Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
File: SfCTu46K0RxMg07f0t9U1By0n3k.mft (raw, json)
Hash identifier: UUu1MgKUls7reb1jfEL6NADbkUtfQG4+PD72gUuE7fQ=
Subject key identifier: 30:19:85:FA:FA:29:55:33:4C:A1:8E:B8:ED:74:2F:73:DB:24:76:F7
Authority key identifier: 49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
Certificate issuer: /CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Certificate serial: 01984AAF305F91576505A2A3008CE30D349F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
Manifest number: 0464
Signing time: Sun 27 Jul 2025 07:00:51 +0000
Manifest this update: Sun 27 Jul 2025 07:00:51 +0000
Manifest next update: Mon 28 Jul 2025 07:00:51 +0000
Files and hashes: 1: 5GNPm8h48A-gwMWqDZ4JoMYcVZc.roa (hash: 9ZBWY++nE/D6/RJTqjkk/4Q4ufkyFaszCX0qNKOcYVk=)
2: SfCTu46K0RxMg07f0t9U1By0n3k.crl (hash: qRTbfHdRaMGffsi8P5Ho+uw8x5/wtYj0mpty1MjpW/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:30:5f:91:57:65:05:a2:a3:00:8c:e3:0d:34:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Validity
Not Before: Jul 27 07:00:51 2025 GMT
Not After : Jul 28 07:00:51 2025 GMT
Subject: CN=301985fafa2955334ca18eb8ed742f73db2476f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:07:43:41:31:5b:92:38:59:1e:02:8a:b3:
4d:2f:bb:30:95:df:bf:b3:7b:72:82:f5:8a:7a:32:
e8:12:2c:95:33:fb:1b:cb:4f:22:e4:0f:0a:ba:0c:
fe:bb:de:50:24:88:62:41:a4:86:48:ec:c9:4b:49:
f8:53:90:fc:ba:43:00:f0:ec:7f:af:a4:90:5a:17:
c5:e1:56:b5:34:73:e0:4e:db:91:7c:b7:f6:0a:7f:
36:a0:c9:64:48:dd:d2:ec:89:17:f3:2b:7c:83:03:
7b:03:28:3f:f7:1c:ea:2a:b8:81:b1:9f:70:c9:45:
d0:b4:ba:d6:47:26:5d:49:93:5f:35:64:bd:39:d8:
98:d7:e5:bc:ca:4d:61:d6:d7:f4:a7:5c:c2:38:a5:
9c:f7:b5:10:4a:c1:01:0f:3e:83:74:29:8d:90:79:
18:e3:33:3d:a7:bc:70:f9:9a:68:61:9f:82:5d:03:
1a:33:cc:22:fe:2f:e6:0e:70:a3:d6:1f:d0:45:8e:
d2:1e:0b:47:74:1b:ae:d7:01:3a:e3:45:a5:1b:6f:
80:f7:e4:9c:5c:d7:e5:58:b8:ad:cf:7f:75:f5:6a:
8a:01:12:19:ce:3b:ae:4b:6c:46:47:7d:35:51:f4:
d0:d6:80:7e:b5:30:8a:c0:01:43:be:12:69:d9:91:
ef:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:19:85:FA:FA:29:55:33:4C:A1:8E:B8:ED:74:2F:73:DB:24:76:F7
X509v3 Authority Key Identifier:
keyid:49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:29:5a:20:cb:0c:83:36:fb:5a:e4:45:d6:47:28:8b:34:db:
1d:8f:e1:5b:4b:44:9c:df:08:6c:86:31:4c:7d:3b:7e:18:8f:
4b:18:b3:d4:44:cd:9e:d4:4a:12:6f:7e:ff:58:b1:3a:25:d7:
3b:2a:97:89:2d:29:cd:10:50:00:41:c1:89:16:30:c7:6d:66:
ed:1f:dc:50:c0:03:d3:a0:63:6e:0d:d9:a0:5b:0b:95:fc:1e:
1f:19:29:7a:ad:64:04:a8:fe:b8:74:92:35:37:96:c9:78:6c:
3c:4b:a5:22:7c:08:fc:19:69:e8:cf:42:19:44:96:cf:23:ee:
85:82:19:d6:8e:12:30:48:5f:30:4a:18:be:ac:3e:f7:f6:d7:
96:60:59:93:2d:54:28:4f:b0:b6:ad:1b:31:76:6b:34:b4:aa:
4b:a3:14:1c:d5:5d:28:ce:42:75:e9:f3:4f:c3:8c:97:98:2c:
48:e7:1a:ab:2b:4c:de:a7:ad:30:2c:11:dd:2c:b8:55:26:26:
ec:f9:b1:81:4f:5b:53:e8:c4:f9:df:7e:35:15:d9:57:a6:34:
8c:6c:70:b6:73:c1:c0:7a:e2:dd:c3:70:29:ae:db:5a:74:aa:
a3:67:4e:12:c1:e7:e2:f7:a8:df:b5:23:57:a5:c2:11:6f:07:
42:fd:15:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:09:15 2025 by rpki-client