Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
File: Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft (raw, json)
Hash identifier: ZfrWyDsbo4dmpKLCtTVikLDuYSfQbcvuuizLJB5zhJk=
Subject key identifier: FF:D1:55:FA:31:62:78:2E:62:13:4A:AD:66:20:B3:AC:4C:6C:46:22
Authority key identifier: 4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
Certificate issuer: /CN=4a7e8c622c87532f8c449f347433dae52b7738f0
Certificate serial: 0198808B652C07C6A0B60D46E89E55681554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
Manifest number: 0146
Signing time: Wed 06 Aug 2025 18:01:15 +0000
Manifest this update: Wed 06 Aug 2025 18:01:15 +0000
Manifest next update: Thu 07 Aug 2025 18:01:15 +0000
Files and hashes: 1: AD-andXzbsJQ6-EJVFm7YfqJqyA.roa (hash: EQKBZSFz17cerT07f9V2gKbXedpsxOfFN/33BYuE0nE=)
2: Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl (hash: uygw27YzCneTeB767oTgHAp/qJI+D2Win+d2pc6izAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:65:2c:07:c6:a0:b6:0d:46:e8:9e:55:68:15:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7e8c622c87532f8c449f347433dae52b7738f0
Validity
Not Before: Aug 6 18:01:15 2025 GMT
Not After : Aug 7 18:01:15 2025 GMT
Subject: CN=ffd155fa3162782e62134aad6620b3ac4c6c4622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:93:a0:21:f0:df:c7:23:86:c1:5c:0d:5c:
0f:0f:2f:6a:d3:b9:1c:17:c1:87:ad:f5:78:1b:74:
33:d1:14:5c:60:c7:49:87:5a:fe:05:cc:6c:1d:44:
a2:90:4a:b5:e4:3c:5a:08:74:0c:a4:63:f8:96:29:
e8:77:46:50:b5:41:52:0b:c3:81:8d:f6:d4:28:f8:
05:b6:ec:00:db:8e:34:04:05:c2:2b:5d:44:ae:f1:
62:ac:74:09:0c:c0:4f:e1:6b:3e:86:b3:c6:9d:9d:
f7:1d:82:8d:b6:c5:67:76:c4:cf:e4:30:b6:f2:b2:
c8:31:ae:1e:ca:d2:b8:48:e0:f8:54:34:19:62:0a:
fc:74:1d:5d:81:f9:ae:b0:0d:60:20:18:a7:39:96:
28:16:16:6c:9a:f3:03:5f:8d:72:2a:4d:f2:30:87:
c9:d4:86:07:9b:f5:25:cc:a7:2f:32:5b:22:e3:a8:
5c:e3:d5:9e:1b:21:f8:e2:81:fd:7d:77:74:4e:4d:
96:86:b6:e7:a9:d1:f8:0e:20:99:7e:ed:93:7d:9b:
84:12:f5:dc:61:2d:f8:7d:0a:98:af:99:b4:67:3b:
1d:df:a4:30:ee:03:e4:82:b9:9b:ac:77:58:ad:42:
5f:63:7f:8e:90:01:f6:88:de:e7:dc:86:6b:14:e2:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D1:55:FA:31:62:78:2E:62:13:4A:AD:66:20:B3:AC:4C:6C:46:22
X509v3 Authority Key Identifier:
keyid:4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:49:f8:a1:81:af:ca:ab:2f:7f:9f:e0:af:34:32:a9:c3:9b:
f8:8f:6d:e7:9a:6d:75:8e:1c:c8:59:6b:b0:55:e9:26:fd:15:
18:c9:d9:f5:66:a3:86:f1:64:fb:a9:b5:6f:9c:60:ec:f7:48:
cb:71:b0:e5:99:45:9f:22:4e:86:99:1c:20:c1:6c:02:e5:69:
81:e7:fd:c1:7a:98:ad:d8:2c:10:d7:17:74:ac:9c:1b:c9:b3:
d6:7a:c2:2d:f9:8a:50:af:09:5a:e5:c6:0b:0b:41:4e:d6:d6:
b5:2c:b6:c0:6a:f1:1f:14:48:79:c6:6e:18:d2:c9:ad:66:28:
d2:18:77:62:9e:89:a2:c3:a5:0e:61:ea:1e:5d:36:ad:3f:54:
90:2c:30:a6:4a:84:85:96:9a:65:db:8e:b6:04:bf:47:b0:4a:
d6:d8:ec:01:3b:4d:6b:d8:ae:0f:10:11:4f:60:2f:38:8e:13:
21:eb:b8:f7:e7:3e:f3:05:3d:25:da:54:18:32:6c:7d:f3:d2:
05:aa:57:a7:7b:a6:00:26:34:6c:84:43:0b:67:3a:13:b1:90:
a6:93:60:fa:09:37:e8:07:63:96:bf:ab:3d:1c:32:4a:bf:f4:
b5:40:cc:5a:56:fc:0f:c9:17:20:8e:4e:f8:d6:ea:d0:22:70:
e2:e6:cd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:05:53 2025 by rpki-client