Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
File: sRaNBioMLmFmqCYsTXKY123t0E8.mft (raw, json)
Hash identifier: C7jalDOocFqM2Je2YaSOUqT8Yc+4QHK6f4YEYEzzXDs=
Subject key identifier: E4:91:06:F5:E1:5A:3D:B2:15:A7:D4:A1:6A:A6:AF:1F:9E:F7:86:5F
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Certificate issuer: /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial: 01992CD8EB0668D228C3F0D1CFF0D67E8F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
Manifest number: 1678
Signing time: Tue 09 Sep 2025 05:00:37 +0000
Manifest this update: Tue 09 Sep 2025 05:00:37 +0000
Manifest next update: Wed 10 Sep 2025 05:00:37 +0000
Files and hashes: 1: jYCp1px7d3_I6mefNTn8vuzWBOg.roa (hash: Pv+cwNn5v2uyPM9DJOrn9OfaFC2aCdBmSBHPyx9HtlM=)
2: rAkcIeR16JbVpYeePcru3Xd_9Fo.roa (hash: 5QKOAoJ3RyBbcQy0L3k19T9nHrTzNr6BOoQXHbBl8Lc=)
3: s25eqAa9Ba2subgM6OQ8ydOvSIs.roa (hash: 2d5Cwu5/K3ZqTMpiVXzf7ig4e2nE3AarjZ+2JLhcJaM=)
4: sRaNBioMLmFmqCYsTXKY123t0E8.crl (hash: OMEyhnoTruAkavr/qixZgLuWqtAq2iT9NsyW95koiOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d8:eb:06:68:d2:28:c3:f0:d1:cf:f0:d6:7e:8f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Validity
Not Before: Sep 9 05:00:37 2025 GMT
Not After : Sep 10 05:00:37 2025 GMT
Subject: CN=e49106f5e15a3db215a7d4a16aa6af1f9ef7865f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:7a:d5:fe:21:74:1c:75:0d:54:77:7a:3f:
93:b3:30:2d:ec:70:df:33:25:57:54:51:95:37:a3:
05:72:1e:74:d6:4a:02:7d:7b:af:c9:a2:0f:51:7a:
79:c7:bd:2e:d4:8f:c2:a3:a8:6f:b1:f3:60:cf:c1:
b3:cb:f0:4e:72:a7:25:e9:98:68:1b:3b:43:8e:61:
fa:c5:ca:70:ca:33:e5:98:ea:1c:24:ed:c2:36:0a:
a9:51:ce:5f:de:b2:ee:62:fe:8d:47:c0:d7:7c:b3:
13:16:27:a4:0b:f9:ed:5c:9e:12:d9:41:64:32:58:
ff:49:fc:3d:1d:b7:11:87:2d:30:2a:63:34:b2:4f:
2c:01:11:aa:13:21:91:f0:d5:18:a3:7d:8e:60:2a:
4d:9c:81:6e:e8:32:2b:0e:95:20:8a:3c:b1:65:0e:
cc:e8:90:67:85:a8:ac:3d:c3:c4:d1:b5:2d:b6:a3:
df:4c:6a:0b:8a:c1:f5:80:5b:b1:54:0b:2e:29:c1:
12:02:a7:32:aa:f9:a0:eb:9f:fe:17:93:c3:d2:a0:
e9:c7:c3:5c:56:26:09:58:44:73:61:fd:dd:2b:0f:
83:a8:2a:d8:31:b4:64:51:80:d3:2a:04:a7:0c:f7:
a4:6b:85:38:0e:5f:13:f3:fd:26:4b:33:10:4f:20:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:91:06:F5:E1:5A:3D:B2:15:A7:D4:A1:6A:A6:AF:1F:9E:F7:86:5F
X509v3 Authority Key Identifier:
keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:cf:55:a6:c3:64:b9:97:e8:06:fe:40:61:8c:cb:9a:da:42:
87:90:8d:95:c0:a9:20:f1:99:83:45:23:13:74:a2:74:1a:a4:
d7:6d:ad:f6:89:5b:13:4c:f9:7b:23:1f:c4:40:e0:63:04:38:
4b:5f:96:8c:b6:ef:ff:9e:90:cc:54:1a:b8:c4:88:d5:1a:06:
d7:88:69:54:09:da:a6:9b:af:89:7b:3e:56:a7:ce:7a:b2:eb:
db:4f:c3:88:de:14:88:10:79:1b:51:55:af:d9:76:71:c9:64:
d0:c8:7e:5b:2d:c7:0f:22:44:96:5b:49:35:9b:83:9a:48:de:
06:00:21:fb:40:be:66:a2:86:0b:dd:ac:d1:87:f3:9a:83:07:
4b:81:5d:ce:7f:fa:27:c9:98:65:47:9c:e5:23:15:c4:d6:51:
8b:54:f7:65:c8:e2:d6:f5:ff:29:54:74:65:4a:45:8f:03:6f:
23:76:8a:8b:00:14:24:ce:ed:68:e8:f3:10:2a:ed:25:d4:71:
1e:87:c1:55:4c:ec:18:78:50:c0:5f:23:bc:de:bd:77:62:62:
cd:01:a8:7c:df:70:f9:8d:1c:e1:67:3f:11:66:02:f0:cd:f7:
6b:83:84:a0:87:ad:c7:ca:d9:4b:de:bc:9e:5f:cd:38:0e:49:
09:a8:2d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:54:53 2025 by rpki-client