Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
File: SGgL3la9O_VhV4oP4QjLwcanWds.mft (raw, json)
Hash identifier: ION1crWMI80n//ga1nxbRw2el7HkboRTjs8qPwo/wNg=
Subject key identifier: 50:26:E9:07:E7:CB:95:32:29:05:BD:3F:99:29:9F:C8:F5:8E:C3:6D
Authority key identifier: 48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
Certificate issuer: /CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Certificate serial: 0199FCFD7EC34E64FA5451E6A9B1B84CF4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
Manifest number: 0B62
Signing time: Sun 19 Oct 2025 15:01:35 +0000
Manifest this update: Sun 19 Oct 2025 15:01:35 +0000
Manifest next update: Mon 20 Oct 2025 15:01:35 +0000
Files and hashes: 1: SGgL3la9O_VhV4oP4QjLwcanWds.crl (hash: /tguC3Q/vp9s8IE3ImTMBdWUnc1DC4lRIKLDlijNw5E=)
2: XlwydODeF8gcZq2lEX8o8gcX3v8.roa (hash: TCKQsk1WAUMm3psVkuDPcRNKeGExKBO69fhhu70s8wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:7e:c3:4e:64:fa:54:51:e6:a9:b1:b8:4c:f4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Validity
Not Before: Oct 19 15:01:35 2025 GMT
Not After : Oct 20 15:01:35 2025 GMT
Subject: CN=5026e907e7cb95322905bd3f99299fc8f58ec36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:59:90:28:3a:39:6d:4d:d3:c1:5f:c6:7c:
7e:c0:a6:d6:44:5b:79:ff:45:f2:16:ed:41:0b:c1:
cc:e5:65:77:b2:df:34:ad:a7:21:24:88:63:c0:60:
07:ae:7a:fb:ce:bb:d5:4f:2d:62:0c:4d:86:3b:de:
8e:79:cd:71:be:31:7e:88:f8:2d:78:fd:8f:0a:21:
3d:08:96:e0:39:bc:ad:f5:20:d9:d0:d1:38:56:76:
95:46:c7:69:99:2e:c0:50:e8:7d:28:51:7b:c6:64:
ad:5d:f9:3d:d1:dc:9b:5c:73:27:42:b6:b9:73:bb:
6c:dc:33:c8:ea:83:6e:a2:34:b8:c6:30:d2:b5:0b:
f4:1f:ad:76:70:50:77:12:bd:19:82:d2:d9:cf:7a:
58:a6:d7:e4:78:15:d4:2c:61:bc:cd:21:1f:da:b8:
72:4b:10:e2:b8:50:92:fe:55:2e:2f:15:e0:bc:78:
47:b6:8a:fa:53:08:f9:84:88:00:be:29:de:11:3e:
01:f3:21:a9:85:90:92:1f:85:3b:9e:2a:97:b3:aa:
7a:e4:e9:a3:5a:4a:74:4e:ca:b5:d6:67:10:85:a8:
c4:7f:de:97:6b:15:62:c9:43:a8:28:ce:22:bb:bd:
ee:de:f8:02:23:7d:5c:7f:03:63:6b:b7:fc:b7:e2:
35:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:26:E9:07:E7:CB:95:32:29:05:BD:3F:99:29:9F:C8:F5:8E:C3:6D
X509v3 Authority Key Identifier:
keyid:48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c3:d6:de:da:1c:c0:01:d3:53:d4:e1:b1:b1:89:95:99:ba:
4b:32:4b:97:f9:4e:92:64:88:76:bd:b7:2b:e2:c6:aa:7e:f9:
38:9d:03:f7:bd:96:8c:b5:21:ce:99:a6:0c:6d:29:35:3b:ab:
c3:e4:da:16:80:fd:db:89:05:bd:49:63:e7:e2:c6:99:6f:22:
7e:46:e9:d8:80:78:13:df:6b:97:6d:dd:08:61:68:5c:bf:52:
4b:a1:46:25:15:b9:6a:ad:94:f2:a4:38:61:c7:aa:67:53:84:
e2:94:55:86:27:50:48:6f:7d:41:bf:60:6f:77:6d:04:37:83:
dd:b5:24:e1:46:ab:a7:44:d4:b1:6d:c5:e2:7c:b5:aa:43:8b:
ff:1e:bf:87:fa:4b:d7:b0:c3:bd:a6:85:41:67:7e:e8:37:3e:
df:fc:e2:83:58:e3:dd:6c:b7:50:a5:f3:21:92:a9:5f:47:a9:
53:4e:ee:39:1c:42:fe:94:93:a7:a0:a1:00:3a:ba:42:33:e8:
a6:85:be:ba:d7:d0:00:04:25:f9:31:25:a1:bc:4f:19:87:8d:
33:1e:78:93:21:63:bb:ae:df:24:d0:c1:9a:f4:56:42:8a:f2:
ab:5f:ad:90:30:90:72:8b:c5:5f:4f:56:9a:fa:f2:2d:2c:d0:
f3:96:53:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:36:11 2025 by rpki-client