Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
File: SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft (raw, json)
Hash identifier: didW24SrsjjMtNpAzDWRj9SP59fKD+xUKrwkVuLBvs0=
Subject key identifier: 12:52:31:86:08:05:BA:20:86:4A:6F:28:85:64:DF:ED:E8:FC:C4:74
Authority key identifier: 48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
Certificate issuer: /CN=48de4638c972c8ce19c4669ab57db266af7285b7
Certificate serial: 019889213C20E164AD767E1A20FFA5795A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
Manifest number: 0D3E
Signing time: Fri 08 Aug 2025 10:01:53 +0000
Manifest this update: Fri 08 Aug 2025 10:01:53 +0000
Manifest next update: Sat 09 Aug 2025 10:01:53 +0000
Files and hashes: 1: SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl (hash: kvhaurol+TbQjZlR/yRYJNsArb2t+6XRbDk9l745p4E=)
2: q3FDx21p8smEfAYPTo0ZQLgPkqo.roa (hash: 2Du6IDXw8hGPYtGe+KE8+hTPSOOHZMlNjWnrWGKbnPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:3c:20:e1:64:ad:76:7e:1a:20:ff:a5:79:5a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48de4638c972c8ce19c4669ab57db266af7285b7
Validity
Not Before: Aug 8 10:01:53 2025 GMT
Not After : Aug 9 10:01:53 2025 GMT
Subject: CN=125231860805ba20864a6f288564dfede8fcc474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5b:44:eb:4e:51:92:ea:1e:56:d3:f3:9e:82:
1e:cd:02:70:56:8c:9b:0d:c7:3c:81:82:bf:82:57:
ac:e9:53:c6:53:07:c9:bb:ae:b2:83:29:03:0d:83:
13:30:33:32:c9:b0:58:4c:18:3e:00:72:66:6a:64:
a4:31:26:ba:d9:7f:90:58:cf:8c:fe:21:25:09:7c:
c1:73:93:7c:80:ac:35:34:84:1e:56:83:8f:73:d6:
34:f0:15:19:64:69:85:92:ed:73:be:af:9b:1d:93:
b4:9e:a0:ec:07:5f:60:28:6d:7c:2d:b0:ef:bd:fd:
9b:ea:61:46:c9:09:d2:65:8b:d7:d4:e9:e3:71:cd:
b5:66:af:d1:e2:88:25:9a:51:3b:23:82:50:4c:79:
07:5a:7f:4f:e1:23:9a:e9:9a:07:e4:da:da:6d:3c:
5f:1f:6d:60:11:fc:bd:be:72:2a:9b:0e:79:37:da:
b0:37:90:8e:7f:0b:8a:0f:83:0f:bd:5e:7d:85:2c:
3e:e7:3b:87:5b:94:c0:da:6e:0b:be:52:8b:ef:90:
79:07:d6:22:9b:51:c4:fe:20:5a:2f:32:ed:a0:0f:
13:91:16:dc:b2:83:72:00:cb:43:fd:1d:68:63:c2:
4c:f4:56:0b:9c:5c:b4:d5:38:b7:91:a6:bb:27:90:
51:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:52:31:86:08:05:BA:20:86:4A:6F:28:85:64:DF:ED:E8:FC:C4:74
X509v3 Authority Key Identifier:
keyid:48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8d:6c:69:0a:df:d4:6e:bf:0f:bd:a9:c3:b5:a6:40:28:58:
d3:46:43:10:4a:ab:15:e1:2f:a0:2a:e2:82:7e:79:df:ec:8a:
5e:e8:2f:1d:c1:be:16:c9:28:46:f4:b9:73:7c:69:85:f5:56:
52:26:da:dc:0b:ff:02:ae:87:7f:fd:92:f5:47:b2:76:a7:18:
11:8a:dd:f3:3a:39:08:7e:04:6e:12:8b:fb:ef:65:3c:cb:82:
1c:d9:f5:42:20:b7:e9:fa:84:66:6f:3d:7a:4b:2d:4f:40:24:
b3:8b:1b:91:f1:a2:1a:3e:39:61:5e:29:26:11:b8:3c:80:8b:
0e:0c:17:44:22:f8:08:4f:f9:0c:56:77:64:6e:50:7f:4d:d5:
b8:61:37:95:36:62:ec:24:ba:b6:f2:bc:5c:7f:0f:02:66:91:
f9:1b:25:57:bc:1f:a9:ab:98:40:dd:55:af:c5:62:d6:0e:45:
34:79:e6:01:50:9b:da:98:af:a4:92:22:f3:28:bb:0c:cb:13:
37:cb:6e:91:8a:24:50:24:e6:bd:ca:5b:53:e3:8b:8f:f8:02:
bb:16:6d:7c:92:c1:c4:ac:b3:48:e8:97:e3:21:1f:ea:dd:4a:
1b:35:f1:45:a6:66:40:87:e3:eb:36:64:b7:2e:0e:ce:a7:e4:
52:ab:5c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:39:36 2025 by rpki-client