Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
File: SAa55i8bAPLPmNDcxYMpKvrLUi8.mft (raw, json)
Hash identifier: OtGJNoRc5LiGpDRxaqmEtSAyaQcIzGdwNUMDGT6prHU=
Subject key identifier: CB:19:09:E2:C5:63:29:7A:8B:F2:B6:76:5B:02:35:C2:A7:84:F8:45
Authority key identifier: 48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
Certificate issuer: /CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Certificate serial: 01987CE52D545406726C13213704535B2503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
Manifest number: 10DF
Signing time: Wed 06 Aug 2025 01:00:50 +0000
Manifest this update: Wed 06 Aug 2025 01:00:50 +0000
Manifest next update: Thu 07 Aug 2025 01:00:50 +0000
Files and hashes: 1: SAa55i8bAPLPmNDcxYMpKvrLUi8.crl (hash: H1htIsWGS978jw/SHnGCmE5YRLtbOEBF8tz08UKfqoo=)
2: bOFB3LalOSOdSrbz-a4cUkkG03M.roa (hash: SZa6u36skxx1rALcmnxtRi0278XWZ89tCnch5FRpzoM=)
3: ipcAqlbQdh9QjilJG8UTA6cw-zw.roa (hash: RUMHng+Xlo2Ru6wmJaBAotc3mLSEqq30G4I26Jr98jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:2d:54:54:06:72:6c:13:21:37:04:53:5b:25:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Validity
Not Before: Aug 6 01:00:50 2025 GMT
Not After : Aug 7 01:00:50 2025 GMT
Subject: CN=cb1909e2c563297a8bf2b6765b0235c2a784f845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:ad:a2:fa:87:1f:45:dd:5a:fd:06:37:85:
d9:88:4a:66:2d:08:3d:75:4d:86:65:35:2a:e6:19:
2b:d9:42:a1:bc:fe:0b:57:09:39:e4:05:3a:6d:c4:
8b:47:30:01:ab:93:21:c2:68:8b:59:01:6a:d6:4d:
ab:7a:5a:f6:39:8b:8f:a4:f1:75:11:75:8b:50:77:
3b:ab:db:87:df:dd:9a:bb:06:e5:5f:9b:07:51:a5:
5c:ef:cc:3f:91:3d:94:9b:31:c0:69:fe:11:a0:40:
50:1a:10:85:73:2a:ec:94:4f:00:7c:e8:17:a9:a0:
1f:89:05:f3:20:68:44:0a:58:e1:2c:0e:2d:4c:5b:
a2:6e:c6:4c:5b:0b:5d:aa:c2:ef:73:ce:e3:3b:33:
49:89:8f:c9:74:df:ce:cc:65:63:43:25:3d:5b:93:
0e:bc:f4:05:e1:30:e3:5b:2c:9f:3e:d5:c2:5c:80:
66:78:9f:da:81:aa:71:18:e1:1e:b4:56:77:d3:02:
bb:fc:30:fa:02:b8:fb:18:88:a9:6a:ae:d7:1e:8c:
9a:62:d6:26:49:4e:e2:27:55:71:05:19:81:82:9b:
32:cf:9d:87:58:19:ee:21:7e:d6:91:95:72:93:16:
81:3d:74:74:0a:96:df:55:0f:13:09:fc:56:62:dc:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:19:09:E2:C5:63:29:7A:8B:F2:B6:76:5B:02:35:C2:A7:84:F8:45
X509v3 Authority Key Identifier:
keyid:48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5d:63:56:c4:d9:bf:e9:cc:2b:3b:06:ad:f6:a5:9a:4f:f4:
d0:bf:e7:f0:84:5b:80:fb:a3:58:54:16:0a:14:75:00:b3:d4:
fd:1b:a1:d3:ea:8d:09:c2:65:f1:ad:47:ef:fb:c7:22:0c:f7:
d1:38:2b:45:cf:1e:0f:97:40:81:63:41:77:4f:fb:c6:c0:b6:
6b:6f:62:05:61:20:37:0c:77:e1:e6:c2:f7:95:a7:bf:7d:e1:
df:c2:24:15:21:72:fc:1f:6f:5b:84:db:1e:04:b0:01:af:6e:
25:95:d0:f9:9f:eb:2e:09:b1:23:7d:c4:cc:ac:24:59:a1:cc:
1f:33:3c:58:70:7c:5b:58:54:ef:2d:45:db:a2:12:8d:4b:34:
c3:4d:d6:f7:e5:e3:f7:47:9e:0d:ff:6f:f1:5a:c2:b2:68:95:
45:9f:4d:8a:4e:53:58:35:11:9b:2e:cc:08:c5:83:19:65:0d:
f1:97:10:19:3a:dc:a7:1e:e9:b7:cf:62:d6:7f:06:41:c7:b5:
0b:3b:65:02:bb:6f:2b:a5:5c:94:37:71:cc:d2:ab:fa:6c:02:
3a:1a:aa:74:22:73:85:6a:a1:6f:bb:40:eb:c2:fc:44:f8:5a:
0b:07:13:ba:5a:72:e6:31:45:63:b7:4f:58:6f:f2:ad:dd:7f:
f4:00:da:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:30:16 2025 by rpki-client