Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
File: svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json)
Hash identifier: CXDceiEWVSWaMA8lvEz5LKf0GTf49+PBLBhqYI33b/M=
Subject key identifier: 48:EB:40:FA:03:F1:F9:51:FE:35:15:8A:DA:44:92:4C:AF:3F:59:1F
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial: 01987E2EB6D526A6571AB4175C57760FF9DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
Manifest number: 0FAC
Signing time: Wed 06 Aug 2025 07:00:47 +0000
Manifest this update: Wed 06 Aug 2025 07:00:47 +0000
Manifest next update: Thu 07 Aug 2025 07:00:47 +0000
Files and hashes: 1: bkaEgwUfFQuvU4deHKYEq645oxo.roa (hash: a6t899hSFrNnCxDeJsEHX7KWBkAwoAJJxMP3KbPkcsM=)
2: gM8Vs4rZduYc-FMusqbqCtswvSM.roa (hash: PdGvc2+s2b+cxeznU9E/uPp7OuLxD8n8FSf7bdTA3Io=)
3: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: NVspyAlwufcXe4J1BKJ3OOwNixz8v+mtwpmi9dSBp6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:b6:d5:26:a6:57:1a:b4:17:5c:57:76:0f:f9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Validity
Not Before: Aug 6 07:00:47 2025 GMT
Not After : Aug 7 07:00:47 2025 GMT
Subject: CN=48eb40fa03f1f951fe35158ada44924caf3f591f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:39:d5:87:11:3f:b1:64:7b:19:f6:24:cd:
fc:cd:d5:1a:13:eb:5c:61:f4:e7:59:64:67:ab:c3:
f0:7c:32:bf:7e:47:e2:59:bd:30:dd:1f:c3:57:db:
3c:e8:76:86:94:33:42:83:cc:c2:f0:45:45:d1:d9:
1b:ed:c5:af:85:04:d6:11:3b:3d:ae:93:f6:52:5f:
fb:23:01:f7:83:fb:03:96:07:60:90:db:70:0c:ee:
94:69:cc:ee:24:c8:6b:37:e1:3b:ea:8b:90:03:b7:
c6:0c:46:22:c2:4c:5f:75:d4:84:35:cb:48:a7:cb:
ab:33:7e:45:4e:ab:7a:2f:5d:22:e5:cf:4e:e2:52:
96:aa:b8:0d:2d:57:a4:93:32:91:cd:07:86:17:4c:
79:79:9a:42:b6:c4:e1:5d:66:8b:de:e9:93:b9:08:
83:18:7f:ef:16:8f:1a:ab:ca:7d:03:3f:47:7f:1f:
16:29:02:8f:23:f8:12:b7:ed:29:76:7d:5d:eb:72:
57:1a:84:83:e2:c3:69:25:24:3e:9f:15:ce:96:6e:
f0:33:8a:d0:00:80:23:c7:6b:9a:a3:31:07:35:0a:
cc:37:68:86:8e:a9:75:9f:73:c6:14:b2:1f:18:d8:
3f:a1:01:30:c1:8e:50:28:1f:68:74:5f:40:f0:e6:
be:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EB:40:FA:03:F1:F9:51:FE:35:15:8A:DA:44:92:4C:AF:3F:59:1F
X509v3 Authority Key Identifier:
keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:14:9c:03:ca:20:12:4d:d7:27:bc:3b:d4:5c:ad:34:74:5b:
17:5b:a5:9b:fb:5f:06:dd:7e:10:00:a9:c1:65:7a:d2:18:4c:
fc:76:7a:8a:7f:f2:40:c0:c5:3e:8f:34:83:a7:db:88:4d:c4:
88:f1:55:a3:55:89:69:40:6b:2e:79:05:74:e0:8a:19:1f:8e:
05:d0:eb:51:29:db:7e:6f:ee:41:59:92:ca:8a:7e:a4:cf:db:
b9:64:29:1a:d4:e1:43:d6:f7:36:2d:30:19:d2:16:71:49:7c:
39:aa:1f:b3:33:72:8a:b8:26:e9:6f:b5:b6:26:24:fe:ed:81:
3a:2d:de:1a:66:22:0b:73:4a:c9:80:6b:2a:21:ef:f9:76:b4:
8a:ef:7c:93:c5:93:49:e3:03:7f:80:14:30:4d:78:ef:bf:84:
ec:bf:1d:20:fe:21:78:77:1a:af:44:ec:78:73:f0:7a:d8:6d:
13:6a:0b:e3:1a:1e:9f:71:2c:59:ca:98:c6:a5:b5:48:e1:aa:
ab:3f:32:e5:b2:8a:d7:59:80:10:53:88:19:21:c2:dc:db:e0:
4a:91:84:de:10:e0:7a:92:45:18:04:bd:bb:2a:68:8e:e1:27:
1c:6f:48:83:d4:e4:67:c4:6d:b2:c3:f9:d0:e2:2d:2f:2f:ff:
5b:a1:28:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:28:27 2025 by rpki-client