Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
File: sxk4vHICgkRLq9OyazSStFats5c.mft (raw, json)
Hash identifier: XzYfai4kXrDnThSRPprAmlOnZs9xLr3pNYxMnaDAwB4=
Subject key identifier: 99:D6:57:C2:12:DA:7E:3F:A7:84:11:02:48:4C:42:AC:D8:06:35:CB
Authority key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
Certificate issuer: /CN=b31938bc720282444babd3b26b3492b456adb397
Certificate serial: 0198458A3B2D3889D68BDC14FF653AE94BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
Manifest number: 091E
Signing time: Sat 26 Jul 2025 07:02:23 +0000
Manifest this update: Sat 26 Jul 2025 07:02:23 +0000
Manifest next update: Sun 27 Jul 2025 07:02:23 +0000
Files and hashes: 1: mMmymzplWMeJzzgdG7P3tHtpBaQ.roa (hash: /bqXbIc2T1Ug7GTSXeUaRuS3D15TA3H+LDCDm5yP2ts=)
2: sxk4vHICgkRLq9OyazSStFats5c.crl (hash: jzBNWmSqsefQTLmoomdxXvZi4hU0RMC8VDygmf1AVfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:8a:3b:2d:38:89:d6:8b:dc:14:ff:65:3a:e9:4b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31938bc720282444babd3b26b3492b456adb397
Validity
Not Before: Jul 26 07:02:23 2025 GMT
Not After : Jul 27 07:02:23 2025 GMT
Subject: CN=99d657c212da7e3fa7841102484c42acd80635cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:f1:aa:d3:0a:d1:79:b2:d2:15:ea:57:4b:
7e:d5:dd:81:62:97:22:da:54:c3:1f:ba:48:a7:4e:
e7:eb:06:99:32:f7:af:54:32:47:d4:22:69:06:72:
90:c6:94:18:ee:cd:48:71:d4:49:af:84:b2:90:16:
a3:e0:c7:a5:ac:47:40:78:25:52:23:28:af:c7:dd:
6b:75:1f:1b:60:b1:47:70:99:fc:36:32:5f:b2:c4:
54:26:24:63:5a:f0:19:96:7f:22:58:8b:0c:95:56:
3c:4f:b4:43:0f:51:9f:54:72:3c:0d:e8:da:26:49:
5c:3b:cd:25:86:a4:d0:04:68:9a:3e:67:58:1d:fc:
0f:12:6a:66:d6:f5:fd:76:1c:53:40:e0:11:5b:2e:
5d:e3:f5:24:32:40:c0:d8:d9:8b:8e:be:05:13:91:
8a:20:9c:ee:02:8c:c1:e3:a1:9d:09:21:4b:7e:8d:
b1:c2:d5:b0:de:be:bd:74:ab:ec:87:05:24:d1:b4:
05:08:78:b9:91:48:40:c4:9a:90:2b:b5:30:4e:32:
f4:84:77:9d:b4:32:e5:74:a5:ff:ac:6d:b3:18:8d:
e9:c4:15:7d:59:e8:45:02:a3:49:df:08:d3:52:e7:
c3:a3:81:3a:e7:7b:df:e0:26:c9:83:95:ba:c6:9b:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D6:57:C2:12:DA:7E:3F:A7:84:11:02:48:4C:42:AC:D8:06:35:CB
X509v3 Authority Key Identifier:
keyid:B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5a:2c:87:77:92:16:3c:c8:04:95:c4:43:32:4c:dc:be:24:
08:63:dc:ba:05:9e:62:51:13:e1:34:f6:e1:e4:88:74:ab:dc:
3a:ee:3a:c3:f8:58:ef:42:92:0e:e9:b7:80:b2:1a:d4:eb:62:
f2:48:a9:9a:f4:b6:d8:09:78:42:c3:56:37:48:83:a6:60:74:
90:a9:c7:3b:2c:49:89:8a:33:bc:27:86:c3:57:f7:61:fc:6b:
8e:d7:db:84:cc:49:97:c6:d3:59:bf:81:b8:c1:57:92:cd:11:
d5:57:72:0c:1f:c0:c8:05:41:ff:d7:d1:75:17:f7:12:e6:df:
92:e0:6e:bf:57:1b:7a:a7:61:f2:c1:d5:dd:b9:1c:99:07:ac:
fb:95:39:10:ce:eb:b4:57:e6:78:12:f5:ca:e4:24:86:c2:c3:
3c:12:b3:9b:2f:5f:10:38:ce:0e:f2:b3:9f:c7:fa:db:14:88:
8a:25:01:03:c5:26:62:c9:cb:16:92:6e:5a:fd:a9:43:b7:a3:
80:8d:7a:7c:ea:d3:40:bc:85:e6:1f:e3:06:b7:83:e6:33:e3:
05:80:a0:cb:ae:ed:d9:e8:c4:1f:b1:4d:05:8a:63:2c:3d:1c:
15:a5:ed:3c:c3:ed:c8:6d:ee:a3:7a:27:cb:a1:40:a4:dd:27:
cf:05:6c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:50:12 2025 by rpki-client