUKHc=)
2: SffBpGd-t4JtrmneAaaZtiAdYkQ.crl (hash: 1cZhOiiSo4j0RmOt/jZJbWeJ2lsAXr/CKcnvCCrvJZE=)
3: Ungcud01aQHgTMIDHqxKgOj76qo.roa (hash: vzFsWzaNMb5tmpdLeHM9BlzRIek6QkO8MJb/yx40U/I=)
4: aNjEb5eKDyYkgeaI_pw6s6Nyxio.roa (hash: LXIG7QItKisSD3lO6v16i6iN7S5ddhKshFToQIqNXAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:6c:ad:02:85:98:f2:d5:df:7e:01:fe:35:66:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: Oct 20 01:01:10 2025 GMT
Not After : Oct 21 01:01:10 2025 GMT
Subject: CN=0f111b403fbbec5ab6e4ef55a6a5367b2bd820bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:e9:af:27:ed:c6:bc:d2:c7:39:9a:bc:b2:
40:2c:26:60:d6:fb:35:77:66:3a:05:04:3e:4a:8f:
b7:42:0e:19:dd:59:75:06:22:ff:1b:5f:1a:fa:92:
48:cc:ad:4e:1f:17:b7:2d:b0:0c:0b:db:8a:15:76:
68:57:a6:21:4f:48:58:58:7e:76:ee:11:62:a2:39:
51:c3:ee:5f:c6:0f:38:41:5a:df:a0:a1:8b:2e:e1:
cf:9f:78:fe:a3:f7:33:c6:fe:3b:53:f6:68:94:94:
9f:9b:4e:c0:b5:9e:80:e5:84:c0:fc:96:bd:c0:61:
3d:86:ed:3f:39:00:2d:91:1a:b7:a3:39:8c:c2:30:
7b:62:a4:20:55:92:bb:60:bf:e6:c5:34:60:84:64:
79:33:3b:c2:88:41:02:5d:c6:21:e0:61:c2:a6:77:
c0:f5:f6:dd:91:d0:27:82:85:dc:ba:58:b7:ef:cd:
57:0d:8e:2f:db:05:9a:63:f5:5a:f6:5d:0f:45:cf:
52:69:81:7f:62:34:c1:a2:e8:ec:e4:68:3c:e3:e4:
0b:2e:29:67:eb:ad:32:c6:31:8a:4e:5e:7d:09:0b:
a5:11:c8:f9:2e:ba:18:b0:05:79:4d:3b:19:58:63:
8f:81:30:5c:ff:27:56:ea:8b:10:69:cd:69:aa:58:
a6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:11:1B:40:3F:BB:EC:5A:B6:E4:EF:55:A6:A5:36:7B:2B:D8:20:BF
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a1:12:42:39:27:17:c5:0a:69:ca:57:f0:ef:02:c8:cd:65:
bf:17:b6:12:a9:d7:00:ce:6a:a0:e4:6f:57:6d:5e:f0:c0:2b:
06:7e:ff:0e:3f:e8:10:42:e2:4e:9c:4f:b4:19:dd:63:54:ee:
6c:f6:7b:ed:bb:7e:3f:46:7f:d0:2e:56:58:c6:f3:66:d3:b3:
e4:2b:e9:7e:72:c5:fe:93:a6:2b:fc:0d:d1:7f:39:2d:1f:2b:
80:20:5a:b4:ac:93:29:f1:4b:06:81:da:f2:33:b9:81:96:11:
63:4a:31:f5:f8:a4:d8:10:5c:bf:08:f1:26:e7:a8:1a:1d:ae:
f0:5b:e5:9a:92:8d:ed:a8:e2:72:50:46:d1:43:21:b9:aa:21:
5a:7a:c6:0d:93:a7:90:8e:ea:25:e2:0a:f3:ba:3e:5b:f0:58:
5d:f1:12:26:ec:36:33:d3:62:41:04:2f:b7:c2:4a:36:8a:bd:
17:3e:6c:34:5b:0e:af:e8:6d:9f:e6:51:ab:c3:de:d3:86:ef:
21:b0:09:68:21:8e:e3:e3:59:41:cd:59:e8:5a:0f:b3:c8:62:
46:e8:f7:1b:a7:8f:97:eb:16:c5:c9:54:c1:fd:45:be:5e:8d:
89:01:9b:ac:26:ba:8f:19:58:cb:35:2e:61:69:fb:69:0a:81:
2a:af:da:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/ImytAoWY8tXffgH+NWa0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjdjMWE0Njc3ZWI3ODI2ZGFlNjlkZTAxYTY5OWI2MjAx
ZDYyNDQwHhcNMjUxMDIwMDEwMTEwWhcNMjUxMDIxMDEwMTEwWjAzMTEwLwYDVQQD
EygwZjExMWI0MDNmYmJlYzVhYjZlNGVmNTVhNmE1MzY3YjJiZDgyMGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf/pryftxrzSxzmavLJALCZg1vs1
d2Y6BQQ+So+3Qg4Z3Vl1BiL/G18a+pJIzK1OHxe3LbAMC9uKFXZoV6YhT0hYWH52
7hFiojlRw+5fxg84QVrfoKGLLuHPn3j+o/czxv47U/ZolJSfm07AtZ6A5YTA/Ja9
wGE9hu0/OQAtkRq3ozmMwjB7YqQgVZK7YL/mxTRghGR5MzvCiEECXcYh4GHCpnfA
9fbdkdAngoXculi3781XDY4v2wWaY/Va9l0PRc9SaYF/YjTBoujs5Gg84+QLLiln
660yxjGKTl59CQulEcj5LroYsAV5TTsZWGOPgTBc/ydW6osQac1pqlimHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8RG0A/u+xatuTvVaalNnsr2CC/MB8GA1UdIwQY
MBaAFEn3waRnfreCba5p3gGmmbYgHWJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEt
NTBjMTZiZGQ1YzI0LzEvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEtNTBjMTZiZGQ1YzI0
LzEvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKESQjkn
F8UKacpX8O8CyM1lvxe2EqnXAM5qoORvV21e8MArBn7/Dj/oEELiTpxPtBndY1Tu
bPZ77bt+P0Z/0C5WWMbzZtOz5CvpfnLF/pOmK/wN0X85LR8rgCBatKyTKfFLBoHa
8jO5gZYRY0ox9fik2BBcvwjxJueoGh2u8FvlmpKN7ajiclBG0UMhuaohWnrGDZOn
kI7qJeIK87o+W/BYXfESJuw2M9NiQQQvt8JKNoq9Fz5sNFsOr+htn+ZRq8Pe04bv
IbAJaCGO4+NZQc1Z6FoPs8hiRuj3G6ePl+sWxclUwf1Fvl6NiQGbrCa6jxlYyzUu
YWn7aQqBKq/aig==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:01 2025 by rpki-client