Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
File: SGiJzk60_XR4GCSDld5fuT0f4UI.mft (raw, json)
Hash identifier: D3WbIJQb5wPU53TMuuO8ku3E8DcpkCYgQCYY0OsgWBs=
Subject key identifier: 14:A5:CA:D6:1A:6F:2C:6A:0C:2C:A1:22:A0:08:76:76:5B:DE:38:28
Authority key identifier: 48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
Certificate issuer: /CN=486889ce4eb4fd747818248395de5fb93d1fe142
Certificate serial: 019A01EC272A82ABF759F5DB2605CFDB538C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
Manifest number: 0262
Signing time: Mon 20 Oct 2025 14:00:44 +0000
Manifest this update: Mon 20 Oct 2025 14:00:44 +0000
Manifest next update: Tue 21 Oct 2025 14:00:44 +0000
Files and hashes: 1: FfqUAa7-KKr54JP8aBzk5nNv21g.roa (hash: PY8USvms98PE+f6r3SXsrpm0zwpXY4+1N+NCv5EFelE=)
2: SGiJzk60_XR4GCSDld5fuT0f4UI.crl (hash: qRMkYrTj9nfopHJnvBSA1QMAUGXPMm4XKCklr080Jeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:ec:27:2a:82:ab:f7:59:f5:db:26:05:cf:db:53:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486889ce4eb4fd747818248395de5fb93d1fe142
Validity
Not Before: Oct 20 14:00:44 2025 GMT
Not After : Oct 21 14:00:44 2025 GMT
Subject: CN=14a5cad61a6f2c6a0c2ca122a00876765bde3828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:a8:bf:d3:80:15:96:0f:ba:05:b8:d2:b3:
80:d3:ac:15:c5:f7:38:3d:ba:f7:30:87:9e:be:d9:
c9:a8:4e:7c:d4:e1:61:74:04:43:29:8c:9c:bd:b7:
24:53:28:4b:a0:7f:27:f2:41:72:2a:bd:01:99:84:
5a:05:c1:98:9f:aa:d7:db:92:26:f8:29:05:50:e9:
a2:99:2e:05:b4:6d:a8:fc:e5:14:43:99:88:0e:10:
4b:69:04:b8:f5:55:80:22:99:f8:d1:b7:c0:05:06:
0b:72:27:13:53:96:fb:86:54:09:66:e4:4e:9c:78:
4f:f3:5c:40:e6:e2:11:25:d9:fb:1e:2a:99:f0:b2:
9e:55:26:c2:6a:35:39:24:3d:cb:cc:7a:b3:3d:10:
8b:c0:c5:90:e6:53:45:d1:13:b8:69:ae:7a:58:b2:
cd:49:17:3b:4a:10:9e:e4:6f:85:35:58:11:c0:9f:
18:87:53:d5:a9:c6:af:02:a7:35:d3:db:cb:a9:4b:
88:bf:86:49:7b:2a:61:bd:ee:1a:8c:54:e5:f1:bc:
60:db:f1:8c:8d:76:1e:cc:24:8e:13:17:d3:4b:f9:
ba:9b:bf:42:b5:a0:a7:47:07:30:58:ed:b2:31:1e:
11:e4:35:8c:88:cd:f3:e0:21:cd:a6:3a:b8:ee:5f:
b9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A5:CA:D6:1A:6F:2C:6A:0C:2C:A1:22:A0:08:76:76:5B:DE:38:28
X509v3 Authority Key Identifier:
keyid:48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ec:2b:c4:63:ba:a3:f0:a2:cf:3f:6f:90:60:18:93:45:94:
b8:70:00:8e:6b:16:f1:63:f6:fa:f7:4e:cd:c7:69:88:74:95:
