
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
File: SF4-4cMlgXX0_22bVZ2lTIPsC08.mft (raw, json)
Hash identifier: ULaWyLaMi/jKSvNGRqEzIDxLFupj01m2B8g6tf0eU1U=
Subject key identifier: B3:CE:FF:B4:32:6C:0C:4B:8F:F2:F5:C8:D1:5A:BC:6D:69:00:6D:68
Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
Certificate issuer: /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Certificate serial: 01984A4188174AD498A454F7023C9E1FF310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 05:01:05 +0000
Manifest this update: Sun 27 Jul 2025 05:01:05 +0000
Manifest next update: Mon 28 Jul 2025 05:01:05 +0000
Files and hashes: 1: SF4-4cMlgXX0_22bVZ2lTIPsC08.crl (hash: OmrPW5RdFl1x/QJxW1Js50VMnEJCw/nYTB6YwZFY1aw=)
2: ZopMcF1edsiLC5IB_2wqcv1pm7I.roa (hash: 9APA6+f5SQgw2656vPCnPyRgFDtV/KHCNYnrSKLYasE=)
3: fB9-x9nzQMLGXiKWPiofGOiCCDo.roa (hash: /Yz5duUUoV4QyYXJiuuC625duaCe5B8wdcwUeuj9HvE=)
4: l38wLN6Gw_epossfbuxRMwnX5sY.roa (hash: EA/nu4qnZGykrdQkMaUMT/48WUqEkVXJbnvFzsWJo70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:88:17:4a:d4:98:a4:54:f7:02:3c:9e:1f:f3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Validity
Not Before: Jul 27 05:01:05 2025 GMT
Not After : Jul 28 05:01:05 2025 GMT
Subject: CN=b3ceffb4326c0c4b8ff2f5c8d15abc6d69006d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:49:20:bd:7a:1a:3f:b3:11:f2:0c:f0:50:
44:8a:6e:40:f1:f4:91:6a:06:c2:03:0c:14:3d:83:
63:4e:85:59:ce:ad:8c:bd:ad:92:a4:06:2a:0c:39:
6b:4e:2d:1e:3e:9b:b7:c5:de:9f:04:a9:06:d9:bd:
40:26:09:62:fd:dc:b3:77:63:99:55:fb:e8:13:11:
e7:17:1f:d2:e0:44:b2:82:43:1d:22:77:f5:e9:14:
62:55:86:1d:a2:3e:93:92:e7:3e:b5:97:79:6e:ea:
f3:bb:54:00:b8:13:4b:15:7c:ab:c2:8c:e8:5c:b9:
3b:10:b8:9f:c2:22:49:57:e9:77:77:37:6a:95:b7:
b4:eb:c4:9d:88:c0:f8:6b:77:f2:14:33:33:1e:fa:
de:9f:40:4c:8c:32:10:0c:90:0f:5c:96:7a:7d:63:
f9:4f:24:ca:b2:d4:7a:6f:0d:4e:cc:4b:40:0e:6f:
98:d9:9b:eb:ea:94:c2:43:af:7f:d7:a3:7d:c1:36:
9b:f3:e6:ab:11:f3:f1:20:98:9c:23:c7:2c:50:a5:
00:9c:69:e9:53:77:69:54:62:63:97:3a:ef:8c:39:
6d:84:58:49:46:ad:b0:0b:83:aa:ed:58:e6:00:9d:
ec:aa:ce:36:54:8b:70:02:a8:1a:f8:42:c2:1b:8b:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CE:FF:B4:32:6C:0C:4B:8F:F2:F5:C8:D1:5A:BC:6D:69:00:6D:68
X509v3 Authority Key Identifier:
keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4b:16:f7:23:80:75:3a:a6:ae:f8:90:90:4a:2a:d8:b8:d2:
29:ec:5f:97:b7:82:53:db:76:dc:5e:c7:99:be:0e:42:88:ce:
fb:d7:ca:56:76:e9:b5:08:a8:22:ce:46:0a:16:a8:1e:4f:c7:
a6:e2:8e:66:76:90:18:b5:e0:b3:cd:86:5c:48:11:0b:45:e5:
22:3f:61:85:00:f6:b1:75:c6:08:47:21:44:d3:af:bd:b4:f2:
e1:7e:bb:2e:04:1e:12:0b:7d:40:68:e8:90:a1:66:97:50:d0:
10:d6:bb:c7:54:69:28:af:15:23:81:3d:ed:7d:7b:23:64:46:
4d:71:36:ca:4e:c3:47:42:50:dc:4d:5a:e6:bd:8c:ea:0a:2e:
11:29:ea:ec:5a:b2:cb:8d:65:6c:20:73:96:9a:6d:29:1e:cd:
e2:59:ed:85:8f:85:a2:20:5d:fa:50:a1:d3:f5:14:ea:9a:39:
a4:1b:45:84:9b:71:c9:38:e8:9c:a2:2c:a3:bf:c6:4a:b5:d7:
1b:56:c2:11:0d:46:5f:20:f2:57:77:9d:88:45:8d:89:ae:74:
69:11:28:fa:46:9b:b0:1d:97:6e:66:2b:b7:be:f5:1e:60:9d:
46:5f:4d:42:5e:28:98:37:15:39:01:9e:68:ff:91:77:fa:a9:
37:08:6c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:09 2025 by rpki-client