Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
File: SffBpGd-t4JtrmneAaaZtiAdYkQ.mft (raw, json)
Hash identifier: 0fsV0zhM7x2sxeq/cGqbAnlyezuyzW9KpYmYQ55Ad9A=
Subject key identifier: 86:09:EF:91:59:52:1F:D5:D5:41:E7:C3:28:B4:C2:CF:51:E8:CC:9A
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 01987CE5CC311DCD3BB85CB00D2ADA11FC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
Manifest number: 07F2
Signing time: Wed 06 Aug 2025 01:01:31 +0000
Manifest this update: Wed 06 Aug 2025 01:01:31 +0000
Manifest next update: Thu 07 Aug 2025 01:01:31 +0000
Files and hashes: 1: 1fEhDLG2T1y1zCMSekjeKTFgEiE.roa (hash: qkZRZL3uEJ/IofMfb0sGApiJ8jObyAIyttVh0abUKHc=)
2: SffBpGd-t4JtrmneAaaZtiAdYkQ.crl (hash: yoDKLEoWmWwoHJFthdvCABk+OcC3uCIZ6aCsRm4u8+o=)
3: Ungcud01aQHgTMIDHqxKgOj76qo.roa (hash: vzFsWzaNMb5tmpdLeHM9BlzRIek6QkO8MJb/yx40U/I=)
4: aNjEb5eKDyYkgeaI_pw6s6Nyxio.roa (hash: LXIG7QItKisSD3lO6v16i6iN7S5ddhKshFToQIqNXAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:cc:31:1d:cd:3b:b8:5c:b0:0d:2a:da:11:fc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: Aug 6 01:01:31 2025 GMT
Not After : Aug 7 01:01:31 2025 GMT
Subject: CN=8609ef9159521fd5d541e7c328b4c2cf51e8cc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:65:04:a1:4a:fc:eb:c2:cc:61:ed:fa:0e:
d7:ba:d7:04:3b:b0:6c:fe:74:05:e2:61:41:b3:83:
d7:7c:6c:48:3b:96:b8:a3:28:3f:50:c3:20:42:ee:
49:45:79:71:ad:5c:6a:3e:14:01:14:59:58:85:43:
1b:ea:af:b2:ac:d6:9c:9a:64:ea:aa:56:82:69:f4:
52:dc:47:17:1c:ff:9d:ad:5b:5d:04:ed:ec:96:db:
82:ec:85:55:a1:5b:3a:9f:2d:d1:8c:be:ee:4d:e2:
4a:c8:46:86:8f:71:90:e9:3c:42:41:24:e3:3a:50:
33:a5:ba:41:34:e8:ce:9a:df:7f:e3:c9:25:9d:4c:
3f:b0:b0:fa:74:a3:e3:1f:20:33:a9:28:d8:e1:67:
b2:80:dd:43:6d:d4:c7:f6:e4:0c:a3:60:0a:0d:1e:
3a:ba:0c:90:3f:13:2b:b7:62:53:e7:ea:68:63:9f:
4b:fe:ca:49:db:ea:99:4c:66:a1:44:1c:90:be:98:
b7:11:7c:fe:df:4f:89:89:b8:ca:11:5a:c6:47:ea:
e3:73:f5:97:60:70:5c:5f:78:18:22:b1:07:f0:96:
0c:73:61:b7:88:d8:58:d7:fe:ec:c1:da:3b:31:f4:
d1:01:d3:e5:de:3b:b4:b1:38:7e:bf:4e:68:53:b7:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:09:EF:91:59:52:1F:D5:D5:41:E7:C3:28:B4:C2:CF:51:E8:CC:9A
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:06:d3:0d:c5:1a:63:e6:df:cd:b6:51:7f:e2:36:76:f1:12:
8f:4e:8d:dc:94:7d:a7:0b:88:5e:d5:d3:08:a8:50:9a:27:5e:
d7:69:a6:c5:d5:83:39:d0:5e:46:00:d0:8f:58:9a:c5:e7:c2:
e3:dc:6f:e1:65:e3:a1:76:e7:0d:74:40:dd:c5:ee:6e:de:27:
4c:88:1c:b8:3e:d0:c5:a7:02:1e:94:be:ee:63:be:b0:ec:cd:
fe:5d:f8:00:01:21:e4:ea:4e:f0:11:44:24:9a:ca:b1:1c:cd:
e3:01:5c:40:06:e7:8b:f1:2b:e0:51:56:66:b8:43:7d:53:b1:
07:2b:43:dc:63:68:83:49:91:f9:8f:e2:af:66:0c:b1:35:6c:
30:6b:c9:22:7e:45:da:6f:7e:7e:ee:8b:13:f6:f2:0a:61:75:
2e:43:0f:5a:e1:e0:c2:3e:21:51:00:5e:d9:d8:1f:49:9f:3e:
4d:ec:7b:c2:e5:05:15:cd:ca:ab:d5:c2:65:0b:02:a4:55:d2:
f7:92:78:d9:4c:99:c9:bd:93:65:fc:68:07:bd:97:e8:97:0f:
4e:08:62:2a:6a:5f:bb:04:24:68:8e:40:fd:13:3c:f6:bc:4c:
db:05:49:e8:a7:b4:b7:1e:b8:25:e7:9e:e8:66:78:ce:16:9e:
4b:30:98:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:01:30 2025 by rpki-client