Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
File: sG9AQEkaZW_3Um0vF2EbDWisvQw.mft (raw, json)
Hash identifier: oLSsdwzbFRCPIm/zKcyO20eRE2hlS7LrVe1TSGDWn2k=
Subject key identifier: 0B:BE:A6:62:24:F5:EF:E6:0D:28:8F:BE:17:0E:FB:6B:73:39:F8:DC
Authority key identifier: B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
Certificate issuer: /CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Certificate serial: 019896DBE2D585D31781966700AE77504AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 02:00:49 +0000
Manifest this update: Mon 11 Aug 2025 02:00:49 +0000
Manifest next update: Tue 12 Aug 2025 02:00:49 +0000
Files and hashes: 1: 3oQgBF8b0SlPmJhLRByZqFye4Kg.roa (hash: kYRYhVl9nNIlfjRJmfhpqtBDhLtp2pSGg+NrF/eLIP0=)
2: sG9AQEkaZW_3Um0vF2EbDWisvQw.crl (hash: YfqMwnanLH8zwVMp7OTjsQBn4uwOrwvEjDLXHkPdbUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:db:e2:d5:85:d3:17:81:96:67:00:ae:77:50:4a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Validity
Not Before: Aug 11 02:00:49 2025 GMT
Not After : Aug 12 02:00:49 2025 GMT
Subject: CN=0bbea66224f5efe60d288fbe170efb6b7339f8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:91:27:9b:60:66:b6:59:af:3e:ae:3f:7e:cf:
eb:38:8e:8a:91:8a:4b:be:7e:32:a5:68:07:21:9f:
2b:81:9a:e6:a0:9f:5a:14:fe:46:38:4c:8f:7e:64:
33:c1:a0:9d:f9:46:1d:46:f9:d8:49:3d:fd:dc:41:
64:8a:c9:f9:64:77:34:96:4c:3c:75:28:b9:da:03:
af:6d:de:94:63:99:03:c6:b2:70:04:bb:71:83:cb:
17:27:b3:1a:2b:21:b2:6b:85:2f:51:a4:f1:73:0b:
e2:b3:2e:f8:ec:5a:9d:b7:2d:f4:d9:b9:f5:14:82:
d4:e5:4d:40:50:78:21:fd:57:46:a4:2b:82:94:16:
43:cb:e0:2b:d9:27:d6:a4:25:ec:24:73:86:eb:5b:
33:8e:7c:7e:a1:ef:f9:b8:62:b9:49:ec:19:7f:2d:
37:3a:07:9b:e2:3b:5e:b2:4d:5f:3f:82:c6:6d:d7:
ca:6e:28:fd:bd:3d:12:c9:93:53:fc:c0:31:e4:31:
6c:30:3a:fb:75:4c:c8:6a:59:ff:3c:82:e2:d2:45:
b2:1e:48:78:96:a0:e5:bc:74:3b:9c:9a:14:03:5c:
e2:c4:57:ee:73:53:b6:e8:76:7f:83:8e:02:e0:5b:
aa:8b:88:9c:9a:13:d3:df:5a:26:47:5f:e9:5e:a9:
09:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BE:A6:62:24:F5:EF:E6:0D:28:8F:BE:17:0E:FB:6B:73:39:F8:DC
X509v3 Authority Key Identifier:
keyid:B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:35:e6:04:10:e0:4e:91:ff:df:84:52:72:9b:91:23:20:2d:
2c:5d:a7:52:8c:3a:23:ca:80:35:6d:75:be:0e:f2:9e:25:07:
d6:44:6a:9f:5c:1f:59:8c:6e:3f:a0:ba:14:d4:51:5a:d8:fe:
d6:c2:90:43:2f:ba:10:75:83:1b:45:f2:16:78:5f:b9:92:33:
64:23:ac:55:6b:fd:a8:4c:66:a8:54:e9:45:14:4a:16:fd:65:
3b:fa:86:ec:4c:e1:de:9f:8d:1d:d3:40:27:0b:76:d0:6f:c1:
80:41:3e:86:b1:d6:33:9e:85:79:d8:33:82:06:ed:04:a1:4b:
35:ca:99:7b:59:25:93:64:e1:bc:f4:4c:79:dc:d0:03:50:04:
f8:87:56:5b:aa:54:ba:04:0e:f4:e3:02:78:6c:d2:31:26:c9:
3f:bf:86:71:bd:b1:40:1d:52:44:68:e9:5c:ce:e4:3f:40:d8:
46:72:2d:5a:ca:99:b0:42:85:65:f9:7a:e6:10:ef:e1:e7:06:
b6:db:12:8a:b4:36:fa:2e:5b:fc:03:77:78:02:cb:ce:57:dd:
f9:2c:b2:c0:93:ba:27:d8:ee:8e:9c:ee:85:a2:8d:3a:14:d8:
2b:75:a7:5a:bb:9c:80:7b:c2:7e:cd:16:12:f8:a3:db:d7:4b:
b6:b0:a2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:21:39 2025 by rpki-client