Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
File: SepQocYggnYq_aAH1vyLS9sFdJ8.mft (raw, json)
Hash identifier: xsM4vmFhXb5tb8WHVP4RnShH4vnkogNtJ2nvuM36jxA=
Subject key identifier: 2D:96:ED:60:EB:E0:27:08:94:BE:80:B2:54:DF:00:50:B2:4D:E2:61
Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Certificate serial: 019895927CF779048DEF1AA7EC3C8371A3A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 20:01:02 +0000
Manifest this update: Sun 10 Aug 2025 20:01:02 +0000
Manifest next update: Mon 11 Aug 2025 20:01:02 +0000
Files and hashes: 1: BHvEiTbi4Pq6B9PpmT5f6n87vL4.roa (hash: s+QevCZ3wcDACFh+jWTrJPdapoQkuOB0iQkRIdmgUkk=)
2: Nvgx0NStgiF6lAwa5XAPUa97GUc.roa (hash: HepcNDvL/nGXjv68tFuvUcj3BhJTbTJLihV6JiWEI70=)
3: SepQocYggnYq_aAH1vyLS9sFdJ8.crl (hash: 6vO+WQsE8I3dH8KMoGOB1mbEg4aOogUXfA5gEZDB244=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:7c:f7:79:04:8d:ef:1a:a7:ec:3c:83:71:a3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Validity
Not Before: Aug 10 20:01:02 2025 GMT
Not After : Aug 11 20:01:02 2025 GMT
Subject: CN=2d96ed60ebe0270894be80b254df0050b24de261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:2b:55:eb:fc:74:db:f9:e1:ac:be:b8:16:
0f:42:38:1d:f6:e6:c3:39:72:6b:02:4d:6f:b0:94:
7a:94:3d:13:50:e7:0e:ba:c4:7d:55:b0:a6:ac:36:
e9:6e:8a:f5:44:bb:47:d7:92:dd:36:0b:14:fe:49:
9e:eb:d8:df:36:53:aa:d8:bd:3b:a0:3a:9f:95:11:
7a:2e:f2:a1:e1:41:83:85:c5:d7:7b:ac:f2:fd:3d:
5f:c0:6e:e8:93:dc:80:5c:bf:0a:bd:79:9b:77:2a:
23:4f:1e:ca:49:f0:5f:e0:fd:b5:5e:5b:70:18:01:
1c:b6:bc:38:5d:c8:af:81:2e:aa:53:a6:8b:fe:9e:
fd:24:12:52:b1:1f:32:4a:df:4e:ac:99:9e:96:95:
db:60:b8:e0:e3:b4:c5:e8:ad:98:1d:36:01:07:49:
08:16:ec:85:fb:1f:d1:d9:5e:d0:02:ae:3b:bb:31:
d2:cf:84:32:33:d7:53:9e:51:7d:cb:ec:12:24:6b:
5d:e4:c4:07:b9:24:96:ec:00:cf:1b:cc:78:62:08:
97:9c:b6:8b:e3:8c:4c:14:68:f1:e1:c2:3c:d8:6a:
50:e3:b1:0b:e4:41:ea:82:4c:2a:94:7e:76:09:f4:
3b:42:8b:05:d6:a8:0a:ff:3e:d8:0d:f4:9e:3e:41:
fd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:96:ED:60:EB:E0:27:08:94:BE:80:B2:54:DF:00:50:B2:4D:E2:61
X509v3 Authority Key Identifier:
keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:1b:5c:b5:a7:a9:52:db:70:1d:44:6c:a4:fb:1f:f9:a0:b8:
75:98:12:22:f5:39:10:d8:44:a3:d5:7b:14:cc:47:a1:89:95:
b1:1b:9c:49:1d:a8:a9:dc:73:f1:c4:8a:f2:12:c8:dd:1a:c9:
6b:0e:7d:ac:61:5e:9b:da:f7:7f:ac:c8:c3:a4:de:38:ab:2c:
c7:1c:d5:3e:cc:6d:04:92:5d:99:cf:0c:a8:74:ab:73:e6:8d:
6b:54:95:1e:bd:a8:1f:dd:f4:9d:fe:4c:2e:42:ff:2c:a5:4a:
3d:c6:d9:2a:72:cd:76:d9:98:89:b0:aa:68:1d:ab:1a:6c:e6:
69:70:a1:5a:ae:50:48:9e:10:d0:48:e1:55:6b:70:42:00:fe:
02:4d:97:2a:f2:58:e8:85:f7:7c:96:24:ef:a6:86:0b:3d:7d:
78:dd:07:98:ad:f3:f7:1b:83:f2:49:11:29:8b:7f:88:33:f1:
9a:7b:cc:65:37:3d:e9:70:6d:82:c3:48:7d:cd:64:3c:c5:80:
a3:8f:e1:ba:53:9b:f0:84:85:38:c5:f3:28:3f:af:45:d3:2e:
e3:32:b0:89:49:eb:af:29:34:a0:bb:97:06:38:7b:4f:4b:c0:
58:32:6e:c4:93:56:4f:ef:f0:77:76:ea:bd:16:0e:8e:bc:b5:
52:90:34:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:47:20 2025 by rpki-client