Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
File: sUgIa40dx_EOND_RZXGSOadVvTQ.mft (raw, json)
Hash identifier: XwpNghQ8PeqJvsltDNnntq5BtxNJ4Gk1cUqa79ch8ws=
Subject key identifier: 46:8B:D7:89:19:2B:D0:8F:30:ED:59:FC:D4:55:C6:EE:92:EC:85:72
Authority key identifier: B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34
Certificate issuer: /CN=b148086b8d1dc7f10e343fd165719239a755bd34
Certificate serial: 0199FC589960D2A4EBCF1BF5B84D71BB7FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
Manifest number: 105E
Signing time: Sun 19 Oct 2025 12:01:28 +0000
Manifest this update: Sun 19 Oct 2025 12:01:28 +0000
Manifest next update: Mon 20 Oct 2025 12:01:28 +0000
Files and hashes: 1: sUgIa40dx_EOND_RZXGSOadVvTQ.crl (hash: ZQqg1yK1r//wZpHvwJU2zzOpjPecESO8uR2u5YWgfz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:99:60:d2:a4:eb:cf:1b:f5:b8:4d:71:bb:7f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b148086b8d1dc7f10e343fd165719239a755bd34
Validity
Not Before: Oct 19 12:01:28 2025 GMT
Not After : Oct 20 12:01:28 2025 GMT
Subject: CN=468bd789192bd08f30ed59fcd455c6ee92ec8572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:52:9d:90:72:c0:16:b4:43:32:70:27:4d:
0c:f9:ef:74:a0:0b:b6:bb:28:8c:14:e5:7c:44:2f:
97:95:b4:8d:e4:db:13:a1:c8:46:40:02:18:c2:99:
37:65:1e:f5:f9:f9:3f:3c:0b:d8:0c:c8:2b:ce:12:
75:fc:3d:a4:dd:ce:df:10:0f:81:4b:35:76:f6:5b:
f0:61:60:4c:a6:13:ea:db:6a:ff:17:8e:cf:92:e0:
0f:fb:67:c7:86:aa:25:c2:a1:04:1e:bb:69:52:16:
9f:51:01:8f:56:c2:c1:56:2b:bc:32:0b:35:cd:ac:
74:ec:4d:84:f0:48:ff:88:10:23:dd:19:55:03:80:
43:eb:d1:d6:18:8e:7d:5d:01:5f:aa:ec:11:16:97:
85:ac:5c:8f:99:24:1a:03:e0:d8:94:b6:38:8d:7c:
59:77:36:98:95:0d:7b:f4:d6:e8:3b:9f:4e:60:94:
19:84:07:dc:d3:8c:23:9d:67:08:4c:33:16:ae:f2:
f3:bd:7e:b7:40:4c:67:fd:18:70:d2:3a:fd:21:8a:
d3:cf:22:a9:dd:b9:5b:1a:ef:f3:ac:49:0c:81:67:
43:e0:5c:af:1a:74:e1:79:ec:f3:df:34:59:11:18:
33:97:0b:68:34:e0:f0:c5:c5:91:15:97:8a:b1:8f:
be:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8B:D7:89:19:2B:D0:8F:30:ED:59:FC:D4:55:C6:EE:92:EC:85:72
X509v3 Authority Key Identifier:
keyid:B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:35:89:37:86:d8:57:c6:2d:d2:be:22:c0:16:6e:94:22:e8:
2c:da:23:2c:0e:86:7c:6c:43:a2:79:9a:3c:84:04:52:02:e5:
13:c8:5d:6e:75:69:23:91:86:b1:45:31:16:7f:b3:fa:5e:a0:
60:c0:52:33:95:3e:7a:3e:35:34:a8:03:8e:18:3a:c5:80:32:
61:fd:11:c7:39:25:2e:89:15:ab:b5:a2:e2:14:b8:a2:70:99:
9e:7f:5b:2f:ed:51:25:b2:42:41:20:bb:5e:86:65:f3:be:3e:
df:c6:5e:9f:b3:cc:84:f9:99:6e:eb:d8:01:b5:ad:09:d1:de:
e0:01:07:6b:6a:b5:85:e7:a1:17:51:69:9f:c5:a8:a4:df:4a:
e6:32:5a:a9:39:b3:a0:bc:e7:f7:90:4f:02:b3:12:b7:df:bd:
0f:b2:fc:35:15:e9:92:f7:6e:d8:86:62:29:3c:42:36:9b:bf:
a7:e8:2b:7e:6b:18:62:76:15:c3:1c:95:58:2a:91:44:3e:ae:
9a:5c:e3:6b:0a:ff:90:95:73:51:48:f2:17:2a:8f:bd:e3:48:
ba:de:79:e4:41:84:ba:a2:f0:c7:8a:bb:e2:da:e6:43:6f:3a:
8d:6f:86:0f:60:85:03:f7:b3:23:3a:84:3c:40:19:87:f4:a5:
a9:b8:bd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:55 2025 by rpki-client