Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
File: sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft (raw, json)
Hash identifier: mdpAutTfnzmpkZu6sSFArWECP9YHoClOfpGE6zl+4YM=
Subject key identifier: B0:5E:8D:81:62:32:95:8D:AB:8C:B7:3A:2D:F7:E4:62:E3:67:C6:70
Authority key identifier: B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98
Certificate issuer: /CN=b01a59d0a61aa6174438988cc83598dbfea5a998
Certificate serial: 019872CF8785B190E52FD544CED816325FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
Manifest number: 1188
Signing time: Mon 04 Aug 2025 02:00:59 +0000
Manifest this update: Mon 04 Aug 2025 02:00:59 +0000
Manifest next update: Tue 05 Aug 2025 02:00:59 +0000
Files and hashes: 1: HSNefFgXaRWCGcIv1fjoOpFklrI.roa (hash: cKpMHes+RehvKJ31+pA2N64A397k3fGtWACpN0dogjA=)
2: sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl (hash: JIY7df+VrdSwRJO9UD5rFjHNiyG2JECcP4pNaft/Ldc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:87:85:b1:90:e5:2f:d5:44:ce:d8:16:32:5f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b01a59d0a61aa6174438988cc83598dbfea5a998
Validity
Not Before: Aug 4 02:00:59 2025 GMT
Not After : Aug 5 02:00:59 2025 GMT
Subject: CN=b05e8d816232958dab8cb73a2df7e462e367c670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:80:49:39:bf:7d:31:a0:05:6b:87:d3:40:e7:
e5:28:0e:20:0a:75:d1:80:b3:41:3c:99:ed:44:4f:
81:ea:7d:a5:95:fb:a0:d9:ec:a7:c8:f9:0b:81:1c:
23:5c:d1:aa:dc:58:87:2c:e7:11:c3:9f:45:aa:19:
a4:a1:ed:c3:38:79:28:20:7c:6d:f3:6d:ce:a5:89:
b3:0a:89:f6:ee:53:47:5d:67:ad:9c:1a:32:c8:44:
31:8d:6d:e0:f5:2e:93:72:85:6f:5d:bc:1e:55:39:
33:88:15:32:c0:fc:ab:85:ff:18:13:f0:9d:62:68:
19:e8:82:33:23:9a:72:55:aa:4b:06:22:68:5e:bd:
b6:a9:f0:dc:be:f8:b0:a4:b2:6a:d3:9b:ca:ae:8c:
23:6e:50:9f:25:ec:2a:a8:b9:fb:8a:70:37:45:50:
57:53:a1:64:38:59:40:28:e9:c5:c9:27:6d:4b:0f:
6c:8b:3f:3f:3e:09:b1:87:c3:8b:bb:6e:b7:0c:48:
34:a2:1a:26:ae:f5:40:bc:79:ce:99:72:c3:65:71:
78:68:c9:84:7e:a4:0d:d7:a5:36:46:8b:57:7d:d5:
e6:a2:12:c1:b2:ba:7d:b5:87:9d:82:b4:ed:d3:31:
bc:75:10:e3:cc:e5:3f:ed:87:d4:d3:61:73:4c:25:
59:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5E:8D:81:62:32:95:8D:AB:8C:B7:3A:2D:F7:E4:62:E3:67:C6:70
X509v3 Authority Key Identifier:
keyid:B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ad:04:c9:30:e8:c6:9e:6a:1d:e7:63:84:85:49:af:0c:48:
d7:db:58:74:72:44:fe:50:42:40:be:88:d4:ed:76:e6:81:ea:
78:5d:3a:74:cd:15:9d:44:93:ab:a2:48:a9:8d:a5:ea:2e:6e:
95:df:ec:1b:57:e8:34:d1:c0:18:d3:4c:d6:1c:41:ee:95:22:
4a:21:c2:4f:40:dc:fe:79:7b:68:8a:5a:7a:6d:30:9e:ea:bc:
60:f2:71:26:6a:0e:6d:04:fd:c2:a4:a9:b3:36:d3:cb:eb:55:
c8:a7:bf:6d:cd:a0:65:ba:2e:21:85:df:f0:55:4a:6b:bf:1c:
ae:b1:e8:73:0c:01:15:0f:d2:bd:c4:72:72:7a:1b:a7:94:cf:
43:98:0c:d6:60:a9:d4:8c:ba:42:ec:5b:d5:6c:b9:d9:88:02:
9c:e8:e9:70:10:6b:1e:32:77:b1:ba:0b:55:50:56:5d:0d:be:
6f:90:f1:99:31:3b:be:d6:56:00:7f:f1:e3:99:c4:80:0a:9c:
27:4c:3a:76:a4:b0:36:c2:82:90:1b:9a:5d:11:98:81:72:fd:
0e:07:da:87:4a:a2:68:d9:43:a2:8d:b1:43:ad:46:00:49:1d:
76:c3:e5:ac:56:23:14:70:90:3f:a6:b6:99:d8:f9:e6:33:c4:
6e:59:e0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:28 2025 by rpki-client