Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json)
Hash identifier: Y8sWzvIvQSWKXMEiJAKvKMCCObA9VtM5HzyKK1F2JPo=
Subject key identifier: B3:3D:58:E4:27:4A:61:1C:62:F4:96:A9:79:F9:90:48:0B:77:12:9B
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 01987373DFD0AC58EAF4743309E671ABF882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 05:00:30 +0000
Manifest this update: Mon 04 Aug 2025 05:00:30 +0000
Manifest next update: Tue 05 Aug 2025 05:00:30 +0000
Files and hashes: 1: CwqvWSmBdm9lt3PehiaP0H6J-oY.roa (hash: gTSav2fMjMmokQJGJr0YwjWXX9H3AhJSgjsJ2wpM5SA=)
2: QdvbepQukFmfMSQYf6HBBLcHcMk.roa (hash: F/Id75RSk4+xz0N0tNwJ7jB7AAssoyiwdWIUCFeT7Qg=)
3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: Z5Eqf8qdu1kQIxQThAmXhTCQr8J7jECPmh3vnRTGa98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:df:d0:ac:58:ea:f4:74:33:09:e6:71:ab:f8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Aug 4 05:00:30 2025 GMT
Not After : Aug 5 05:00:30 2025 GMT
Subject: CN=b33d58e4274a611c62f496a979f990480b77129b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:17:30:e1:0e:81:de:aa:48:29:72:63:ac:
c8:0b:5d:79:1d:28:d2:a0:19:2c:76:96:58:42:b9:
dc:8c:d6:9b:85:a1:18:d4:58:e8:fa:43:75:e1:5b:
e7:a6:46:27:ab:ea:64:91:3e:2a:96:4b:14:de:47:
5e:d1:e5:5c:fd:90:b5:ce:d4:65:b9:2b:e6:8c:bb:
41:73:08:25:cc:6e:3d:9f:07:16:cb:05:eb:a4:6b:
6e:de:10:d7:1f:9f:b2:b1:6f:7b:90:1a:e6:82:06:
f3:24:f3:58:04:55:59:de:4c:f9:1c:03:f5:c8:b1:
5a:d5:06:3d:b3:f8:65:46:d8:05:35:e7:9f:df:67:
62:1c:5f:98:66:aa:aa:2d:19:39:44:84:6c:7d:b6:
52:a8:c4:80:06:9c:45:9e:21:f6:9b:ca:de:05:6f:
8e:b7:16:37:3a:03:6b:91:37:50:54:42:2c:76:de:
ba:e3:a4:95:ae:7a:5a:ae:b0:bc:2f:c4:64:e0:3b:
2e:53:aa:39:55:7a:9c:aa:64:84:ac:05:99:5b:49:
f4:55:41:ca:f1:70:0a:c8:29:26:e0:30:48:00:6c:
d0:d2:90:96:83:da:cd:ff:b8:3c:e3:fc:32:4d:d1:
5b:13:a7:f1:67:f3:38:3f:fc:7f:41:ad:30:21:00:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3D:58:E4:27:4A:61:1C:62:F4:96:A9:79:F9:90:48:0B:77:12:9B
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a6:bf:44:1e:c3:af:57:9c:8c:b7:c9:bf:c3:f3:39:dd:56:
c1:f3:bc:0c:60:48:f7:27:ea:fc:35:dc:46:9f:32:04:90:19:
27:3d:c8:c9:60:7f:92:d9:ae:9c:9b:73:41:d3:3c:47:b0:bf:
82:5f:de:31:f3:75:a9:b3:52:53:01:9e:52:5b:38:22:d1:88:
08:ed:09:e1:78:45:28:d7:72:db:7e:8a:b6:ca:35:cc:51:3a:
17:3d:f2:73:de:aa:44:9c:a2:fb:f9:54:b4:29:66:6e:ac:46:
fb:1b:f0:3a:ff:34:09:81:ae:59:75:f3:be:67:89:0f:7b:76:
96:49:62:5c:2c:29:cf:f8:4b:1b:7d:52:c3:86:74:7e:c4:f4:
f2:46:e3:75:01:53:27:90:f7:31:bc:dc:9f:b6:16:9c:46:10:
dd:17:4e:88:3f:59:54:3f:61:73:d9:9f:b5:2e:49:93:65:83:
a2:b3:10:e6:ec:33:39:7e:df:4b:ee:42:08:79:4f:9a:87:da:
d9:d3:00:f5:d3:23:6e:70:94:3c:b7:1b:3c:28:1f:23:60:b2:
91:7c:b1:ba:27:a5:d0:6b:b6:a4:46:62:40:c7:5d:7e:2d:25:
4c:25:fc:fa:e5:7f:04:9b:ca:66:f3:77:23:00:ec:d6:2d:ff:
3f:01:89:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:12 2025 by rpki-client