Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
File: SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft (raw, json)
Hash identifier: jqFVdQUWTgw6/PDH+I5FoJCPJgKx0unqBg0O4qdxmXE=
Subject key identifier: 14:29:71:24:E8:74:66:FB:0C:4D:EA:42:E4:3B:ED:9B:B9:7F:BA:7D
Authority key identifier: 4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
Certificate issuer: /CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Certificate serial: 0198A04CF2749AFD063345095C97EFBAAB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
Manifest number: 136A
Signing time: Tue 12 Aug 2025 22:00:53 +0000
Manifest this update: Tue 12 Aug 2025 22:00:53 +0000
Manifest next update: Wed 13 Aug 2025 22:00:53 +0000
Files and hashes: 1: SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl (hash: gVPWFfbv/gbLgqbuHXJVwZYlV5/ECsoiIJoZHRjLuD0=)
2: eiFnEmDTPMfL3dAfRXolzkxp_i4.roa (hash: 4dzfRJYq125S/BqKfHbwTEsWNU4YgfgsuuliSEpx9eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:f2:74:9a:fd:06:33:45:09:5c:97:ef:ba:ab:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Validity
Not Before: Aug 12 22:00:53 2025 GMT
Not After : Aug 13 22:00:53 2025 GMT
Subject: CN=14297124e87466fb0c4dea42e43bed9bb97fba7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1a:f3:03:15:b0:35:af:c8:a5:81:10:44:b2:
73:76:00:66:25:a1:79:1a:20:49:99:10:99:bf:f8:
7f:cd:0b:a1:da:64:37:5c:62:3b:ef:3e:33:fd:4b:
38:7a:be:11:27:fd:ef:0b:70:bc:2f:b1:0c:99:b3:
b3:9a:6d:c2:f9:17:89:40:6a:75:90:13:4e:7d:3c:
d8:b4:49:77:93:c5:24:53:89:1a:9e:00:4f:f6:fd:
dd:12:08:44:c7:a2:be:0c:d8:bc:9f:08:de:51:25:
15:3e:4f:a2:9a:60:2e:50:29:b3:5a:ef:97:64:b0:
45:d8:3a:66:6e:71:98:f3:49:9e:33:ea:5c:2e:de:
ba:e0:f6:0c:3b:f6:3a:39:87:c0:b9:b8:c4:0c:b5:
48:b7:c4:6b:fe:73:78:1e:68:0c:09:0b:bd:da:e5:
41:d8:5d:60:b2:6a:d7:2b:3a:7f:c4:c5:6d:72:35:
7c:c8:23:d1:10:4e:64:73:f8:19:26:d7:ae:8e:f3:
73:ee:97:31:b2:78:1c:2a:18:3e:3c:15:3f:d5:d0:
87:ae:65:6e:ea:f0:5b:bf:76:4b:40:67:a4:df:27:
de:7a:2c:ff:b6:58:ba:fd:aa:ce:83:4d:d2:2c:04:
32:99:c5:b3:16:41:4a:b8:f5:b9:c7:36:82:40:dd:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:29:71:24:E8:74:66:FB:0C:4D:EA:42:E4:3B:ED:9B:B9:7F:BA:7D
X509v3 Authority Key Identifier:
keyid:4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:56:47:93:40:12:c6:c2:89:77:19:57:bc:c3:79:5a:0a:1f:
8e:59:09:50:f3:3b:f9:2a:90:02:ca:0f:4b:ba:74:f4:e3:58:
97:77:f9:7f:95:20:b6:0e:21:b8:c3:22:1f:b8:40:bf:0f:50:
67:c2:d3:dd:f6:ad:1b:90:a8:fc:be:dd:12:d3:89:20:b0:70:
3f:bf:e3:8c:9b:a5:d0:e2:b2:83:c2:2b:19:f8:0e:55:8d:b5:
34:4c:3f:3b:7b:f5:a9:6f:0f:43:10:03:57:74:33:c1:f1:43:
b9:b0:6c:c4:6d:4d:23:65:b0:67:f1:31:79:13:63:af:02:b7:
a4:9a:b1:ad:22:71:03:35:fd:94:7a:a5:18:d9:13:c6:6d:5a:
41:e9:a2:e6:38:95:a0:89:5b:43:f8:cb:f8:fa:60:77:aa:81:
df:d1:32:ca:cf:87:2d:97:08:09:4d:65:48:cb:8c:62:b0:d4:
68:c2:05:7a:ea:e0:45:c5:26:02:e8:68:85:24:89:d5:82:d0:
cc:a9:e4:c0:22:a9:c5:92:3a:9d:2f:ec:a2:e7:0c:6b:60:e6:
c0:e9:58:a4:d1:76:64:2b:89:ba:62:11:3a:85:0b:1c:77:a3:
bb:d4:eb:93:a1:d8:9d:01:47:91:ac:c0:cb:d7:cc:37:c4:fb:
d5:de:ef:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:53:28 2025 by rpki-client