Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
File: SVbzCE2TEO-hvAfvMfk0spQfED4.mft (raw, json)
Hash identifier: T7Rizn8rYta2H4h4o9RQ7ScDe5ONtwO2os2bEFUwB9k=
Subject key identifier: 41:E9:DD:2A:DE:D8:E1:3A:E0:FE:A6:C8:B4:DF:9D:F3:0C:74:6C:F2
Authority key identifier: 49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
Certificate issuer: /CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Certificate serial: 01984B552D7138C021B9CC7A2447872647A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 10:02:10 +0000
Manifest this update: Sun 27 Jul 2025 10:02:10 +0000
Manifest next update: Mon 28 Jul 2025 10:02:10 +0000
Files and hashes: 1: QocjuYoGfozpr0QiTXkGPfsUrcg.roa (hash: Y8oC4kwoV9mXXZSXGd1lAHQDlPdz5kxQi4KnTi7EYOM=)
2: SVbzCE2TEO-hvAfvMfk0spQfED4.crl (hash: czjyA/zOB+ddh9WgPYoD4vqUoAHMXeuaAvk8BrPXA2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:2d:71:38:c0:21:b9:cc:7a:24:47:87:26:47:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Validity
Not Before: Jul 27 10:02:10 2025 GMT
Not After : Jul 28 10:02:10 2025 GMT
Subject: CN=41e9dd2aded8e13ae0fea6c8b4df9df30c746cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:59:c1:1d:19:d7:e8:54:6c:95:9a:d9:31:
b4:75:77:47:0f:06:79:7b:6a:f1:85:49:fc:0a:28:
f1:e3:77:02:71:aa:9c:ee:7d:d1:d7:c8:72:a8:f1:
51:3c:1d:b8:85:0e:c0:6d:82:2d:bc:01:9e:c4:37:
05:02:84:0e:8b:87:89:f5:70:e2:35:09:a3:29:7e:
c2:88:9a:f5:7a:f5:bd:1c:c3:bc:ce:2c:18:74:90:
8a:19:24:86:23:24:c5:4c:1e:a3:1f:22:7f:00:59:
ef:58:4a:ca:f6:4a:77:66:6b:e6:7a:50:a4:65:d8:
c4:8b:26:f8:05:de:f9:bf:8e:5c:c1:2a:f9:df:46:
fd:68:79:5f:12:ef:db:2e:89:97:e2:a2:11:ea:a6:
ca:07:b6:d7:f9:c3:b0:68:2d:f0:f1:d1:f8:96:1b:
8d:42:4e:a5:1c:dc:44:6b:0f:6c:b2:40:b3:4f:bb:
de:d8:37:ea:62:e1:dd:b9:22:34:69:b7:6f:79:60:
e7:4a:9a:d8:ac:09:64:7d:f6:26:d2:b1:1c:aa:ca:
ee:34:8c:6d:2a:96:b2:37:ab:40:26:17:7c:be:b4:
41:5e:f7:1f:6b:8e:a6:c0:c6:1e:03:10:9b:b4:af:
68:14:14:f4:38:a3:af:df:13:b0:7b:b2:20:60:7f:
e0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E9:DD:2A:DE:D8:E1:3A:E0:FE:A6:C8:B4:DF:9D:F3:0C:74:6C:F2
X509v3 Authority Key Identifier:
keyid:49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:44:e6:4a:10:ea:c5:eb:5f:87:8c:ed:9b:6b:9b:a6:d9:c3:
69:24:a1:92:c7:6e:83:81:a6:04:db:a7:ae:8e:b2:e3:6d:6e:
ed:73:51:1e:a8:be:93:c1:7f:15:35:ae:86:b6:cf:96:20:21:
88:e0:91:6a:d3:76:0f:c5:86:b8:0b:b4:47:9d:6d:73:2e:a4:
b9:b4:c9:b8:65:9a:67:ed:58:1b:3e:68:02:61:39:bd:9f:f4:
50:ec:49:94:49:5e:38:be:d3:2d:1f:8c:d1:d9:f9:92:04:61:
d2:a4:c6:a0:31:22:8b:89:13:0b:e9:bd:e2:6b:9a:e8:17:e5:
18:1f:2b:6c:1b:df:2c:ec:f7:12:2b:33:5c:73:e7:b9:45:11:
03:d9:13:9b:2c:cf:84:a6:f6:2d:30:a6:49:bf:d4:cd:29:10:
aa:ca:6e:97:ce:7a:75:45:12:ce:23:24:e1:c1:d3:c7:7e:3c:
c1:1b:70:60:43:60:c8:ae:ac:4e:e6:f3:29:2d:62:12:6a:a4:
3a:ca:66:3a:03:77:99:ea:28:42:fa:3b:a6:b0:2e:9a:c6:86:
75:09:b6:1e:6c:17:b9:bb:f3:18:9c:21:02:52:e7:91:ae:e4:
08:39:0c:58:5e:3d:5f:ab:1c:0f:62:d7:dc:01:16:a3:e5:19:
9b:f6:8a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:58:21 2025 by rpki-client