Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier: EYAKJy0Et9HKvuMevG/e2xoCtxLGjZAX+vUrOCsJ7ZY=
Subject key identifier: 51:08:BA:48:FE:85:95:B8:FD:1E:4F:71:5E:95:5C:23:A9:1A:1E:01
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 0199FC588548708771AC0B7CA053936E0BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number: 06C1
Signing time: Sun 19 Oct 2025 12:01:23 +0000
Manifest this update: Sun 19 Oct 2025 12:01:23 +0000
Manifest next update: Mon 20 Oct 2025 12:01:23 +0000
Files and hashes: 1: 3klZTNM9YhJqZUNp3PJkFRczFX8.roa (hash: OyXgZ5l4rO5Wt2TcoTvX9gJZ0hgPAdu2wTU0n6/gZoU=)
2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: RiHDzB2zBo2gtql64TqypNk/tXQh0Tt0399AS/M+lZI=)
3: W0AAJRLr6gi2r74kS95DxTYGfTw.roa (hash: MH+HQqYFMBeGJJqR0jYHA1u1MAdvWa+AHHutk6W2MvA=)
4: r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa (hash: xjRrpFDO8g9sZNIp8GQ1hogAG1em04ZcPXgm2d8N7a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:85:48:70:87:71:ac:0b:7c:a0:53:93:6e:0b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Oct 19 12:01:23 2025 GMT
Not After : Oct 20 12:01:23 2025 GMT
Subject: CN=5108ba48fe8595b8fd1e4f715e955c23a91a1e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:33:7d:71:d2:9b:f3:5a:9a:f8:4e:fc:c0:
57:b3:d8:37:79:67:22:a9:6b:b8:ab:24:92:1b:1f:
a2:31:a7:30:6a:d6:57:ab:ec:55:4a:76:70:27:07:
a6:d0:d1:8c:df:89:6c:2d:84:01:cf:f6:e3:47:7d:
6f:2e:b9:1f:cc:9a:84:44:68:e3:47:93:9a:a7:ff:
88:af:3b:59:a8:78:30:ad:d1:2e:d6:3b:a0:b7:8f:
14:fa:5e:38:51:f7:2f:ef:81:e9:bb:14:a5:7b:d7:
91:b0:a7:85:05:85:a7:ba:b7:51:ad:ef:3d:e8:86:
ec:6c:b1:a2:69:09:17:cf:40:8b:36:c2:43:73:45:
a2:c3:af:38:66:2a:82:c7:7b:c1:ba:3b:1c:f4:fe:
b8:92:c2:ad:24:8a:50:ed:aa:9e:00:dc:b8:e8:6e:
ed:37:b9:0d:9e:c5:5a:06:6a:19:4b:1f:62:37:ce:
90:34:c7:8a:23:58:c5:62:62:15:b1:59:2b:c0:7a:
e8:11:84:ac:c3:12:9d:fa:60:7c:b8:52:ec:8b:6e:
23:3a:8d:8d:41:2d:6b:98:60:22:31:af:92:31:03:
8d:a4:92:cb:58:7a:3e:df:d9:7f:d3:68:04:d0:ad:
a2:8b:a0:2b:c4:84:1d:55:2f:8c:70:d1:9f:11:a4:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:08:BA:48:FE:85:95:B8:FD:1E:4F:71:5E:95:5C:23:A9:1A:1E:01
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bb:14:44:03:b8:1e:bf:4d:36:dd:78:c3:a1:b1:05:82:03:
66:88:a1:ac:e4:2d:12:eb:9e:a6:e7:49:39:75:3f:c0:03:67:
87:b4:59:f8:c8:eb:02:1c:0a:39:c7:c0:ef:48:0d:0f:b2:f6:
f3:ea:ee:02:87:80:b2:d8:23:7f:d3:63:b6:85:29:70:54:58:
05:5e:ff:a6:67:e0:52:a5:1a:da:33:df:40:f9:9f:8e:b4:2c:
c4:df:e0:b4:37:98:65:4c:e0:b8:66:ac:2f:4c:70:67:9c:6b:
99:f4:8b:22:e0:27:17:64:5f:ef:78:17:6c:48:77:39:e1:e6:
e7:99:3b:f8:89:22:9e:64:e9:76:35:20:ad:55:69:70:71:d2:
d6:cf:1c:65:38:c9:f6:4a:da:76:f4:68:0c:f2:e8:d7:ec:82:
5f:0a:12:86:bb:da:eb:69:63:6c:a5:80:5a:9f:77:96:61:a5:
91:96:a5:b9:d0:39:a4:5c:f7:47:69:a9:3d:4d:60:ba:b7:ac:
be:a8:df:0a:9d:8e:0c:97:ab:4e:ab:1d:67:76:35:fb:88:f9:
cc:36:25:f3:6c:90:ef:36:1e:a7:44:85:22:6a:09:2d:b8:75:
08:38:8b:f7:0b:48:52:2b:40:bb:c9:eb:7c:fa:e3:ac:d6:3a:
80:81:2e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:33 2025 by rpki-client