Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier: CfgBIpb1GEFkLCeEWCuqFzhKMD6psmPKEF4iYSjcc7s=
Subject key identifier: 3C:7C:B7:4A:F6:B9:B3:58:35:28:8C:0E:FE:39:35:F1:F7:A3:59:2A
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 01989CA6DF94D992DF4DCBEDCE8F00C588DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number: 03FC
Signing time: Tue 12 Aug 2025 05:00:38 +0000
Manifest this update: Tue 12 Aug 2025 05:00:38 +0000
Manifest next update: Wed 13 Aug 2025 05:00:38 +0000
Files and hashes: 1: TtWAkSfWnAdWkPSbjWsj0bQP2Qs.roa (hash: aq+t6Xrt8tsoSTCr/VP5wkOGWF6BiCi7pgwlC8GWdxs=)
2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: Kevdp3pv9R7hVsQhUJ311teaVrssh/jHhYAoz9e2yOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:a6:df:94:d9:92:df:4d:cb:ed:ce:8f:00:c5:88:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: Aug 12 05:00:38 2025 GMT
Not After : Aug 13 05:00:38 2025 GMT
Subject: CN=3c7cb74af6b9b35835288c0efe3935f1f7a3592a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:64:67:56:c9:fb:2a:fb:ab:f0:e8:17:28:
0b:06:96:a8:90:0e:0d:23:62:29:8a:dd:cd:01:e0:
d7:9b:dc:84:43:08:87:57:20:b4:47:11:3c:44:fa:
17:7c:be:98:01:41:61:4c:9e:ef:47:77:ad:83:cd:
13:3f:95:ea:a0:be:b6:7f:f5:70:d9:c3:e2:ad:66:
cf:7f:18:4b:fd:2f:31:b2:fe:f5:5b:8f:e0:b1:4d:
6f:ed:a7:50:b4:68:47:1a:20:36:1d:ed:fd:df:7f:
b1:86:19:c8:cd:63:e7:71:87:11:53:a6:7e:6d:a1:
05:ad:ba:d0:06:59:f5:73:8d:22:18:66:ff:19:c4:
5f:24:a5:f2:04:24:4b:85:65:db:59:34:79:18:32:
13:f6:f1:b1:16:bb:c9:8c:cb:b3:f7:fa:e1:cb:8a:
4b:fa:b2:37:d6:9a:b9:49:37:a3:90:e2:05:09:00:
cd:8e:54:82:33:f3:1d:0a:65:0a:68:2b:23:e3:2c:
6e:76:29:c5:9d:57:51:d6:85:1e:3d:c0:03:93:ae:
1a:5e:05:23:5f:d7:8a:fd:19:a2:f3:94:78:00:73:
7a:5c:c4:1b:e7:51:91:b8:b0:16:55:48:3b:73:83:
17:cd:41:84:47:a9:79:11:9e:4b:f1:0b:3f:ce:78:
a8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7C:B7:4A:F6:B9:B3:58:35:28:8C:0E:FE:39:35:F1:F7:A3:59:2A
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b6:86:c2:ee:97:31:1a:8c:7b:7c:f6:c0:ec:ef:fb:c1:8b:
aa:df:ae:35:32:47:a5:f0:29:6e:e2:2c:8c:bf:db:55:b0:b8:
c2:00:d7:ba:f4:8e:9b:da:6b:eb:1b:1d:ed:65:24:7f:e6:93:
30:e4:0a:ac:f6:e5:db:05:dd:7e:22:ba:13:35:c1:67:a9:b2:
26:b6:db:b1:8b:be:a6:9e:65:3b:ad:5e:ed:2d:13:cd:fa:cb:
18:e3:5b:06:77:58:4a:d4:78:14:19:e8:d8:d3:6f:67:ee:6c:
1f:82:a2:01:2a:46:fd:6e:0e:37:93:23:1e:ec:34:ac:32:5d:
74:fe:7c:ba:a5:ac:b9:b5:36:90:5e:f5:9a:54:38:9b:1b:12:
f7:e8:8a:4d:a7:30:68:53:46:6c:71:a3:34:8f:16:76:40:fb:
a2:8b:bb:e0:6a:1a:b7:ee:db:f6:30:9c:c5:3c:3b:a1:b4:5d:
5c:fe:c6:d0:0d:24:6f:ad:10:4a:ba:c8:31:3b:19:b3:0b:9b:
ea:01:e4:a1:8f:74:c3:e7:d6:1a:01:fd:9a:0b:02:2d:80:09:
13:c5:70:31:e8:e4:da:b7:ee:ae:ea:a8:28:48:01:27:96:ed:
2a:4e:55:4f:ca:20:bd:de:00:d3:b3:6a:4b:7e:2f:66:b3:a4:
ec:ea:1a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:45:51 2025 by rpki-client