Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier: VvAR2iJqI56zWXj4L5EPtednvIY/VeSTE0mBrHynHvs=
Subject key identifier: 29:AF:F6:C0:BA:93:42:D0:88:17:9E:4A:83:AA:A3:DD:F6:FB:8D:F4
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 01989412561401498114DE86F380D3006DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number: 0B2F
Signing time: Sun 10 Aug 2025 13:01:26 +0000
Manifest this update: Sun 10 Aug 2025 13:01:26 +0000
Manifest next update: Mon 11 Aug 2025 13:01:26 +0000
Files and hashes: 1: 7y3mGX9ZUocL1OILQHSxmA8VkvM.roa (hash: 7a9Oiy3txQlGgm+QjKoKXHZkPBhpeO84dBEOXh2SIfc=)
2: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: ErYV5depthp+y+//XdA8rix/Vog1YfFqQddcfkbg068=)
3: oU4Cohsb9kWDicLsugicyZN6s7k.roa (hash: YXEAgbcCjB/PmDtI8uql79S0hq5pcPIEdu0GZCtli20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:56:14:01:49:81:14:de:86:f3:80:d3:00:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: Aug 10 13:01:26 2025 GMT
Not After : Aug 11 13:01:26 2025 GMT
Subject: CN=29aff6c0ba9342d088179e4a83aaa3ddf6fb8df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:c4:2d:5f:5d:89:99:fb:0c:47:b4:67:43:
cb:6c:76:3a:17:fb:bc:38:75:3b:01:ac:b6:49:b6:
a3:26:49:e1:71:44:84:9a:be:55:67:c0:6d:86:fe:
ef:a9:22:15:34:cf:35:df:76:c8:63:dc:00:50:ba:
b4:eb:b8:12:dd:70:57:50:21:dd:79:b7:de:8f:ec:
e8:78:90:db:20:95:c2:94:34:b7:d4:0b:ad:a2:aa:
62:02:31:31:d1:4e:56:4d:02:ec:ac:84:25:5a:49:
5d:82:f9:54:3a:72:8c:56:47:c4:5a:91:ab:54:a7:
fa:7e:10:85:79:a4:05:27:04:6b:f7:dc:29:40:12:
62:50:47:ce:fb:52:ca:3b:b5:47:b4:0e:6c:03:53:
45:36:16:65:b0:e2:e9:d3:45:de:00:dc:8b:19:40:
a5:c0:df:f6:21:9c:ab:d7:19:bd:0f:9d:84:8d:c4:
ea:1b:1b:36:1f:89:d5:33:3f:7c:fc:40:23:ea:d4:
48:72:0e:03:a0:1b:2c:81:6e:83:2e:58:de:16:33:
c4:52:eb:07:c7:1d:17:74:44:8c:a1:23:9d:fa:17:
7e:3e:d2:e5:95:13:54:65:0e:cf:25:4f:e8:39:24:
94:63:3a:17:8d:2b:1a:c8:00:6b:ba:0a:46:71:51:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AF:F6:C0:BA:93:42:D0:88:17:9E:4A:83:AA:A3:DD:F6:FB:8D:F4
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4c:4e:b2:34:8b:36:d5:51:da:55:ff:92:10:9c:26:aa:30:
6c:32:ff:32:84:6d:c1:32:25:75:f6:55:53:9c:40:07:46:10:
11:b3:d4:93:c3:ff:dc:f9:6d:38:5f:2a:cc:e0:cb:c9:b1:74:
2b:93:87:ec:4d:90:34:9e:eb:fc:a3:de:37:4f:7d:ed:d9:74:
18:e7:9d:82:9b:5e:10:8e:e0:87:06:5d:af:47:74:f5:5d:9f:
21:22:8f:39:cd:7e:44:bc:14:4d:89:ce:4e:a2:d0:26:e9:3f:
6b:45:ed:92:da:55:23:de:81:40:fe:7c:3a:cc:51:70:8b:c3:
1d:13:4f:6d:cf:4a:0f:6a:82:03:b2:f8:80:9a:e4:03:00:ed:
4a:34:62:d5:ea:02:40:99:e6:a4:d8:ce:c7:17:c8:dd:c4:39:
6b:d4:18:da:c2:05:92:c4:12:b5:6b:c5:f1:60:71:6e:1b:41:
f2:aa:85:89:ee:1b:96:4e:d9:f7:a6:ab:1f:9b:77:17:56:ff:
31:5d:6a:24:82:9e:03:1d:99:df:a4:d6:fc:bc:26:9d:2c:c5:
0e:7b:04:da:f5:8b:48:cb:a8:08:98:95:5b:f0:3c:60:6d:74:
56:05:ec:1b:1b:6a:0d:29:25:8a:d5:37:a0:74:cb:cc:03:12:
4d:40:b2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:16 2025 by rpki-client