Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json)
Hash identifier: /Ubp6+g1YGgRAZDEFwL+wm0JhAZ6UW1iduSYOVrvAjo=
Subject key identifier: 9A:87:AE:DB:30:45:73:B7:DA:4F:47:28:78:C9:E0:AA:95:C4:EC:2E
Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c
Certificate serial: 0199FC585CC422320573EDDBD97D5DB5115B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
Manifest number: 10AE
Signing time: Sun 19 Oct 2025 12:01:13 +0000
Manifest this update: Sun 19 Oct 2025 12:01:13 +0000
Manifest next update: Mon 20 Oct 2025 12:01:13 +0000
Files and hashes: 1: JUMv7Yi2cpE5n4jH_daU8-Wkj_s.roa (hash: 8Ur2YBrwEIHwiqas+AFAXGNfkZXPANsLJAnLoARlVGk=)
2: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: Rew71fXX2DiieVB4giV5CWb+Gc0P1BYA2t/36KfIGmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:5c:c4:22:32:05:73:ed:db:d9:7d:5d:b5:11:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c
Validity
Not Before: Oct 19 12:01:13 2025 GMT
Not After : Oct 20 12:01:13 2025 GMT
Subject: CN=9a87aedb304573b7da4f472878c9e0aa95c4ec2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d0:4e:1b:a2:94:cf:b5:0c:44:d4:b3:0a:7d:
25:aa:90:1e:a3:26:07:96:55:bc:10:8f:42:00:3f:
e8:a4:b9:78:fc:c5:af:b4:a9:78:7c:b5:b4:cb:e8:
5e:a0:2b:9b:2b:ca:a8:dc:79:9d:0f:a1:75:52:a1:
cd:3c:88:a0:61:ea:dc:4e:77:89:e5:96:fa:27:45:
df:91:2f:15:98:53:60:bd:20:b8:14:34:23:c7:0f:
8b:ef:37:74:6c:32:d1:73:72:51:6a:a8:37:52:cd:
61:cd:e4:08:ba:7f:dc:2f:79:09:38:0b:d4:a8:4d:
88:10:49:04:8a:af:d9:07:85:fe:31:1f:e8:a0:f2:
8f:95:55:50:c6:b1:b9:d6:b7:d4:b2:4c:1a:02:59:
3b:86:82:ed:12:c1:51:85:c8:a4:2b:a6:e5:3a:b8:
d6:ea:de:29:99:57:6b:ab:ea:d5:24:1b:8b:c7:e7:
88:79:7f:b9:78:b7:46:0e:31:a4:71:e7:d6:a4:14:
eb:75:28:8b:ef:8a:8d:d5:54:f3:d2:40:b4:0a:77:
65:46:e9:68:03:1a:e3:10:f8:e1:9d:7c:7a:97:4d:
74:0f:16:4a:84:6f:d9:98:51:7b:32:a9:61:5e:f8:
b9:85:3f:4f:61:7c:e4:76:85:9e:72:e2:49:1d:b6:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:87:AE:DB:30:45:73:B7:DA:4F:47:28:78:C9:E0:AA:95:C4:EC:2E
X509v3 Authority Key Identifier:
keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a5:bd:64:e3:4c:0b:45:ad:a3:47:9e:c5:41:a8:10:96:aa:
17:5f:13:3b:07:d5:b4:a2:1f:1a:26:5d:5c:b4:11:a8:6a:81:
db:e5:6b:29:78:ab:2e:df:cf:3c:1c:c9:a6:9a:fe:b2:b9:a2:
e3:1f:04:cf:da:9c:fd:c1:26:a8:b7:5e:2f:b8:92:30:f4:2a:
8d:72:c9:9c:61:ca:0f:1c:34:e5:2a:32:a6:e6:25:80:2f:1e:
7a:8f:e1:32:d7:a6:b3:98:56:a9:09:06:bd:28:11:42:23:92:
a0:e7:e9:ed:36:aa:56:b5:1d:df:af:06:eb:94:c4:4f:d6:9c:
f4:10:b9:ab:48:e0:69:2d:f8:e8:76:b5:68:4c:97:e3:05:66:
a3:8e:ba:0f:79:31:18:67:31:1b:9d:87:2f:e5:b7:18:51:e3:
c5:16:35:a3:1f:26:7d:ee:90:c4:2d:80:b5:b8:e8:77:00:3c:
14:5c:d8:f4:7a:c1:f3:da:d2:43:6c:b8:95:5a:77:ed:32:f1:
94:b8:ed:ff:13:c5:39:b9:19:7e:14:29:58:78:98:15:25:e4:
67:91:8f:e0:44:b8:c9:8b:46:90:07:79:a0:9d:f9:d8:0c:fc:
9e:93:3e:cc:bb:74:75:42:cd:c4:80:67:a9:ac:62:8c:72:4f:
4b:a5:e5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:19 2025 by rpki-client