Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
File: SGfTe3Yct6BfxzPj20M2b6NiU2w.mft (raw, json)
Hash identifier: iK4A9nRGWdWBd0lZaoURjv0llhnSonB1bLoyoaecx30=
Subject key identifier: 91:B9:02:9E:F0:F6:3A:73:3C:57:6F:E8:26:6D:86:92:FE:A6:5D:81
Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
Certificate issuer: /CN=4867d37b761cb7a05fc733e3db43366fa362536c
Certificate serial: 01988167DEE6C0F8B592EA9BE2F18AEA232C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
Manifest number: 0EF3
Signing time: Wed 06 Aug 2025 22:02:04 +0000
Manifest this update: Wed 06 Aug 2025 22:02:04 +0000
Manifest next update: Thu 07 Aug 2025 22:02:04 +0000
Files and hashes: 1: Nx8KeWYh1HnL5iAJ_PCU7YJun4c.roa (hash: MQQ4lqV14DgsP9PSgDv3Sm3nFuHvBvMEPlVur5pwdsw=)
2: SGfTe3Yct6BfxzPj20M2b6NiU2w.crl (hash: iJxXCpDCicMT1m2+e1AXQHc5m3Fikl4CNn6ahOLbQI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:de:e6:c0:f8:b5:92:ea:9b:e2:f1:8a:ea:23:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c
Validity
Not Before: Aug 6 22:02:04 2025 GMT
Not After : Aug 7 22:02:04 2025 GMT
Subject: CN=91b9029ef0f63a733c576fe8266d8692fea65d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:7e:10:13:b1:f2:17:df:1d:df:f8:ac:79:
90:8e:9d:ac:4a:94:1c:ed:fb:2d:87:67:df:e4:85:
8e:54:93:8b:34:a0:41:54:d2:75:0a:f5:73:a0:30:
2d:8e:ca:71:12:17:e8:fc:94:85:f2:63:f7:48:e8:
02:da:65:a9:d3:85:84:01:f0:48:ce:0f:1a:4c:3c:
f0:71:3b:5a:34:6a:36:68:42:e8:41:61:eb:b9:d4:
30:73:73:f8:1d:8f:0f:c7:b9:cf:c7:7c:b7:21:04:
ab:06:a1:99:c0:02:c3:71:5a:52:0d:df:28:e5:16:
00:19:08:3d:c6:8e:7f:0e:22:70:3c:9a:0d:8d:06:
8a:1a:7f:16:0a:59:35:17:93:bb:2f:a6:b3:79:d4:
e6:a1:ff:93:81:36:38:b7:df:e2:d8:8c:61:4d:9f:
6d:13:0a:60:dc:90:15:f9:3f:5d:c8:d9:3c:49:ba:
14:63:4f:a2:88:d5:11:dd:b1:d8:02:54:88:97:bb:
93:59:91:6f:d2:3e:8e:fe:1d:96:a8:2e:d1:6a:ce:
8d:a5:96:bc:68:a2:c5:a2:b2:76:ce:b8:51:05:ce:
a0:1b:6a:cc:03:f5:ad:56:f7:0e:a5:58:f4:ea:ba:
a9:07:da:54:35:be:20:d7:26:31:d6:2d:49:3d:a4:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B9:02:9E:F0:F6:3A:73:3C:57:6F:E8:26:6D:86:92:FE:A6:5D:81
X509v3 Authority Key Identifier:
keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:86:ba:25:73:21:bc:cc:fe:03:e2:10:74:35:76:06:a3:fe:
4c:bd:2d:93:8b:a0:84:f5:04:38:f7:3f:3d:9d:6a:79:32:e3:
77:65:ad:3b:ea:4e:d0:21:aa:de:1a:40:bb:24:86:41:8c:71:
fb:16:9d:42:4e:87:22:71:58:5e:72:e6:e5:71:ec:9a:39:27:
cf:61:63:a4:fe:e0:48:03:48:db:8b:51:2a:ae:5c:15:46:48:
19:63:ea:91:4c:fb:50:f6:ea:cd:19:59:43:cf:68:96:44:3a:
54:64:08:cf:03:8e:4f:dc:fe:c3:be:90:93:4e:a2:2f:0c:96:
e8:e1:03:83:d4:b2:5b:ba:30:92:f0:e7:fa:d7:a3:38:50:1e:
5e:69:2d:d2:db:e4:0b:e7:b7:5b:a9:3f:90:60:97:f7:2a:f0:
7d:04:4f:4f:33:ae:66:8e:3d:24:88:04:e8:ac:e1:9c:f0:f9:
be:e4:ba:15:d3:03:fb:64:e7:65:b4:18:84:64:e2:ad:da:3f:
ed:c0:9e:3b:84:d3:8c:34:8c:03:7f:e7:09:e6:98:28:c7:1a:
f5:e9:1f:1d:51:9d:c3:d2:9d:27:bc:aa:36:2a:86:dd:f7:ba:
50:35:52:45:29:46:34:24:fd:4b:69:b4:0e:e2:25:80:a2:4b:
39:95:b0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:07 2025 by rpki-client