Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
File: SF92J0yAXSWxFaOtuh0uoVTe6tc.mft (raw, json)
Hash identifier: jBRmcDCd532sB1Z5KP/K+OYWha1Vzak+hmFjjNg6O6Q=
Subject key identifier: 31:C3:8E:6E:34:A5:76:0C:09:43:34:C7:5B:DE:AB:C9:BE:9D:DF:BF
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial: 0198726170C7B2419B3C59E95850A1ED757C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
Manifest number: 1009
Signing time: Mon 04 Aug 2025 00:00:45 +0000
Manifest this update: Mon 04 Aug 2025 00:00:45 +0000
Manifest next update: Tue 05 Aug 2025 00:00:45 +0000
Files and hashes: 1: JWbxkXMT1AbpQisEDcJK6XiKzB0.roa (hash: j5i4M4w+YBqEaXEsOz14p6tq/xzrFVxmrAYSCZG3o+M=)
2: S81leN1fuHkrYmn7HxOWRSa_EgA.roa (hash: jKDEc5FdU7Yds63BEna9vHfX9LdcVE/wlCXgfCTj304=)
3: SF92J0yAXSWxFaOtuh0uoVTe6tc.crl (hash: yF9lJfGpV1lzQy5/p9l2mrhGj1kEEgTocYOpV4mue/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:61:70:c7:b2:41:9b:3c:59:e9:58:50:a1:ed:75:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
Validity
Not Before: Aug 4 00:00:45 2025 GMT
Not After : Aug 5 00:00:45 2025 GMT
Subject: CN=31c38e6e34a5760c094334c75bdeabc9be9ddfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:76:ab:a6:d0:64:4e:86:84:33:82:6a:e8:
94:6c:f1:f2:4d:ee:03:d4:3d:9c:89:4f:af:31:f5:
a2:0d:ce:58:eb:46:fb:a9:db:2f:91:00:a1:aa:82:
9c:8d:53:60:a3:9f:c3:81:f5:0a:d6:60:9e:de:8a:
a0:28:6a:f2:3a:67:a1:ac:29:23:34:83:3a:fd:88:
eb:d6:fa:83:52:ed:a1:ba:e3:12:b4:9f:db:cb:58:
21:ed:0b:8b:0f:5e:26:f4:28:60:df:42:b5:3b:42:
2f:b0:5a:72:b5:a8:d7:40:1a:31:fa:9f:b2:22:fd:
6a:f2:bd:22:c4:64:d6:91:3f:b1:bd:49:af:17:bb:
a2:dd:41:ed:00:06:c5:d4:3c:08:a6:fd:2e:19:2f:
0a:16:7f:c4:8d:7a:95:7b:a3:87:4e:6d:db:e3:ca:
14:ae:56:44:ab:b0:4a:ef:7d:87:c9:b0:d7:aa:4c:
2a:1b:78:4b:3c:34:66:a1:95:55:59:cf:20:9e:44:
64:b6:3b:d5:a2:34:9a:dd:78:5d:8e:2b:12:0c:da:
c0:cd:9f:80:28:a0:35:f3:a4:94:ae:e5:ea:ed:de:
9a:6f:ee:63:87:99:7c:4b:63:17:d7:bc:ed:e9:11:
ec:96:1c:e5:37:31:7d:25:84:65:6e:43:43:45:f6:
fd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C3:8E:6E:34:A5:76:0C:09:43:34:C7:5B:DE:AB:C9:BE:9D:DF:BF
X509v3 Authority Key Identifier:
keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:19:28:e2:51:e9:8d:e1:7e:9a:2a:03:31:92:ed:48:4e:ba:
46:e9:b5:39:4d:90:dc:bf:4c:c4:c7:21:35:0b:7c:a1:5e:b0:
d3:8f:b5:a3:30:f3:73:c4:51:d9:c6:b5:04:4c:ec:3c:bc:1d:
b5:d1:75:ff:73:19:3a:d4:09:06:8f:a2:c3:3e:e4:a9:47:9c:
50:0b:02:68:bb:a0:1a:a2:86:f5:71:b1:69:fa:bf:da:4f:95:
68:8a:24:62:7d:18:1d:2e:ab:a7:41:48:85:ed:de:5a:88:e4:
81:45:3c:5e:7c:69:46:a0:f1:93:e6:9f:86:d6:97:17:3d:82:
fb:98:ba:b3:fd:27:89:3f:4f:2c:cc:ba:05:d9:93:04:28:f3:
6f:a1:af:1d:2e:4b:b3:1a:89:2c:ac:ab:34:9f:28:94:3d:98:
67:96:f8:34:ff:86:46:06:b1:74:11:cd:a0:d7:87:f9:96:93:
d3:43:de:0f:24:48:ed:87:f8:04:73:cb:46:a3:a6:74:27:fc:
cf:8a:94:27:bb:74:80:c1:a3:61:37:13:92:cc:77:4e:17:2c:
ad:a0:03:7f:76:f2:f4:f4:43:18:96:87:b3:4a:4b:19:ce:f0:
53:46:ca:00:2a:2b:bf:9a:fe:36:1b:67:a5:42:3f:93:ec:81:
0a:10:53:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:25 2025 by rpki-client