Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
File: SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft (raw, json)
Hash identifier: hXm5AMUfIr21MAuHEC91M79118xYbYQA1AEKU3gTTd0=
Subject key identifier: E7:0C:EB:4F:23:5E:9F:36:46:E0:15:9C:16:87:84:B3:18:96:40:5F
Authority key identifier: 49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F
Certificate issuer: /CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
Certificate serial: 0199221F58CE025DE1F95402C0B1E90B38A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
Manifest number: 0C4D
Signing time: Sun 07 Sep 2025 03:01:43 +0000
Manifest this update: Sun 07 Sep 2025 03:01:43 +0000
Manifest next update: Mon 08 Sep 2025 03:01:43 +0000
Files and hashes: 1: SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl (hash: jAfzv6rJriFHyxxAnT7QRR1olPITNhjJ9fN3lEj2kA4=)
2: t2TSolMpe1MqepO7ZiAhihdiw7E.roa (hash: 6XLtwGEoBLRfiwM7FwJJWhjDjtkkFPk9hmuRlaKNmqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:58:ce:02:5d:e1:f9:54:02:c0:b1:e9:0b:38:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
Validity
Not Before: Sep 7 03:01:43 2025 GMT
Not After : Sep 8 03:01:43 2025 GMT
Subject: CN=e70ceb4f235e9f3646e0159c168784b31896405f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ac:50:51:1e:54:fe:60:8f:b6:df:85:43:84:
e6:a1:41:a2:cd:ca:1d:a8:0f:68:26:83:79:af:2d:
93:7c:18:2e:04:48:a3:61:c5:fb:9f:7a:ce:15:6a:
d8:23:dc:69:3e:cd:da:3d:88:b9:85:30:80:e4:13:
f0:b8:78:f9:22:b4:a7:03:95:be:34:ae:8e:bf:ee:
52:da:c8:64:fe:97:bc:17:73:2c:c4:b7:8c:54:92:
d6:15:f3:bc:1d:3f:43:8f:35:20:f7:a1:67:9e:e1:
3f:f4:ad:dc:d0:b5:1c:29:17:bf:2a:61:d3:7d:1f:
1b:7e:10:bb:0d:fe:9d:b2:18:99:b2:b3:78:3b:42:
ea:3f:00:f0:63:fb:7a:7a:1f:73:46:09:cf:59:51:
8e:dd:de:63:cc:5e:1c:57:27:77:30:bc:ee:0b:dd:
28:42:60:fd:ff:33:a2:de:2b:e8:b5:fb:f2:7c:f8:
e0:11:bf:95:de:d4:e5:81:65:7b:aa:06:ca:99:4b:
c4:d8:76:4f:d6:b1:3d:09:14:25:3f:fc:88:5c:11:
fb:46:43:1e:fa:9a:cf:75:fb:94:da:d0:d7:7c:c4:
cd:cf:8b:3a:cf:a5:42:cc:aa:f6:31:58:89:69:93:
a0:0d:6a:aa:dc:0e:46:a3:0e:cd:ed:5e:a8:29:fe:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0C:EB:4F:23:5E:9F:36:46:E0:15:9C:16:87:84:B3:18:96:40:5F
X509v3 Authority Key Identifier:
keyid:49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:42:ec:13:ed:cd:61:c0:19:82:0d:e2:40:81:97:e6:04:bf:
da:08:ec:07:69:b7:8c:01:74:00:8d:f5:a3:6e:5b:ca:63:17:
f6:14:18:c5:3d:f8:1c:0e:0e:e0:9c:66:b1:9b:53:04:d1:43:
72:d3:02:ef:05:ff:05:0e:dc:0e:f5:2f:10:c8:ed:a5:a1:43:
d8:38:e6:92:68:d2:bb:aa:bd:5d:4b:c7:65:21:c4:e8:93:b6:
66:41:43:80:52:e8:f7:08:78:35:e5:eb:a8:6b:47:ea:fa:bf:
82:d8:61:a8:7f:2f:65:88:53:20:be:de:d0:63:7a:a4:e4:39:
40:39:b7:e7:e6:81:37:34:d9:18:33:31:51:4c:5d:29:b4:85:
c3:7f:fe:e1:c1:79:d9:38:79:0d:05:6a:6b:78:b5:11:c9:e3:
0f:f6:8f:99:7b:ec:c0:4c:ca:a9:f9:0e:91:57:0d:05:93:c3:
64:d1:fd:46:8b:98:51:64:52:0c:51:a5:aa:7f:ca:d0:ce:d9:
e4:a4:7f:01:49:94:b8:c6:0d:43:20:6d:e0:df:2e:e3:a1:4e:
68:13:69:81:9c:ac:7c:b8:41:82:72:2e:e8:71:54:40:db:59:
c4:4d:3a:0b:7a:d5:69:9b:30:b8:4c:e3:fc:f2:63:9d:b0:8f:
79:41:d8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:22 2025 by rpki-client