Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
File: SA4-gK7rhMMmEvT60RbiaQpUbHo.mft (raw, json)
Hash identifier: Fr75UY2zSwMR07F7LdtdaWi9rmAbnbPY0RMktjlvI/s=
Subject key identifier: EC:2D:43:D9:B9:2C:83:95:60:4D:4A:DD:D0:6C:C5:5A:50:24:B6:E3
Authority key identifier: 48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
Certificate issuer: /CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Certificate serial: 01988A32FEF8576FDDFB508D3C533506AD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
Manifest number: 05DB
Signing time: Fri 08 Aug 2025 15:00:54 +0000
Manifest this update: Fri 08 Aug 2025 15:00:54 +0000
Manifest next update: Sat 09 Aug 2025 15:00:54 +0000
Files and hashes: 1: SA4-gK7rhMMmEvT60RbiaQpUbHo.crl (hash: aAjGdcYMSZwfZef3l/GqnhyPI40nsfx2j89pmDGG3XE=)
2: UgsM9IySNlxMAMu3nxLBQeRmBwM.roa (hash: iWc/Vehzon/VP/j65KvlMpaDrurTE8lXeWv7jdRc8u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:32:fe:f8:57:6f:dd:fb:50:8d:3c:53:35:06:ad:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Validity
Not Before: Aug 8 15:00:54 2025 GMT
Not After : Aug 9 15:00:54 2025 GMT
Subject: CN=ec2d43d9b92c8395604d4addd06cc55a5024b6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:2f:01:c2:81:b6:ec:15:7b:66:84:df:99:
f8:18:5d:74:f2:f6:26:9d:73:72:a3:9c:e8:8a:93:
12:db:6b:f1:94:51:69:12:45:ca:de:72:55:76:89:
b3:55:cf:ff:fc:2a:44:e4:af:df:de:f3:b6:f9:9a:
0e:11:ea:56:cd:d3:ac:82:96:c6:7f:52:31:89:e0:
20:36:63:13:ef:72:d6:54:3a:4e:5f:a4:69:dc:c3:
6a:7e:75:e4:23:9a:e2:ac:ab:2f:11:16:f3:b1:b4:
9b:34:36:f2:a0:89:60:be:1e:ef:a6:54:42:bd:8b:
0a:b5:68:9b:24:50:8a:99:40:68:b8:a1:61:43:96:
a6:66:9a:e1:3d:67:bd:50:00:04:1c:b3:53:6f:67:
f5:c9:02:d5:37:a1:4d:b4:97:87:53:39:89:11:6e:
5f:70:54:29:ef:6e:69:f7:f5:06:83:4a:f1:2b:fc:
51:91:77:d4:9a:c5:4c:2b:19:a7:03:92:d4:8a:4d:
68:67:d0:66:c4:5c:7e:9a:3b:2b:7f:71:fb:35:10:
dd:50:68:2e:e7:d4:fc:5f:ca:37:12:79:b2:93:d4:
83:cc:b4:9f:2e:5e:2a:35:4f:2b:01:04:8c:22:3e:
1b:86:5b:46:78:98:e0:f9:8c:9c:5c:42:d5:b1:8d:
69:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2D:43:D9:B9:2C:83:95:60:4D:4A:DD:D0:6C:C5:5A:50:24:B6:E3
X509v3 Authority Key Identifier:
keyid:48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:8b:bb:bf:86:c7:fe:1d:a3:74:9b:ea:68:71:2e:ea:ac:53:
4f:4c:6e:ca:61:70:7b:41:94:8c:1b:b7:b2:59:75:93:54:9c:
9e:8c:e0:3b:95:49:22:09:d5:0e:af:55:cf:34:47:46:be:c0:
3e:65:a5:c6:89:e9:db:3b:93:7e:b1:4b:15:c6:8d:95:e2:54:
d9:0b:20:66:ef:c8:8c:f9:1c:8f:11:54:91:fb:58:f8:e3:53:
23:d4:39:bb:01:22:1b:01:0f:c7:f4:49:31:67:bb:02:d9:13:
33:92:36:99:2e:49:5d:b8:ce:4b:54:97:52:e2:90:21:1b:21:
3e:7f:7c:c8:cd:20:c0:51:88:a1:b5:8e:09:4a:3a:21:6f:8a:
c9:c6:0a:08:0a:bc:1d:a1:5a:af:d3:10:13:29:3b:17:dd:a5:
e6:ba:24:c4:06:b3:ad:5f:7b:24:67:01:04:90:2d:98:60:a8:
45:80:1b:44:26:4a:8e:c6:5e:01:ff:9b:8a:d7:97:f8:05:ba:
06:a7:62:4d:e8:83:70:00:9b:5a:8b:37:5c:67:6f:c4:d4:3d:
01:57:58:d4:a4:ca:f8:8c:08:99:6e:eb:67:94:37:68:ab:89:
56:f2:4f:d2:36:3f:65:c2:ba:03:b9:ed:6b:ed:07:6c:b1:eb:
5d:95:a4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:40:27 2025 by rpki-client