Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: QrjQHthmQdir9EBU7dc7fBEOz2E4xzTkrWcwOE+X+to=
Subject key identifier: 04:8B:07:57:8A:65:68:D1:6A:39:B7:2A:E2:D7:F5:6E:01:5D:B2:59
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 0198462D1E0D15A6AE4DDC716116E9B04AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 10F1
Signing time: Sat 26 Jul 2025 10:00:18 +0000
Manifest this update: Sat 26 Jul 2025 10:00:18 +0000
Manifest next update: Sun 27 Jul 2025 10:00:18 +0000
Files and hashes: 1: Y9lkKqKsnQqZGmQo1Xo2fiLr5iU.roa (hash: 6A0trmFdZaEK+JW4D/IW96VMnZJTTVLOPMuYPUfapNM=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: SbqSOMrv06az2uy0eLE0bRWxWMSBqkxuroR1PO/sJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:1e:0d:15:a6:ae:4d:dc:71:61:16:e9:b0:4a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Jul 26 10:00:18 2025 GMT
Not After : Jul 27 10:00:18 2025 GMT
Subject: CN=048b07578a6568d16a39b72ae2d7f56e015db259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ef:80:18:27:bd:c7:04:fe:13:8c:8d:98:64:
23:17:e9:33:a6:0b:a7:75:43:6e:c3:7a:18:85:ec:
13:0b:8b:be:95:d9:e4:22:a4:df:7d:b0:c0:c3:3e:
d9:94:66:3a:1c:11:90:6a:d9:5d:f9:35:f5:9a:b2:
93:5e:f5:dd:24:69:64:18:08:9f:55:16:89:e1:20:
57:c8:7d:a0:87:11:d4:3d:08:cb:3d:47:d3:45:05:
45:00:40:0e:09:dc:1e:71:7d:c1:66:92:6c:ac:00:
41:7b:ef:da:53:0c:71:2e:34:71:6d:1b:fb:d3:0b:
7c:db:58:f9:6e:d8:46:20:bb:44:dc:d7:a8:b2:51:
39:6a:43:fe:d2:0f:b3:b2:22:00:2d:28:ae:33:8f:
3e:f8:5c:0f:68:56:48:15:43:71:46:b2:58:cc:d5:
97:e8:fc:a5:a5:ee:d4:79:60:d1:b2:82:d6:a1:36:
fc:6c:53:7f:ac:82:1c:de:9c:c4:c3:cd:89:94:9e:
1f:8c:15:98:22:14:ee:02:1d:bb:71:27:7a:03:30:
d1:b0:0f:09:93:d6:59:3e:05:ec:d1:88:87:fb:12:
e2:be:f3:8f:4c:14:b9:95:e6:37:c3:e3:36:36:e3:
77:99:04:4e:96:ac:97:90:79:81:7b:2b:92:e5:62:
64:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8B:07:57:8A:65:68:D1:6A:39:B7:2A:E2:D7:F5:6E:01:5D:B2:59
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:16:32:87:5d:53:8f:61:0f:12:e9:41:98:ae:86:77:19:6e:
66:f6:80:26:9d:5a:15:dd:03:cc:9a:d1:16:b2:9c:3e:d2:66:
c0:58:2d:ea:f4:96:29:ff:d4:10:f1:43:b1:ce:62:7a:f1:c6:
e7:0d:45:42:b5:b5:39:72:d7:5e:29:2c:c7:6a:30:65:b1:ee:
a7:86:34:e9:25:96:a1:7e:f2:e2:c8:5c:6b:55:10:83:07:b7:
ea:93:77:34:8e:85:52:c3:fc:aa:e2:10:5b:11:87:76:4c:72:
70:14:d3:5d:6e:d4:70:69:8b:03:15:63:76:c3:43:22:30:18:
bd:b5:94:2b:06:5f:ef:2f:9d:11:7b:49:e3:b0:6d:09:00:cb:
83:c5:e0:42:cb:6c:5f:16:0c:a5:75:1a:48:53:52:96:05:72:
a4:35:8b:7e:da:26:6c:2a:35:a2:bb:40:fa:8c:a4:ba:f0:6c:
32:46:36:c7:e7:60:2d:7f:43:67:a2:de:a9:ac:93:cf:a2:4b:
ce:49:1e:e2:16:d6:55:59:7f:80:92:17:9f:87:94:0c:b2:17:
a2:e9:13:c6:d0:28:4e:c2:63:72:04:7f:9a:9c:84:3f:48:42:
62:0d:39:1d:66:4c:51:5b:cc:8d:38:6b:98:ee:c0:a5:8b:55:
d1:bc:4d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:44:34 2025 by rpki-client