
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
File: SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft (raw, json)
Hash identifier: XNH28SAAJhkIpsQvWRjniVd6JUhx9UGnOJN14q9avUY=
Subject key identifier: C4:09:2F:F6:D6:31:56:D2:D8:B8:CA:7C:6C:87:4A:35:3A:E6:6E:47
Authority key identifier: 49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
Certificate issuer: /CN=4978d328bcde5294f372765c11aeef28155b0f02
Certificate serial: 01988B0FB778103B41DBAF1E14FE74361832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
Manifest number: 1628
Signing time: Fri 08 Aug 2025 19:01:59 +0000
Manifest this update: Fri 08 Aug 2025 19:01:59 +0000
Manifest next update: Sat 09 Aug 2025 19:01:59 +0000
Files and hashes: 1: 2TabSpltHUMp_5ejqOpWZde5yuo.roa (hash: 3/hdPalq/aa4mw4O394+y1isU6rPiSjjsa/MhWeedzA=)
2: SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl (hash: HTF/mcBEl1LSGQUSnM8siCrRV99vcdSzTToBEd/5qDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:b7:78:10:3b:41:db:af:1e:14:fe:74:36:18:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978d328bcde5294f372765c11aeef28155b0f02
Validity
Not Before: Aug 8 19:01:59 2025 GMT
Not After : Aug 9 19:01:59 2025 GMT
Subject: CN=c4092ff6d63156d2d8b8ca7c6c874a353ae66e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:a1:93:ec:69:60:04:69:ec:c6:81:91:4b:
34:af:3f:e0:6d:7d:ba:52:4d:5b:c9:c0:e6:25:e6:
d9:18:41:42:8e:bb:f5:c5:d4:ea:7c:fe:ee:fd:4f:
e6:44:31:44:f3:63:c2:9e:85:53:4e:bb:ab:d5:be:
6f:25:6c:01:1e:92:af:2c:b5:1e:2d:52:4e:66:3d:
10:a4:d6:e2:1e:13:04:98:a8:0d:b8:f4:b9:b2:b5:
36:60:0e:db:ed:32:68:17:40:0a:07:83:0f:07:f4:
3b:4a:f4:21:9f:cb:cd:35:a8:79:a1:99:bd:05:72:
9c:f9:c8:c5:03:70:25:4e:fe:56:75:3c:2e:73:cc:
b4:5e:69:f5:5d:e9:c4:7c:b1:e4:b6:48:45:6a:a8:
93:61:5f:8a:4c:ce:fb:47:c3:1e:01:a6:9d:8a:2c:
28:11:89:31:d1:63:5f:1a:2f:06:52:88:3e:66:bf:
78:02:5c:c8:6d:9f:89:e8:b2:0c:7f:5d:ca:44:99:
ca:67:ad:a5:c8:02:5c:bf:74:5a:b5:1f:b4:15:13:
71:8f:95:52:76:48:21:b7:57:18:ac:67:89:46:62:
c9:6d:fe:53:4a:30:78:a4:0b:d7:cb:dd:f0:ea:2c:
d4:8f:e2:8f:f9:99:92:2d:84:fd:9d:fd:cb:8c:a9:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:09:2F:F6:D6:31:56:D2:D8:B8:CA:7C:6C:87:4A:35:3A:E6:6E:47
X509v3 Authority Key Identifier:
keyid:49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:09:c7:8e:cc:15:f3:fe:d8:16:fc:d0:13:f8:58:27:ad:b3:
1c:8a:85:04:bb:25:ee:27:10:8c:06:6c:86:17:f4:ac:5b:f8:
71:90:49:38:d4:d7:f3:ba:ba:53:52:f0:49:e4:ac:8e:1d:88:
67:0a:08:20:c4:91:77:28:0d:ff:69:3b:4e:e7:76:b6:cc:c5:
26:0b:c5:4d:dd:b4:79:db:41:78:10:f5:09:64:d1:39:cc:6b:
ce:02:50:38:b9:a9:9e:14:e5:ed:6b:4c:3f:43:e4:c8:5a:7d:
97:02:05:83:ff:51:48:1a:7e:aa:1e:86:7f:9a:3c:2c:ca:fc:
bc:f6:a2:9f:0b:30:7b:a2:cf:78:ab:99:26:a9:44:6a:8d:a0:
b7:87:0c:07:46:86:6f:64:dd:4f:a3:6c:fb:0e:51:7f:db:c6:
ad:53:57:41:e5:f5:cc:00:05:28:fc:47:2e:be:aa:e7:6a:11:
be:19:0f:8a:b1:ec:29:77:73:78:0c:aa:eb:fc:c1:06:51:a1:
25:66:49:7e:87:25:6b:66:5b:3d:c4:5c:2b:34:bf:da:5e:37:
d9:8b:8e:9d:7a:d3:6d:0b:40:5e:94:d5:54:70:9c:e3:0e:c9:
f0:24:48:40:dd:be:bf:08:73:6f:07:56:fd:94:e8:bc:45:99:
f7:2a:03:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:57 2025 by rpki-client