Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
File: sxk4vHICgkRLq9OyazSStFats5c.mft (raw, json)
Hash identifier: YcFblgZlDM4Df+5dqUXyYA4WxsqbPRUO2e8pflum/zA=
Subject key identifier: B7:D7:28:BB:9A:86:81:C1:7F:F9:64:D5:50:13:FC:8A:8E:42:9B:11
Authority key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
Certificate issuer: /CN=b31938bc720282444babd3b26b3492b456adb397
Certificate serial: 01988543A2F62C9351235A390B9404CDF895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
Manifest number: 093F
Signing time: Thu 07 Aug 2025 16:00:58 +0000
Manifest this update: Thu 07 Aug 2025 16:00:58 +0000
Manifest next update: Fri 08 Aug 2025 16:00:58 +0000
Files and hashes: 1: mMmymzplWMeJzzgdG7P3tHtpBaQ.roa (hash: /bqXbIc2T1Ug7GTSXeUaRuS3D15TA3H+LDCDm5yP2ts=)
2: sxk4vHICgkRLq9OyazSStFats5c.crl (hash: 6XCZjBQigpxjLXlk8hShQWHTpln6PY9cxMr0J43C5vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:43:a2:f6:2c:93:51:23:5a:39:0b:94:04:cd:f8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31938bc720282444babd3b26b3492b456adb397
Validity
Not Before: Aug 7 16:00:58 2025 GMT
Not After : Aug 8 16:00:58 2025 GMT
Subject: CN=b7d728bb9a8681c17ff964d55013fc8a8e429b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:59:c5:ed:30:e4:12:61:f2:a9:b3:f6:2a:
b1:85:be:4c:12:94:f9:a3:08:34:03:16:83:3c:26:
6e:f2:b1:e4:f2:31:d4:9a:49:c2:a8:a6:e9:ba:01:
6f:3d:05:19:e8:df:9f:ff:e0:01:dd:97:ed:ac:68:
3c:63:4e:66:99:b5:54:33:30:a1:f7:05:80:ef:be:
29:f5:a6:ca:35:a9:3b:2a:5d:f9:41:a0:4e:34:01:
29:2c:f5:cf:2f:b3:14:8b:53:49:c1:6f:ba:93:35:
6f:b7:2c:1a:b4:23:00:16:fe:69:da:4f:23:98:e4:
28:71:c0:1b:8e:07:77:ae:b9:48:f2:fb:6c:f7:52:
c9:18:bb:6e:40:45:e0:55:91:a5:e4:0f:14:57:9d:
93:92:15:a2:84:a3:cd:90:0c:9e:0e:dd:b8:d3:7c:
80:ac:97:e5:11:12:ef:50:b6:df:c8:d8:f4:f6:94:
8e:7f:a3:d2:f3:31:e4:a9:17:64:27:3a:26:a9:ac:
d4:83:4b:d7:3a:93:c6:d2:34:16:bd:d1:5e:4e:43:
11:2c:f3:bc:6a:72:4f:ac:fa:c2:ec:53:c3:27:7f:
ac:eb:bd:2a:67:9f:46:db:23:65:2b:c8:39:ab:fa:
88:93:36:ef:66:b3:e0:e1:2d:97:3d:02:27:d2:e3:
b4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D7:28:BB:9A:86:81:C1:7F:F9:64:D5:50:13:FC:8A:8E:42:9B:11
X509v3 Authority Key Identifier:
keyid:B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f6:31:ab:1c:30:b5:a7:d6:25:33:cc:4e:60:4d:f9:1c:b0:
85:be:2e:0f:75:fe:3a:86:b8:81:0f:4d:b8:4f:06:73:c5:f8:
59:16:ee:d6:23:f5:7a:77:b8:fe:cc:c7:d0:10:d8:da:51:a8:
4c:7c:05:f8:ee:29:e8:13:86:7c:f5:8a:05:e8:8d:d7:5d:85:
b5:46:e3:8a:c6:f3:ce:04:31:c1:f0:15:6f:e1:bf:ba:64:90:
ab:35:30:85:d6:dc:f8:4c:06:07:ec:75:bf:b3:96:07:7d:e6:
da:54:21:2b:bd:43:f1:b4:17:c1:e3:c8:0d:a3:ce:72:c0:dd:
c3:04:de:19:02:a8:ce:69:9e:13:dc:01:4e:91:29:09:6f:d1:
bc:02:f1:02:41:7d:a7:07:ae:9e:77:ea:23:13:20:e9:61:e1:
61:ef:a9:48:33:1e:a6:a1:b0:18:d1:20:62:d3:ed:c9:f1:15:
a9:9d:bf:ec:d1:4f:df:67:0c:9a:eb:81:06:27:a6:b2:f0:17:
b3:30:75:06:4b:29:d1:3d:bf:48:f7:20:cf:00:90:a1:c4:6b:
c0:e4:a5:fc:ac:6f:52:b0:dc:f6:0c:e9:83:d0:91:f0:5c:ae:
d6:a1:29:dd:b6:fb:4d:e5:05:42:cc:7e:db:e0:59:fa:87:9e:
4b:33:6e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:10:27 2025 by rpki-client