Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
File: SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft (raw, json)
Hash identifier: gFh1MKfCTvNdd53cApR3aqgq62xRPi+vFxO9p4fjsh8=
Subject key identifier: A9:F8:90:60:43:1A:A4:DA:05:66:AD:C0:77:92:BE:EE:83:FC:D7:84
Authority key identifier: 49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
Certificate issuer: /CN=4978d328bcde5294f372765c11aeef28155b0f02
Certificate serial: 01984965535382CD702D20E85249712F8BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 01:00:33 +0000
Manifest this update: Sun 27 Jul 2025 01:00:33 +0000
Manifest next update: Mon 28 Jul 2025 01:00:33 +0000
Files and hashes: 1: 2TabSpltHUMp_5ejqOpWZde5yuo.roa (hash: 3/hdPalq/aa4mw4O394+y1isU6rPiSjjsa/MhWeedzA=)
2: SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl (hash: 4sx+FG2Ym3BFW6puQUmjIiOM7ar0fogGYDx1VMZRVKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:53:53:82:cd:70:2d:20:e8:52:49:71:2f:8b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978d328bcde5294f372765c11aeef28155b0f02
Validity
Not Before: Jul 27 01:00:33 2025 GMT
Not After : Jul 28 01:00:33 2025 GMT
Subject: CN=a9f89060431aa4da0566adc07792beee83fcd784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:9f:53:c8:39:f1:02:10:48:c5:5b:a7:58:
4a:7c:4e:73:29:3c:af:01:71:ca:f7:cb:dd:83:dc:
09:84:0b:44:df:f5:be:a0:2c:d5:0f:fc:f7:84:3c:
45:a3:62:43:de:a8:2b:6a:d3:cf:f9:d7:b2:6a:80:
28:ae:18:65:51:a6:ec:9a:b2:e2:0b:2b:d5:ee:dc:
bf:65:44:36:c0:84:e9:29:cc:8a:ab:19:a5:96:82:
d6:d8:52:f4:41:99:03:dd:75:4e:a2:64:98:c0:1d:
18:a6:27:16:f8:b8:cf:bf:24:ab:7c:b7:63:13:58:
22:b4:66:c6:7a:9b:ec:5e:b8:70:e4:ff:5a:33:d9:
a9:d5:85:0f:62:a8:d6:4b:9e:f4:97:e3:7b:51:ed:
d1:b8:21:cb:00:d7:a9:d8:98:1c:ab:dd:33:51:e9:
ab:e3:e2:b8:97:0e:2e:4c:71:69:6c:1e:cb:99:f7:
cd:fa:13:7b:46:19:90:e8:b7:17:e9:e9:c6:67:bd:
08:70:2e:22:d2:73:cc:96:dd:a2:12:ae:43:d2:33:
e0:a4:04:dc:b7:1f:17:9d:ad:45:ef:62:51:a2:4d:
89:c1:04:f4:3c:42:50:95:93:b1:e5:36:01:f5:b3:
09:75:d5:a4:2c:b7:d9:b4:09:05:b4:41:f2:c3:94:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F8:90:60:43:1A:A4:DA:05:66:AD:C0:77:92:BE:EE:83:FC:D7:84
X509v3 Authority Key Identifier:
keyid:49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:47:c9:48:7f:6d:b7:cb:cf:ae:df:fa:0c:0c:bb:2c:bb:46:
86:0c:78:6f:fd:2e:7b:13:9b:9f:d5:77:1e:cc:03:cb:e0:18:
cd:ea:49:0f:7f:fc:19:55:66:78:34:9a:b0:67:51:7c:c2:9f:
71:38:da:ea:fa:0e:a7:66:1f:d5:33:1c:86:a5:4a:ad:bc:41:
ff:59:0a:3a:3c:0a:41:b8:c3:8c:e0:f3:ea:6e:59:ce:9e:4d:
f3:ed:ea:f5:23:5a:2b:9b:89:d8:a5:f7:9a:7f:c9:98:90:c0:
f5:fe:9c:88:3c:8a:1c:5a:16:9d:5a:2c:59:a6:33:f1:d0:19:
ed:fc:96:3c:cc:11:5c:64:b5:c3:7d:71:32:e4:1e:29:6b:e4:
05:45:38:47:7b:33:3a:a1:40:f4:c1:c3:9f:04:5a:b2:b5:cc:
68:a7:50:f2:f6:fa:e1:5c:40:65:51:b2:f5:cf:6b:ab:63:98:
2a:59:fb:3d:17:86:04:a2:e1:f8:97:d3:3d:37:bc:a9:1a:df:
e6:93:15:62:04:c0:f6:42:0c:b3:5d:cd:35:b0:16:77:67:e8:
d8:88:62:bc:70:bf:f2:c4:76:0b:85:5c:ef:45:f0:28:77:90:
ea:31:86:ea:44:09:42:9a:4f:6b:a8:7f:a3:4e:71:e9:86:27:
92:f3:b5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:03 2025 by rpki-client