d0:d5:13:f5:14:df:ef:e7:c2:b8:79:99:10:2a:34:98:fc:65:
1c:05:1a:4c:ea:34:81:97:46:58:89:4d:8c:3d:ba:b6:8e:3e:
60:62:25:51:74:f2:49:00:0a:b7:b9:e1:17:77:00:ee:14:f9:
41:51:d9:5c:f9:17:2e:f6:cd:88:b6:06:a5:1b:c5:f8:da:a3:
76:3a:0f:8d:e7:f4:17:75:8b:44:c7:43:8e:55:35:da:e3:ab:
0c:b1:dd:12:76:bb:a8:51:1e:67:03:81:20:af:95:06:7f:6b:
41:69:5d:8c:50:13:55:32:2c:c5:0f:22:42:53:cf:d8:ca:84:
1a:15:fa:b7:ac:be:c1:bf:b4:8a:d1:15:ae:fc:2b:1c:cb:c3:
96:60:66:96:e9:c9:1c:a3:e6:a6:df:eb:8e:c4:15:7b:da:fa:
ff:b4:b9:25:3b:5e:63:22:af:c0:ad:2f:dd:2c:13:ac:67:94:
42:85:25:7c:73:a6:b1:95:78:dc:91:3b:fe:2c:e4:23:b3:86:
c7:14:66:13:93:db:97:d1:92:a3:3b:50:f6:8f:e9:76:e1:dd:
c8:5f:66:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoB7Ccqgqv3WfXbJgXP21OMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4Njg4OWNlNGViNGZkNzQ3ODE4MjQ4Mzk1ZGU1ZmI5M2Qx
ZmUxNDIwHhcNMjUxMDIwMTQwMDQ0WhcNMjUxMDIxMTQwMDQ0WjAzMTEwLwYDVQQD
EygxNGE1Y2FkNjFhNmYyYzZhMGMyY2ExMjJhMDA4NzY3NjViZGUzODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7Gov9OAFZYPugW40rOA06wVxfc4
Pbr3MIeevtnJqE581OFhdARDKYycvbckUyhLoH8n8kFyKr0BmYRaBcGYn6rX25Im
+CkFUOmimS4FtG2o/OUUQ5mIDhBLaQS49VWAIpn40bfABQYLcicTU5b7hlQJZuRO
nHhP81xA5uIRJdn7HiqZ8LKeVSbCajU5JD3LzHqzPRCLwMWQ5lNF0RO4aa56WLLN
SRc7ShCe5G+FNVgRwJ8Yh1PVqcavAqc109vLqUuIv4ZJeyphve4ajFTl8bxg2/GM
jXYezCSOExfTS/m6m79CtaCnRwcwWO2yMR4R5DWMiM3z4CHNpjq47l+5aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSlytYabyxqDCyhIqAIdnZb3jgoMB8GA1UdIwQY
MBaAFEhoic5OtP10eBgkg5XeX7k9H+FCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0dpSnprNjBfWFI0R0NTRGxkNWZ1VDBmNFVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jOTI0MmUtZTQyNC00ZWQxLWFjOGIt
YzEzNjQwNWI3YmI3LzEvU0dpSnprNjBfWFI0R0NTRGxkNWZ1VDBmNFVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jOTI0MmUtZTQyNC00ZWQxLWFjOGItYzEzNjQwNWI3YmI3
LzEvU0dpSnprNjBfWFI0R0NTRGxkNWZ1VDBmNFVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOwrxGO6
o/Cizz9vkGAYk0WUuHAAjmsW8WP2+vdOzcdpiHSV0NUT9RTf7+fCuHmZECo0mPxl
HAUaTOo0gZdGWIlNjD26to4+YGIlUXTySQAKt7nhF3cA7hT5QVHZXPkXLvbNiLYG
pRvF+NqjdjoPjef0F3WLRMdDjlU12uOrDLHdEna7qFEeZwOBIK+VBn9rQWldjFAT
VTIsxQ8iQlPP2MqEGhX6t6y+wb+0itEVrvwrHMvDlmBmlunJHKPmpt/rjsQVe9r6
/7S5JTteYyKvwK0v3SwTrGeUQoUlfHOmsZV43JE7/izkI7OGxxRmE5Pbl9GSoztQ
9o/pduHdyF9mOw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:45 2025 by rpki-client