Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
File: SepQocYggnYq_aAH1vyLS9sFdJ8.mft (raw, json)
Hash identifier: Efk73Rjht8l9LWEvxhRmpfhCjy71it+yQfeOXLLPDbM=
Subject key identifier: C0:32:56:27:81:D9:03:BF:1E:2F:E3:47:36:7A:D8:E7:8F:78:2C:CB
Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Certificate serial: 01984A415338E9685ACCAA3CE5EDF25F320D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 05:00:51 +0000
Manifest this update: Sun 27 Jul 2025 05:00:51 +0000
Manifest next update: Mon 28 Jul 2025 05:00:51 +0000
Files and hashes: 1: BHvEiTbi4Pq6B9PpmT5f6n87vL4.roa (hash: s+QevCZ3wcDACFh+jWTrJPdapoQkuOB0iQkRIdmgUkk=)
2: Nvgx0NStgiF6lAwa5XAPUa97GUc.roa (hash: HepcNDvL/nGXjv68tFuvUcj3BhJTbTJLihV6JiWEI70=)
3: SepQocYggnYq_aAH1vyLS9sFdJ8.crl (hash: hxxDcHvqF08UcRV0ageW4Dg6d+R358qJr6elj5VTQYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:53:38:e9:68:5a:cc:aa:3c:e5:ed:f2:5f:32:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Validity
Not Before: Jul 27 05:00:51 2025 GMT
Not After : Jul 28 05:00:51 2025 GMT
Subject: CN=c032562781d903bf1e2fe347367ad8e78f782ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:05:29:40:b0:9e:4c:f8:40:18:ce:8e:24:75:
37:f7:1f:69:2f:0f:b2:ea:de:87:1b:fa:f9:8d:13:
ae:fd:3d:17:d0:41:27:dc:40:54:c8:26:63:b1:12:
25:18:56:f0:10:f7:d5:21:d2:fa:2f:bb:bd:54:8a:
d9:f8:6d:85:e2:9c:a3:44:b2:52:fe:5e:69:a3:2d:
a1:95:40:a6:4b:2b:3f:4f:34:0c:dc:ae:c7:a5:78:
45:11:91:55:8c:d2:44:50:33:66:99:86:fb:2d:75:
fc:4a:ab:13:16:3c:eb:ea:ac:ae:c0:68:64:a6:4f:
44:d8:f3:36:45:63:f4:62:dd:81:70:c4:c1:33:47:
b6:8d:12:b1:fe:1d:64:1e:ea:7c:77:d7:dd:f2:f1:
ab:f4:d3:04:52:fb:ca:26:1e:6c:3d:dd:db:17:e1:
40:64:dc:4f:06:bd:0f:3f:02:5e:f6:91:0f:ad:38:
ce:43:13:0e:fd:e8:8c:37:a8:0c:b7:e8:40:25:00:
db:73:b2:00:ec:bf:e5:45:38:44:09:ac:66:41:6f:
3d:e3:ea:be:4c:b7:5d:d0:f3:26:44:62:5a:70:12:
80:56:7e:3e:b3:18:74:d4:17:b2:30:f0:4b:53:06:
1f:73:f5:b2:52:da:d9:32:cd:71:30:29:b3:5c:a4:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:32:56:27:81:D9:03:BF:1E:2F:E3:47:36:7A:D8:E7:8F:78:2C:CB
X509v3 Authority Key Identifier:
keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:12:4a:e1:f0:51:ec:34:6c:1b:4d:9e:da:1d:e6:2d:a4:65:
b4:ca:8d:e7:a6:17:f7:47:2b:8b:30:9a:2d:ea:3e:7b:c8:71:
2f:74:6b:a0:31:27:de:c1:92:69:3c:59:16:60:ea:c1:95:b8:
7b:60:d4:fa:7b:11:79:71:da:aa:97:b8:48:c0:87:c5:2e:8f:
52:24:a4:35:c8:25:89:0b:a1:48:47:43:86:9f:90:aa:e8:88:
51:06:e4:d8:13:59:39:5d:cd:ae:89:c9:b2:b8:db:bb:b3:8d:
8f:d4:f5:8c:07:ff:2f:85:2d:29:24:d3:8f:60:92:b1:9a:9e:
59:47:45:8a:09:e5:23:aa:63:d9:69:bc:54:fe:0e:9b:a4:ab:
67:b3:e2:72:80:fe:bf:17:cb:b9:dc:21:06:67:b4:05:7f:d8:
88:56:51:cd:53:6a:0d:70:70:a7:ca:b5:71:b0:0a:27:58:7d:
29:e0:36:be:77:5c:79:24:c8:fb:83:66:f2:b5:2d:20:f4:04:
64:7c:48:b5:43:b1:90:48:3c:a7:59:d6:3b:71:81:58:5b:ff:
db:85:69:10:81:50:5b:07:f3:11:75:f4:b7:14:8f:d2:c7:c4:
82:3e:89:a7:2a:cf:28:af:c6:52:5a:76:83:35:5e:97:cc:57:
5d:92:74:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:37:25 2025 by rpki-client