Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
File: SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json)
Hash identifier: 2ajWMFJ1M4oUzZ8Qye+LLA+Ux14IHArXKxGEt8KDeKM=
Subject key identifier: B9:5F:AD:89:3F:8D:DE:30:53:A9:37:9F:93:85:74:85:5F:4D:EE:F8
Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
Certificate issuer: /CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Certificate serial: 019874BE3A68F9950FD4FDF6E34E1F0DCCA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
Manifest number: 023A
Signing time: Mon 04 Aug 2025 11:01:20 +0000
Manifest this update: Mon 04 Aug 2025 11:01:20 +0000
Manifest next update: Tue 05 Aug 2025 11:01:20 +0000
Files and hashes: 1: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: uor8AP2HH82DMaIJtcqpTn0qy6mRsvsqA9cpTLVEUbE=)
2: WxZz3Xq4Dubhk-2v4KkyD3DjymY.roa (hash: TcPVaB9byF2mn4BjYUtIE/4fQoQybO53Dwd3vhK7Z5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:3a:68:f9:95:0f:d4:fd:f6:e3:4e:1f:0d:cc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Validity
Not Before: Aug 4 11:01:20 2025 GMT
Not After : Aug 5 11:01:20 2025 GMT
Subject: CN=b95fad893f8dde3053a9379f938574855f4deef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:91:51:19:19:5d:7b:21:2e:63:20:3b:79:65:
10:88:36:04:f6:5b:9e:fd:d1:6c:12:7f:6e:a4:99:
52:3d:df:66:fa:ae:eb:1b:13:e9:90:87:8b:3a:cf:
75:b7:7d:fd:54:e6:ff:9d:51:a2:44:47:96:e0:e5:
a6:2e:0b:29:fc:5a:c4:6c:39:49:36:9c:4e:8c:c0:
20:e0:21:c5:17:9a:23:a1:d0:43:bc:e6:ed:05:a6:
65:cd:66:2e:1c:a0:60:82:87:74:9f:7b:44:42:1c:
55:fa:ce:ac:c6:9b:e4:54:07:d4:8f:4c:ea:60:23:
eb:4f:1f:21:aa:22:52:96:a5:86:f2:da:ce:ef:4a:
9d:c2:bf:4f:27:0a:ff:c1:0a:ca:cd:c7:41:c0:02:
e5:96:f6:73:92:47:b8:9e:92:9d:ae:80:4d:df:f6:
a8:8b:7e:47:9f:42:ed:a5:53:64:b3:cf:83:f0:9e:
6f:22:aa:9a:91:37:97:f2:ff:3c:f1:57:2e:0b:99:
79:9d:a6:6a:09:fa:48:d4:88:b4:e1:b8:7d:de:e1:
43:e4:5b:a8:b9:7a:de:15:56:68:3b:d1:9b:ee:b6:
e9:d4:6e:bb:40:ca:05:1f:e9:38:b6:d3:2a:36:57:
b9:2f:00:d7:22:df:7c:25:85:a7:11:d5:a1:39:90:
fd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5F:AD:89:3F:8D:DE:30:53:A9:37:9F:93:85:74:85:5F:4D:EE:F8
X509v3 Authority Key Identifier:
keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:55:fa:2f:4a:fc:07:72:0c:4c:5b:af:3a:82:c9:48:4e:17:
1f:45:0c:62:63:77:90:0a:e6:2e:80:9a:8e:0f:31:e9:d3:25:
15:7b:e4:a0:73:56:f8:b7:4d:f7:8f:2a:a8:7a:d0:9c:4a:f2:
a0:e2:09:5f:72:5d:2f:a0:8b:d3:c7:f4:85:75:fc:c4:01:65:
ad:be:b6:98:ab:a3:dc:a2:85:cb:f9:f1:8e:de:1e:e2:c2:6a:
a6:85:5e:30:0e:93:28:29:0e:00:43:4e:3e:64:18:68:73:f1:
6b:e7:9e:37:2d:0b:4d:60:8c:35:99:38:d3:b6:87:54:45:ce:
68:57:b6:e5:b8:be:e4:33:d8:94:57:74:1a:af:9c:ce:00:cc:
67:a3:24:fb:23:b6:2e:b3:4f:73:7d:45:5f:af:b5:52:d6:e7:
56:ef:91:8f:0f:86:3b:a1:1c:e1:a6:96:70:d9:40:2a:53:6b:
ab:7d:44:1b:7c:9e:91:cd:24:d9:25:54:2c:f5:42:e1:0d:98:
fe:95:49:f8:c7:e7:60:22:06:cc:c2:e4:a3:41:f5:9f:15:87:
29:6a:75:10:73:04:1e:71:c9:c9:90:67:16:1b:51:55:da:86:
fb:c2:12:eb:2b:f7:b0:f7:80:c6:07:71:31:21:20:d7:16:e4:
4f:eb:1c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:14:33 2025 by rpki-client