Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
File: Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json)
Hash identifier: iUoVsasljGC/UsFael62HjvW6v3SSqQvmCg8auPPtf4=
Subject key identifier: AF:E8:74:60:E4:9E:7B:DF:F0:4F:47:FE:82:A5:CA:FE:59:D7:09:E8
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial: 0198530D17504A84A98166EE42FED7515363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
Manifest number: 1608
Signing time: Mon 28 Jul 2025 22:00:23 +0000
Manifest this update: Mon 28 Jul 2025 22:00:23 +0000
Manifest next update: Tue 29 Jul 2025 22:00:23 +0000
Files and hashes: 1: 7MtM04j_v2k1Wph2OgnR4TG2Sv8.roa (hash: 4itzuX/fQ15qNQ7YFYgNHc2z9oC3AqKBZmDxx9ZMouE=)
2: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: 98CS1F45of128zdicoGaPl61fi5RZ8tuPP0N62/HwYo=)
3: kx9kPAQ67ntw1Xkq0X26moD-pwk.roa (hash: X9S/3YSjUgYxw6y4t3NQ27+L1d2kR0+Z9uu+3WHTnVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:17:50:4a:84:a9:81:66:ee:42:fe:d7:51:53:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Validity
Not Before: Jul 28 22:00:23 2025 GMT
Not After : Jul 29 22:00:23 2025 GMT
Subject: CN=afe87460e49e7bdff04f47fe82a5cafe59d709e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:4d:88:a1:1e:3b:e4:10:98:9d:6e:dc:15:
e0:09:e0:79:d8:9e:7a:c7:a7:86:8f:5f:03:6c:73:
8a:5c:93:33:d5:8f:55:2d:ae:e3:00:00:fd:94:24:
52:69:38:6e:98:18:eb:21:a2:a4:0b:fb:27:3a:5a:
c6:5c:d1:69:dd:d4:73:7e:b7:0f:c1:25:74:76:5f:
ac:78:58:ab:92:18:4c:6b:1f:74:6f:c6:09:af:59:
1d:2c:2f:24:40:1b:3f:37:e7:31:ef:57:24:7b:67:
80:21:c8:88:c0:de:f8:ad:46:c0:2b:20:e1:53:95:
c9:04:59:fb:d7:b0:24:9e:2b:34:86:b0:48:c4:2e:
a3:fe:88:6d:79:5a:70:4d:1b:6b:5b:d0:2f:df:81:
7e:d3:f3:37:92:e9:b4:4d:1f:27:18:5a:b6:19:49:
d3:c3:ee:b9:1e:b0:ef:1f:e1:ff:43:c1:cf:16:ca:
25:0f:81:bf:76:11:dd:d7:a8:47:35:70:0c:7a:9c:
ab:bc:3c:2b:7c:8d:1f:19:18:54:4c:e6:c6:ba:f7:
a5:d0:b9:88:13:37:2f:41:12:50:82:95:f9:38:db:
ce:05:c0:da:72:62:18:26:42:50:9e:87:ed:cb:8b:
84:d7:71:3e:19:ab:b8:b7:a2:90:9a:b9:93:20:fd:
fd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E8:74:60:E4:9E:7B:DF:F0:4F:47:FE:82:A5:CA:FE:59:D7:09:E8
X509v3 Authority Key Identifier:
keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:21:e7:63:31:70:67:74:44:d9:aa:95:83:70:e0:05:30:dd:
8f:f5:ce:2b:6c:b4:ce:18:63:bb:78:d5:f7:46:6d:ea:00:d1:
39:7e:df:e5:2d:54:fd:36:06:c7:57:19:48:ef:aa:4b:c5:bc:
23:74:ca:00:16:c9:bd:f2:93:4e:80:8c:a7:e9:18:bf:38:56:
1f:5b:99:ac:f2:d0:71:92:20:50:b0:0a:64:52:b1:ea:50:a1:
5e:4b:dc:ad:d5:d3:80:99:34:8e:99:19:9b:96:d0:77:89:47:
d4:2e:b0:03:64:0c:45:3a:2a:28:8e:21:78:db:85:ce:c9:f4:
31:96:9a:21:b4:00:63:87:0f:b1:41:a1:7b:6c:98:07:c2:c1:
9c:59:d4:5f:57:57:4e:38:31:67:b2:68:60:25:14:61:05:a5:
08:ea:14:ec:9c:63:00:6e:58:64:81:fa:16:db:49:ce:98:56:
ca:bd:72:72:d6:fc:d8:a3:98:26:9d:3f:77:cb:d4:63:11:28:
14:33:5f:8f:ef:d7:21:6b:84:2c:72:d7:c2:9e:f3:17:80:37:
b6:94:b6:96:73:e9:82:fd:b6:dc:f2:fc:52:6a:14:c6:25:d8:
32:d5:b5:59:4e:12:ac:7f:a4:3d:64:ce:9c:e5:f8:9c:ab:88:
83:61:9a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:44 2025 by rpki-client