Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier: 8I0UDjjfUtCrzOXTE9SyBateRETcyt8HrEkTdQNJSCE=
Subject key identifier: 08:14:CC:41:E8:A1:B6:63:E5:3B:1C:BB:11:F1:60:EC:BF:85:E4:45
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 019849D2E9F0C565A54C4C3F9D7A0861E03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number: 05E0
Signing time: Sun 27 Jul 2025 03:00:15 +0000
Manifest this update: Sun 27 Jul 2025 03:00:15 +0000
Manifest next update: Mon 28 Jul 2025 03:00:15 +0000
Files and hashes: 1: 3klZTNM9YhJqZUNp3PJkFRczFX8.roa (hash: OyXgZ5l4rO5Wt2TcoTvX9gJZ0hgPAdu2wTU0n6/gZoU=)
2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: 8r144Xczn56B0ALLjyXWIF977Z8EySOIVa8NjC7Df5E=)
3: W0AAJRLr6gi2r74kS95DxTYGfTw.roa (hash: MH+HQqYFMBeGJJqR0jYHA1u1MAdvWa+AHHutk6W2MvA=)
4: r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa (hash: xjRrpFDO8g9sZNIp8GQ1hogAG1em04ZcPXgm2d8N7a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:e9:f0:c5:65:a5:4c:4c:3f:9d:7a:08:61:e0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Jul 27 03:00:15 2025 GMT
Not After : Jul 28 03:00:15 2025 GMT
Subject: CN=0814cc41e8a1b663e53b1cbb11f160ecbf85e445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:db:06:a1:8d:0d:59:8b:b9:a7:aa:37:84:50:
b8:3c:61:f6:e0:6b:7c:68:53:f6:a2:f3:6a:43:44:
07:1f:04:d6:07:89:79:84:2e:5f:1a:f2:e6:01:48:
3a:5d:b7:c5:38:7f:07:28:73:dc:b1:f4:98:07:6b:
c9:7e:71:3d:81:de:b6:b0:ba:f0:36:be:97:16:33:
8d:d0:ed:b7:31:b1:2b:c4:df:f0:ca:de:5f:ba:47:
9c:2b:fe:13:47:3d:68:f3:47:56:7b:55:9e:a1:27:
aa:5b:75:1c:bd:ad:7f:0b:fd:c7:42:ce:ee:47:a7:
0f:b0:ed:c6:da:3d:a7:92:fd:46:e8:64:1e:15:53:
e0:9a:df:4e:72:53:9a:ff:46:9a:c3:a1:b2:1e:a4:
a3:b6:53:6f:b4:be:86:71:d2:2b:cd:cd:41:9d:ee:
26:ce:64:21:0b:4b:9d:d1:f6:ff:d9:f3:54:38:79:
c6:68:5a:be:f6:cc:e9:03:c9:67:bc:c4:3a:9f:88:
14:cc:64:dd:dc:c9:29:34:4b:ee:a2:23:f1:f3:1d:
f4:e5:c5:d1:c7:6b:0f:8d:39:86:0f:cd:79:19:52:
ed:ba:4a:db:ac:58:14:79:25:84:cc:17:6d:cc:15:
cd:f1:2c:14:15:2c:57:95:05:2c:09:59:36:be:be:
93:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:14:CC:41:E8:A1:B6:63:E5:3B:1C:BB:11:F1:60:EC:BF:85:E4:45
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e8:96:f4:cd:8f:a7:e7:0d:18:9e:d4:31:af:9d:1e:02:59:
a9:69:83:8d:96:80:6c:05:9a:07:ed:cc:55:93:33:20:96:f0:
96:46:64:57:37:39:18:d0:05:52:04:a9:95:fa:a6:46:ef:20:
52:f6:cf:ee:a5:cf:f8:ea:1b:20:68:9c:6f:46:1b:cd:5a:22:
a1:f6:61:b4:84:76:53:45:c2:45:2e:f4:fc:e0:8c:6b:61:00:
62:ea:12:d6:e5:6c:31:8e:14:25:ba:4f:49:61:17:38:b1:57:
5a:08:98:e6:86:27:e9:d0:4e:4b:d0:64:c5:c6:b2:7f:60:ad:
d6:91:97:7d:29:c0:16:9a:39:8e:ac:05:cd:98:f8:c1:67:1e:
03:64:1b:ae:e2:86:59:70:9c:8a:c6:fa:7f:ed:ae:16:73:68:
91:8f:0a:a4:21:97:c1:4e:52:23:b3:ee:bb:a2:53:55:00:cf:
f9:c8:be:63:97:20:9e:9b:5f:66:56:73:9c:a0:f0:3c:81:26:
5b:b2:a9:0b:0a:8d:e1:b4:f7:7f:a9:d6:7a:5a:be:06:fe:97:
82:1e:d5:12:ce:b3:32:4a:0a:6b:e8:c7:a1:34:e3:f9:ad:52:
e9:48:b2:30:fb:88:02:7f:08:72:9a:6f:fd:d9:9b:bb:1d:02:
1f:b1:cd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:00 2025 by rpki-client