Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
File: SXioZBznhb40aFAwUncj5f3OVio.mft (raw, json)
Hash identifier: 2IhW75OG/Xm0b+EzrG7uQHw8KqabrFTw53dzVySH3Pk=
Subject key identifier: 29:CE:D9:97:DE:7F:F2:1C:6D:DE:28:C3:70:A8:C9:02:2E:FA:2C:6D
Authority key identifier: 49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
Certificate issuer: /CN=4978a8641ce785be34685030527723e5fdce562a
Certificate serial: 019874191FAF1C828BADE74239F56A93C19F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
Manifest number: 0653
Signing time: Mon 04 Aug 2025 08:01:00 +0000
Manifest this update: Mon 04 Aug 2025 08:01:00 +0000
Manifest next update: Tue 05 Aug 2025 08:01:00 +0000
Files and hashes: 1: BCD_tpHD4CbGfbV_PdrLa7vTpXk.roa (hash: 3ZjEUHk0H2GaQYj5jwvFZHg7bwJy5JXMVYVGmhkBhZA=)
2: SXioZBznhb40aFAwUncj5f3OVio.crl (hash: rXTL05Fy2Zu022nXualrdQNYk6yva2Ch+8yVSCZZhRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:1f:af:1c:82:8b:ad:e7:42:39:f5:6a:93:c1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978a8641ce785be34685030527723e5fdce562a
Validity
Not Before: Aug 4 08:01:00 2025 GMT
Not After : Aug 5 08:01:00 2025 GMT
Subject: CN=29ced997de7ff21c6dde28c370a8c9022efa2c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:a8:71:77:76:7a:80:bf:e3:ae:d1:b3:e5:
6c:cb:c9:e1:98:65:e1:75:e8:c1:e4:c6:bb:0d:1a:
2c:18:17:99:b9:b7:44:8f:91:2e:5c:dc:92:ed:97:
03:ea:ef:0b:20:5b:b7:b1:e6:d0:d4:43:b7:42:d8:
c2:eb:03:2a:23:2b:42:e0:75:4f:0b:f0:4d:37:e2:
d5:2f:b2:7c:fb:3c:53:2f:80:c7:05:c4:1e:68:e4:
d2:8c:8c:b2:13:6a:0b:a5:99:16:ef:cf:c8:db:cf:
0c:65:3a:9d:92:78:28:aa:4c:2a:05:35:f5:0c:97:
6b:5b:87:eb:bd:91:df:37:0b:e3:6d:3e:8a:b1:45:
c9:b1:03:77:13:c4:9a:97:a8:e4:0b:bc:83:4c:8d:
68:6b:28:bb:e9:ef:eb:d6:c0:0e:ae:e5:a6:42:f3:
1e:87:ba:ef:94:88:8e:e7:94:98:ec:2d:dc:63:0d:
8b:bf:48:fd:4e:16:bc:64:7f:ad:45:18:a1:d8:3f:
44:2c:7b:39:ab:af:28:7f:48:c5:d1:18:d0:43:15:
1c:c7:32:f6:97:d6:44:57:1b:e2:46:fc:73:d0:0b:
7c:6e:d6:18:e0:8f:5a:3e:8b:66:60:1d:4e:13:71:
34:a8:96:8b:9b:21:10:e0:22:13:0e:36:c1:b8:bd:
10:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CE:D9:97:DE:7F:F2:1C:6D:DE:28:C3:70:A8:C9:02:2E:FA:2C:6D
X509v3 Authority Key Identifier:
keyid:49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b2:ef:ce:74:3d:61:e6:23:f3:ab:d1:fd:06:5a:b1:63:69:
f8:78:f6:59:de:7d:b8:b0:64:b1:37:a5:74:68:c7:ca:77:ab:
94:c5:a8:62:aa:2e:4a:94:1c:f9:43:a4:26:3b:fa:a1:d1:ae:
50:3b:0c:74:b0:e6:39:33:18:12:13:5f:6d:6c:f3:33:2b:3b:
33:23:4f:d0:23:2f:05:d4:3c:6c:60:67:97:e2:09:a8:e8:98:
b5:ca:ef:b9:13:c7:49:ae:80:d2:43:01:6c:d1:6b:6a:a7:38:
cc:b7:a2:2e:41:5d:a4:bd:f3:60:90:bf:70:74:8b:e5:9e:5f:
66:3b:bc:91:05:66:3e:51:46:8d:8d:dd:7f:af:b3:09:03:19:
52:d3:2c:1a:6e:48:a3:4d:75:37:e9:a7:41:78:1b:76:01:99:
17:6a:11:ab:65:93:cc:6d:e9:ec:c7:f0:1d:a8:65:41:92:ea:
12:f7:c1:ef:ac:9a:0a:bc:8e:33:d8:dc:39:9a:bf:94:d5:2b:
fa:0f:91:d9:35:36:db:1f:e1:17:84:da:6c:09:88:ba:72:b0:
9b:f7:5f:7c:60:69:14:e0:54:46:c0:58:a9:b5:25:5e:62:af:
ae:d7:5b:f7:25:35:1b:9e:8c:7e:47:98:92:7b:40:48:4e:ad:
a2:5c:0e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:06:51 2025 by rpki-client