Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
File: sXQMTAefLR3uhUOfgngbm651apU.mft (raw, json)
Hash identifier: UVMv4DVt59IIunCHWHEecdjrhSzrB3xXGMCy52hIf+c=
Subject key identifier: E5:0F:6D:8B:A0:6B:31:F2:5E:78:D0:43:5E:40:C3:03:23:10:E7:E2
Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
Certificate issuer: /CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Certificate serial: 01987D1C7FF77DC3745E15864464A4F8891B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
Manifest number: 1268
Signing time: Wed 06 Aug 2025 02:01:16 +0000
Manifest this update: Wed 06 Aug 2025 02:01:16 +0000
Manifest next update: Thu 07 Aug 2025 02:01:16 +0000
Files and hashes: 1: 0kGm7IS6foM84ApNB5wMBZmcs70.roa (hash: fsNAu7RVtrbBsKEN64Ou91zqn3ieSIW0lwlDv3luCl0=)
2: QHGLz4vDf8HU0PXuv58AHJKDNwE.roa (hash: zsAsJqx3Xlx/j+LLE8QbsIeKt4A9wuocERvf2nTmf7A=)
3: Sz2kPMld2S0NhbWe3VBXUQg4E_g.roa (hash: CgZe2V9k88f5ug37ai2G7ohUxSeYSwTeyOJXFySNdfc=)
4: sXQMTAefLR3uhUOfgngbm651apU.crl (hash: tb4H3UuOsPi2nl1yQidKCP/8bk4g+tZ1Y2e3WDcr4Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:7f:f7:7d:c3:74:5e:15:86:44:64:a4:f8:89:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Validity
Not Before: Aug 6 02:01:16 2025 GMT
Not After : Aug 7 02:01:16 2025 GMT
Subject: CN=e50f6d8ba06b31f25e78d0435e40c3032310e7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ef:19:5a:e1:c4:fc:b6:ba:73:18:f9:47:cf:
88:a7:a9:0d:06:bf:04:e1:22:f3:86:18:bc:95:f6:
01:5a:27:ee:3c:13:07:8f:ac:5e:18:bd:7a:30:65:
9c:e5:e0:c7:f0:97:ac:e6:94:12:dc:c5:36:bb:1a:
d9:ed:ed:eb:86:53:5c:6c:c8:54:3b:af:a6:27:1e:
43:e9:ef:b8:1b:74:aa:e5:f1:d0:31:89:c3:b3:5a:
7a:df:fa:39:43:8a:41:eb:00:21:6b:71:b5:74:ac:
a2:2e:7d:95:20:4e:55:e2:3d:3b:39:0a:8c:b3:ae:
d7:94:8d:03:8c:40:24:1a:17:a9:69:89:bd:f7:37:
ec:09:8d:0f:b9:d9:64:15:36:e7:8f:ea:45:6a:40:
78:5b:34:ff:08:c1:c4:64:ef:39:24:bc:d5:2d:a6:
9d:aa:d0:b4:b4:24:78:2b:35:95:d3:49:d6:51:26:
00:f7:f3:87:62:a6:62:9e:0c:2d:69:96:f4:6a:bf:
2d:b1:a4:64:e4:ce:65:c1:e5:e9:e0:dc:e2:db:71:
98:23:54:89:25:c4:7c:02:8a:1a:a6:0c:dd:93:41:
0d:f8:fe:f6:00:3b:67:0a:ba:bf:98:a9:b1:61:2b:
d7:e2:c2:26:82:57:35:f1:9a:83:3f:19:65:7f:f4:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0F:6D:8B:A0:6B:31:F2:5E:78:D0:43:5E:40:C3:03:23:10:E7:E2
X509v3 Authority Key Identifier:
keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:68:e8:6e:d0:46:bd:30:c3:1f:64:c8:92:87:07:45:70:e5:
74:8b:e2:77:dc:25:9e:ba:0d:5c:00:c7:37:77:58:6e:fe:21:
fb:dd:20:a6:90:9c:a9:25:48:08:27:e4:d4:4b:4b:fb:bc:21:
2e:1d:30:89:fe:f6:8d:51:97:fd:4f:eb:57:8b:f4:95:61:07:
50:2e:e7:7a:3f:29:b9:a5:b6:74:1f:b8:41:5b:f5:3b:4c:24:
53:7b:03:6a:4f:28:71:cd:bb:8d:6f:d8:0b:78:2b:82:7c:b9:
e0:ea:dc:d5:60:66:dd:1e:d7:43:2d:70:9b:18:98:f7:81:67:
c4:aa:74:95:9f:f5:ac:82:75:31:3a:21:25:8f:e2:28:51:2e:
1c:c8:3d:a7:7f:a0:75:a1:9f:22:8b:b3:9f:a7:72:f7:4e:f5:
96:0b:de:0e:57:0b:cb:43:a2:5d:d8:f9:dc:2b:71:5f:8e:73:
7b:f5:0b:be:5b:b3:a2:a8:fe:3c:91:fd:32:f0:77:33:fa:16:
24:ce:45:db:b9:9c:5c:99:6b:28:dd:fb:df:0e:74:7b:18:c4:
9d:7d:59:88:60:8c:b1:d7:17:f3:17:c6:62:35:66:4e:c3:17:
a8:b4:08:95:5f:b5:cf:aa:75:72:2a:ec:c8:42:65:5b:0b:7b:
c0:f0:d2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:55:13 2025 by rpki-client