Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier: iaN603Ie2cKWJzLIFoI35bgdJRbg+kWxGp3a2Y64Fu4=
Subject key identifier: 4B:C7:92:1D:61:05:0A:ED:C3:95:0F:18:B8:AA:77:0A:95:03:EF:55
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 01985457231033E30FA88EB1DA65F62CAFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number: 0B0E
Signing time: Tue 29 Jul 2025 04:00:53 +0000
Manifest this update: Tue 29 Jul 2025 04:00:53 +0000
Manifest next update: Wed 30 Jul 2025 04:00:53 +0000
Files and hashes: 1: 7y3mGX9ZUocL1OILQHSxmA8VkvM.roa (hash: 7a9Oiy3txQlGgm+QjKoKXHZkPBhpeO84dBEOXh2SIfc=)
2: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: q6JLKyvMZVBgxyaRl4T7E/QIuV2motNP+5JsJXZ74og=)
3: oU4Cohsb9kWDicLsugicyZN6s7k.roa (hash: YXEAgbcCjB/PmDtI8uql79S0hq5pcPIEdu0GZCtli20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:57:23:10:33:e3:0f:a8:8e:b1:da:65:f6:2c:af:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: Jul 29 04:00:53 2025 GMT
Not After : Jul 30 04:00:53 2025 GMT
Subject: CN=4bc7921d61050aedc3950f18b8aa770a9503ef55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:57:9d:e8:bb:ab:58:59:48:72:60:c6:3d:
9c:c9:e7:97:e4:53:c0:bf:cd:df:fd:5f:01:d8:b9:
7b:92:19:6e:7c:42:12:d7:76:53:94:d6:71:d8:8b:
61:90:d6:c0:53:ce:0c:ad:37:3f:a7:84:53:99:9a:
46:44:9c:1f:33:fd:0a:eb:90:ca:76:29:15:08:7f:
fd:45:26:73:db:e5:fd:e3:3d:d4:a3:c6:35:fb:a2:
61:7d:6c:3e:a8:33:68:5c:5e:d5:12:13:0a:f0:05:
80:48:9e:1e:e9:c3:29:e5:45:60:1b:e2:cb:94:10:
bb:be:69:d0:29:45:2b:03:dd:c1:46:32:2d:94:70:
09:dc:0c:36:a1:7c:62:ff:f6:1b:b3:b0:e0:9c:31:
5d:08:73:fa:c3:4f:53:c6:d1:49:98:36:f9:c9:41:
d1:98:5b:67:03:61:f1:6f:1b:8d:f8:c2:95:86:42:
18:f7:ad:df:cc:62:78:02:b0:c1:68:a2:e6:a8:a0:
d0:bb:5e:05:c9:19:38:9f:75:2d:3a:30:d0:f5:46:
30:42:4d:7c:ac:c1:42:78:06:d4:57:59:56:f0:39:
2a:88:d3:4e:93:6b:43:48:f7:df:eb:01:62:c9:7a:
fd:8e:85:77:69:01:67:fb:f0:81:d2:c9:59:03:34:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C7:92:1D:61:05:0A:ED:C3:95:0F:18:B8:AA:77:0A:95:03:EF:55
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9f:3f:96:51:5a:a3:e9:43:0d:bc:17:50:d0:aa:3f:9e:10:
49:0a:b3:c8:2c:06:73:ad:bf:74:d0:52:0e:0a:42:fb:a1:fb:
fd:fa:97:58:3f:f3:a7:ef:75:56:d9:67:09:5d:1a:fb:df:8e:
82:7e:a5:a3:5e:81:47:10:95:df:74:38:dd:2d:12:ad:53:fb:
5e:64:65:55:d8:c6:ce:6a:06:de:c8:1f:a1:13:25:ad:8c:3f:
be:09:6b:b2:45:c9:a3:b8:b3:9c:40:12:3e:00:29:3b:a4:42:
77:d1:74:55:82:12:0e:50:ed:67:c8:09:56:92:ee:7c:ba:8e:
8b:9d:52:3c:7c:0c:06:cb:05:c1:c7:9a:74:b1:75:a1:d6:fc:
6d:1c:e4:13:d8:89:a4:5c:21:46:c9:ba:d8:d2:14:94:7a:67:
70:d6:4f:43:77:34:fe:86:f4:d6:d4:e0:51:64:c0:77:b3:9d:
85:d7:1b:cf:1b:46:56:94:aa:60:5d:74:5b:67:b7:06:f3:86:
75:18:ff:86:13:36:ff:17:28:c6:3c:3f:f6:12:d8:04:fe:a3:
d5:df:49:29:86:a7:30:cd:08:3b:57:e2:7b:c2:63:65:b0:c2:
0c:72:44:ba:a9:18:2d:52:c8:ac:ef:ad:8a:3f:b5:20:ad:a9:
e8:41:68:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:11:21 2025 by rpki-client