
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
File: SJwmPoGEhs_YMcJF3frMqR-9gcA.mft (raw, json)
Hash identifier: SlnzJF+Y9RpeRxoOqU/6thY0kQBMDbh1ccq6fArhwQw=
Subject key identifier: B2:F9:1E:8D:BA:66:7F:C3:81:8C:2E:C9:01:91:22:03:69:A8:30:B2
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Certificate issuer: /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial: 0199FC8F76D70547D9C7795B5E2A251C4609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
Manifest number: 0367
Signing time: Sun 19 Oct 2025 13:01:24 +0000
Manifest this update: Sun 19 Oct 2025 13:01:24 +0000
Manifest next update: Mon 20 Oct 2025 13:01:24 +0000
Files and hashes: 1: SJwmPoGEhs_YMcJF3frMqR-9gcA.crl (hash: W28EMpHS35x3t/bAoSUuoJDRZaL0WdJtokGpMyQuX4U=)
2: sh9Rh_XHxgs73xUgLaXpfEWoL2M.roa (hash: u3ZNcYvwXVoq0LzAan53+HMQH1md2pw7AMcoma6/Peg=)
3: uFwm3LO6GthW3CaP1u11g2Pmnbs.roa (hash: P/XCOSSZFXhzFRU3N+DJNZYyvprMkXA10JImXpYTCCI=)
4: xJcR0deGB_PhVW4Ub0AqpBDixL0.roa (hash: SawuCs7fQfxnKHxl7dEG/czDPI5njJw6MgIPphiYv6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:76:d7:05:47:d9:c7:79:5b:5e:2a:25:1c:46:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
Validity
Not Before: Oct 19 13:01:24 2025 GMT
Not After : Oct 20 13:01:24 2025 GMT
Subject: CN=b2f91e8dba667fc3818c2ec90191220369a830b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:c9:04:32:e2:a8:ab:20:1f:7e:4b:a3:4f:
0f:04:d6:3c:4d:41:1b:ca:98:50:2f:9e:17:83:c6:
db:2f:1e:a4:f2:50:8e:66:3c:1c:ba:7d:14:8d:2e:
3e:56:ef:ea:77:2d:b0:65:1c:0e:95:1e:e4:c4:5c:
0c:0c:71:23:89:32:01:57:c1:f2:3a:6b:24:9f:3d:
72:ca:47:84:02:98:68:0b:c2:33:95:9d:3b:52:ec:
c1:7e:86:74:3f:91:ae:7e:bf:96:00:33:cc:10:ae:
5e:0c:d5:9c:6c:01:75:1d:2c:fc:10:2d:cf:71:01:
2e:f4:d1:90:ac:b7:7c:7e:37:f0:fe:06:79:89:8a:
c1:48:4a:b9:d4:ea:59:ed:e2:d4:98:2e:8a:d5:61:
49:85:ad:9c:3d:27:ee:96:d9:67:9b:2f:85:29:80:
b1:15:6e:87:10:29:8b:2b:9e:3e:72:48:12:d3:e5:
bd:ae:5f:44:2c:ab:5f:fd:0d:96:29:a8:a5:9d:69:
5e:0a:de:1e:b3:13:3d:a7:7d:9b:16:14:ec:d0:ec:
09:ac:75:fc:4d:8c:d2:43:cf:b6:d4:1b:1c:b1:4e:
c6:4a:09:8f:36:f3:95:7a:84:f5:03:97:d8:23:19:
b4:24:74:f7:eb:17:f1:46:ac:c3:0f:86:f4:21:82:
2e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F9:1E:8D:BA:66:7F:C3:81:8C:2E:C9:01:91:22:03:69:A8:30:B2
X509v3 Authority Key Identifier:
keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:45:4b:08:b8:94:b8:86:69:5a:28:fb:fa:05:17:ee:d4:ed:
6a:5a:70:22:21:d1:3f:e3:41:e0:bd:cd:1c:90:2d:4b:f1:e8:
ba:98:41:d6:39:30:f5:f0:6f:fb:5f:1d:d1:c3:02:23:63:66:
15:10:a4:b6:d8:db:ed:11:41:b1:68:3e:ae:f0:36:75:85:e5:
4f:4e:0a:b6:2d:a3:a5:9a:b8:3d:44:4e:47:73:11:46:ea:8c:
d7:f8:35:73:9b:fe:d4:d4:73:38:bb:24:b4:ee:6b:80:c3:84:
2e:eb:90:2f:97:ff:dd:43:98:83:be:8e:6f:16:fe:37:d5:c6:
7a:d8:1a:bd:a9:f7:27:b1:71:ed:7c:c3:f1:f0:83:9b:b4:5d:
fb:57:0e:da:46:ca:d0:be:ed:0e:37:44:d8:76:ec:8a:1c:e8:
08:49:8e:8f:d6:8b:c2:27:a2:30:49:cc:1a:4e:d1:b0:d8:d8:
af:4f:f6:9a:f7:a2:b7:dc:fa:df:63:f8:e8:f3:72:d7:7a:ae:
0c:53:23:b6:7a:f9:37:2f:45:da:09:58:36:21:06:e7:4f:f0:
b6:69:50:0f:56:1b:05:2f:e2:78:57:e1:a8:95:c0:b7:5c:03:
54:a5:8e:84:05:10:dc:1d:17:21:95:25:90:36:53:b7:6a:44:
68:4d:f1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:06 2025 by rpki-client