Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
File: SVbzCE2TEO-hvAfvMfk0spQfED4.mft (raw, json)
Hash identifier: B5gUHoUy842DLBryNpqgqUi9AjhuA20+vFlEz5u7cNk=
Subject key identifier: DB:5A:A7:86:72:31:2F:35:D4:5C:C5:BC:D6:AF:DF:0B:FB:5E:86:54
Authority key identifier: 49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
Certificate issuer: /CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Certificate serial: 019875D09D49F3FFF982F544AF2B838DF694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 16:01:02 +0000
Manifest this update: Mon 04 Aug 2025 16:01:02 +0000
Manifest next update: Tue 05 Aug 2025 16:01:02 +0000
Files and hashes: 1: QocjuYoGfozpr0QiTXkGPfsUrcg.roa (hash: Y8oC4kwoV9mXXZSXGd1lAHQDlPdz5kxQi4KnTi7EYOM=)
2: SVbzCE2TEO-hvAfvMfk0spQfED4.crl (hash: WF0gHLp8nIYvafm3hc7Jd9XN5fKRf8ogDxA4SelViHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:9d:49:f3:ff:f9:82:f5:44:af:2b:83:8d:f6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Validity
Not Before: Aug 4 16:01:02 2025 GMT
Not After : Aug 5 16:01:02 2025 GMT
Subject: CN=db5aa78672312f35d45cc5bcd6afdf0bfb5e8654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:84:60:c3:cd:03:eb:21:9c:c9:04:3a:19:
1d:e7:23:b9:60:4f:92:99:ec:f0:5c:61:47:71:c7:
cf:61:56:99:b8:0e:83:95:da:ed:ea:2d:cf:75:80:
d0:44:26:63:e4:27:d1:72:1b:9f:4b:3f:01:cf:a8:
35:5f:7d:db:9d:e1:1c:98:72:80:b5:82:45:6d:db:
27:59:00:b4:af:4d:18:c1:3c:50:30:d3:80:39:c4:
f4:db:de:e2:f1:a3:c2:b7:9e:78:29:02:6f:02:bb:
e0:54:3c:11:e9:fa:34:22:7a:de:d0:7f:bb:16:65:
a5:25:e8:17:7a:b9:80:60:c8:81:5f:a8:68:aa:56:
75:bf:03:a9:1d:3f:17:68:07:5c:e3:94:86:cd:30:
41:8c:d5:3c:f2:65:5c:8f:fd:a1:ae:33:b6:0a:dd:
aa:67:36:91:96:9f:b6:0f:8c:86:c3:bf:97:a8:37:
20:d1:dd:6f:48:d4:bd:5d:ea:c1:78:3c:b9:b3:31:
86:db:d7:57:68:d9:11:5b:89:88:38:78:8d:10:cf:
03:55:be:61:ab:71:85:f8:c8:b4:9a:12:29:fc:aa:
29:6e:0c:f5:bf:47:27:d3:91:f6:d7:14:0f:39:53:
1e:19:30:01:0c:9b:0f:d1:82:1e:c0:c2:7c:cb:e7:
ab:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5A:A7:86:72:31:2F:35:D4:5C:C5:BC:D6:AF:DF:0B:FB:5E:86:54
X509v3 Authority Key Identifier:
keyid:49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:25:00:b9:b5:4f:d9:b6:dd:99:8a:52:28:a7:3e:af:20:e0:
f2:4e:9a:e9:25:88:bf:9c:c3:5a:5c:4d:9c:b3:3b:e3:29:48:
8c:17:be:40:fc:1e:d4:dc:e7:15:30:91:9d:e8:20:53:04:0a:
e7:14:66:e8:e8:e3:a8:64:19:50:72:50:f6:37:a7:b0:37:c9:
e2:83:83:5f:2b:dc:ff:8e:9c:a5:3f:71:85:d6:81:6d:f7:69:
18:66:55:f9:d1:fb:04:38:f3:b1:5e:c1:00:f7:5e:fe:25:4f:
34:5d:d6:23:00:8d:6c:67:a2:a5:b0:42:25:aa:d9:bb:33:57:
b8:b3:40:35:fc:b3:5d:64:fe:6e:56:0d:5a:7c:52:e9:0d:f9:
57:86:1e:b2:ba:bd:0c:7e:50:ab:4c:d9:f5:3c:01:e3:a3:24:
a9:a8:a4:06:a3:7e:bc:00:21:ce:68:79:10:55:6e:19:38:7c:
90:94:64:2c:c7:14:74:54:de:8c:be:0b:81:ce:c6:f1:4b:a2:
94:c5:7a:60:4d:3e:ec:1f:27:4d:d3:70:ad:4a:58:63:e8:30:
82:7b:ea:4a:a7:87:d2:08:29:08:0b:73:d4:db:17:37:26:b9:
7a:7e:d3:d5:1e:81:e3:14:c7:79:e2:cb:c0:36:f6:40:44:f3:
31:e7:00:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:16:24 2025 by rpki-client