Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
File: sK3wWv729l-hmmHDCuT7EcfPJbY.mft (raw, json)
Hash identifier: d1CzvHLSZZEA7gsl7nTxy6zzznBNvUxpZUgvYA1C0ZA=
Subject key identifier: 47:8D:62:41:28:99:FA:61:54:EC:4C:52:40:5A:47:9D:2B:BA:DA:F1
Authority key identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
Certificate issuer: /CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Certificate serial: 01987E9CFCA5154F0EF904223B88DD2909C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 09:01:14 +0000
Manifest this update: Wed 06 Aug 2025 09:01:14 +0000
Manifest next update: Thu 07 Aug 2025 09:01:14 +0000
Files and hashes: 1: IO0LvnAOcWauTMBpIRocATcgbnc.roa (hash: X7MgkZkBpVtr92LvTB/v/8FDDjBqTMenme65NutXS6Q=)
2: sK3wWv729l-hmmHDCuT7EcfPJbY.crl (hash: SNuY2x5d+vlMiKTHh2M8ZedVx0MqQJrKBtJywuru84o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:fc:a5:15:4f:0e:f9:04:22:3b:88:dd:29:09:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Validity
Not Before: Aug 6 09:01:14 2025 GMT
Not After : Aug 7 09:01:14 2025 GMT
Subject: CN=478d62412899fa6154ec4c52405a479d2bbadaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:84:61:00:14:5b:3e:a9:7d:07:50:b9:19:
0d:a0:c6:c4:6e:2f:e0:f3:72:ab:9d:45:78:81:e3:
07:6e:a3:e4:d5:ee:fe:17:c1:67:6f:18:4b:45:0c:
75:8e:3b:cc:f8:2f:52:b7:44:bf:82:4e:46:c1:c4:
cb:70:a4:b6:bc:24:01:28:9c:db:9c:41:f1:ab:0f:
64:38:71:10:81:b7:a6:63:42:34:93:3b:25:cf:00:
0e:9c:67:09:24:ca:86:e4:ab:79:33:d2:e5:a7:6d:
86:34:9e:5d:15:08:13:5c:9f:af:c0:f2:fb:19:33:
b6:8d:f8:b0:67:30:68:57:66:dc:72:68:01:fc:14:
e1:76:94:48:58:8e:4f:9f:04:22:b8:2c:e8:60:1c:
62:d3:0a:78:6f:2b:b4:e7:ba:5d:2b:4e:85:29:f8:
fa:0e:79:88:b4:4d:5d:4d:ac:b0:77:26:b4:1d:07:
bd:c9:66:70:ba:f0:81:47:46:b3:51:07:6b:ef:79:
3c:de:74:3b:ee:27:7c:3a:31:ae:09:00:b7:47:be:
af:fd:60:21:08:c8:93:5f:7e:6f:08:cf:d4:2f:34:
44:47:4d:13:0b:0e:97:9a:a3:84:f6:39:64:96:c3:
0a:82:9e:44:61:5e:94:5f:4f:42:33:6a:2f:84:fa:
29:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8D:62:41:28:99:FA:61:54:EC:4C:52:40:5A:47:9D:2B:BA:DA:F1
X509v3 Authority Key Identifier:
keyid:B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:da:dd:53:4f:58:0e:a9:cd:93:b2:4b:fe:18:d8:b5:d6:f7:
02:d7:cf:44:57:4a:89:5a:2f:37:60:e8:dc:10:2e:1a:d8:0d:
1f:63:c7:3e:22:5f:57:73:f5:8f:e4:2a:f5:94:74:74:e8:87:
1a:4a:96:36:e4:b6:2f:0d:83:ec:de:2f:d4:68:28:b4:3a:55:
38:c6:9c:d1:0c:2f:ec:2f:ae:33:1c:ea:80:ed:b1:d5:81:0c:
b2:05:e6:d1:84:9d:af:5f:b3:f6:b1:25:4e:0b:09:e0:96:30:
bd:77:43:53:1b:ec:30:07:12:dc:ac:3c:93:63:39:7e:2b:cb:
f8:53:ed:c5:64:72:1d:dd:72:c9:0e:6a:55:85:75:4b:99:eb:
70:43:cc:cb:cb:76:d3:1d:7b:a0:12:8e:0b:c2:d1:4d:5a:16:
60:9a:0b:92:9f:2c:fd:aa:90:d0:9d:8c:8f:d7:9f:04:14:82:
83:18:35:4a:af:eb:c8:3f:e3:f3:f4:ec:0f:0e:8c:63:13:b3:
ff:63:6c:0b:46:4d:9e:d5:1f:7a:d0:a1:e1:9d:16:86:99:65:
ec:85:a2:ed:ea:e3:82:13:4d:20:af:f2:86:00:cf:d3:97:11:
77:fa:2b:b2:c3:70:65:3b:8b:a7:29:ab:91:c3:3a:1a:a0:46:
0f:ad:0e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:16:12 2025 by rpki-client