Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
File: sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json)
Hash identifier: Nati8o4lbDPNSYcfK+u6OQ3SM61rEaoeVOuAuYeYdmE=
Subject key identifier: 4F:2A:6C:DC:5A:C3:ED:73:B3:51:E4:29:0D:68:AA:0D:35:F3:6B:EA
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Certificate issuer: /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial: 01993047B5B77DC724F67A2E02147741C768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
Manifest number: 1679
Signing time: Tue 09 Sep 2025 21:00:29 +0000
Manifest this update: Tue 09 Sep 2025 21:00:29 +0000
Manifest next update: Wed 10 Sep 2025 21:00:29 +0000
Files and hashes: 1: 2T5PZV0ykQrCqtWQsuyltR-_EP0.roa (hash: adHBBG4DTLEXzzbMMTMmfqzyorTjLSxY7EK7i8wkAJ4=)
2: fOGaYfmCbgoyUIfYq0nj6dp3ggs.roa (hash: k+pBFiGRIlpDeHFyJ2TjGWDmfTvqV2e7W4zXwUECFg0=)
3: hu6cElB5t5xLfzkwp-1E2pD6XpI.roa (hash: kdn6w5+MgRdzoZY9M3/FnbfXPKK9TjtWqwutVLtON4g=)
4: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: NOiLTV7EBbgQfeZ6jCzc4qg3aVzCR343INzD9UUfdpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:47:b5:b7:7d:c7:24:f6:7a:2e:02:14:77:41:c7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Validity
Not Before: Sep 9 21:00:29 2025 GMT
Not After : Sep 10 21:00:29 2025 GMT
Subject: CN=4f2a6cdc5ac3ed73b351e4290d68aa0d35f36bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:bf:b9:33:6d:ae:bc:79:f1:7a:39:76:54:
42:d3:99:2f:3b:e7:ab:05:5a:5a:0c:e8:17:42:91:
69:35:9a:d0:2d:77:cf:fd:f2:3e:f1:cc:b7:14:99:
cc:56:c4:b6:90:d5:de:c6:ed:0f:bc:9d:b9:4f:3e:
d6:5f:25:60:79:4f:8d:df:d0:f6:09:66:7f:ec:c5:
b7:3c:b0:c7:86:89:74:7a:34:0b:84:3e:9a:92:7a:
15:51:3f:42:64:6a:91:28:5b:71:82:a2:f0:4e:a2:
91:a3:5a:a4:ea:f8:38:b8:fe:cd:c4:5b:01:5f:56:
bd:f7:00:53:9c:4c:0c:7f:2a:60:0a:48:b2:c1:14:
4a:04:54:f1:b9:dd:2e:7b:3b:fc:af:9f:85:7b:80:
ae:ac:9d:db:78:84:42:a1:0f:7b:b2:36:0d:07:a7:
7b:a1:4d:16:50:ab:c4:a4:83:57:95:64:51:d0:3f:
0d:cd:f0:ac:13:b8:36:54:d5:7b:b6:ed:f1:85:30:
c0:96:6c:9d:fb:77:b2:cc:ba:d9:a3:3f:18:c0:ac:
71:d0:ba:be:ae:ec:d9:35:87:f0:20:27:61:06:7f:
40:f4:cf:74:26:cc:ee:66:9c:5f:94:c0:cd:2f:26:
39:a5:2f:d9:61:b5:4e:02:a1:52:23:67:ba:ed:a1:
ec:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2A:6C:DC:5A:C3:ED:73:B3:51:E4:29:0D:68:AA:0D:35:F3:6B:EA
X509v3 Authority Key Identifier:
keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:68:d0:e3:a6:31:8a:31:61:44:0a:66:86:ab:ee:3e:6d:57:
89:0b:81:18:d9:23:75:bb:0c:bc:f3:14:a6:b6:b7:c9:50:a8:
ad:52:d7:44:8d:23:a0:44:d7:61:2e:e1:2d:03:ed:6d:07:db:
e3:cb:a0:cf:e4:da:f4:f7:9b:27:8a:ac:76:84:e3:ee:83:2c:
1b:4a:c6:1d:71:0d:3f:13:da:76:1f:fd:d4:e2:6f:f3:ec:89:
1f:4c:5d:ac:ef:5d:a6:a7:9a:3f:52:4c:78:7f:d3:5e:b6:1c:
74:5e:f2:a1:b5:ac:6d:a6:3f:00:2f:dd:4b:79:cb:45:9a:62:
88:fa:0e:31:db:a9:b2:bf:99:22:e0:32:a7:35:e6:bb:07:65:
8f:d3:4b:bb:5c:34:4c:7c:a3:2b:f1:58:16:7f:a6:3e:2a:4c:
7c:b9:5d:06:80:79:77:3e:47:f5:f0:a4:d8:6a:2b:a9:a7:48:
85:23:4c:1d:94:74:06:a1:05:c8:39:d0:8f:6c:31:fc:fa:2b:
f7:33:d7:6e:00:63:e5:65:b0:e4:4d:fc:10:df:2f:79:7e:58:
bc:25:2f:4f:2c:dc:2f:93:8e:ff:13:41:28:40:90:d6:83:0b:
bf:ea:7d:14:7d:3e:93:33:88:6e:0c:a6:26:4d:59:fb:a5:b5:
07:78:58:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:53:06 2025 by rpki-client