Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
File: SF92J0yAXSWxFaOtuh0uoVTe6tc.mft (raw, json)
Hash identifier: mZDzh6jLpDMQzpIjnxBu52SzjyZwTaYSA7coN0+aKGg=
Subject key identifier: B8:2E:07:CA:4E:9E:C5:C7:75:8B:6C:B4:F7:6A:E4:FD:56:8F:FB:72
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial: 019946D02CA5A3993D575F441E673F8688C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
Manifest number: 1077
Signing time: Sun 14 Sep 2025 06:01:11 +0000
Manifest this update: Sun 14 Sep 2025 06:01:11 +0000
Manifest next update: Mon 15 Sep 2025 06:01:11 +0000
Files and hashes: 1: JWbxkXMT1AbpQisEDcJK6XiKzB0.roa (hash: j5i4M4w+YBqEaXEsOz14p6tq/xzrFVxmrAYSCZG3o+M=)
2: S81leN1fuHkrYmn7HxOWRSa_EgA.roa (hash: jKDEc5FdU7Yds63BEna9vHfX9LdcVE/wlCXgfCTj304=)
3: SF92J0yAXSWxFaOtuh0uoVTe6tc.crl (hash: ZLqRFIpqtIHq2m6GzDzbf0OYHw8NvCU4IzguA9QD024=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:46:d0:2c:a5:a3:99:3d:57:5f:44:1e:67:3f:86:88:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
Validity
Not Before: Sep 14 06:01:11 2025 GMT
Not After : Sep 15 06:01:11 2025 GMT
Subject: CN=b82e07ca4e9ec5c7758b6cb4f76ae4fd568ffb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:5f:37:26:2d:cc:4f:7d:00:8d:f4:9c:9a:
93:ba:13:5d:5e:67:40:74:5a:dd:d9:a5:89:2a:85:
31:98:d2:9d:d1:05:95:02:96:b4:f3:10:f7:4e:0d:
63:dc:a1:39:86:b6:cc:41:3d:52:6e:2e:e8:2c:e3:
18:64:e0:d6:68:c6:ff:f6:6a:80:fb:e3:fb:34:e9:
f5:0e:5b:f3:7c:4d:15:cf:8f:96:08:d5:45:ef:55:
1d:9d:0d:f1:96:fd:58:49:85:77:23:8f:92:d2:58:
96:ce:43:d8:87:94:1c:5d:53:ab:50:94:85:05:d5:
8e:b1:6b:96:f3:50:b5:2d:20:cb:eb:30:20:29:ce:
c4:a2:66:c4:4f:0b:c4:cc:68:b3:b1:d8:9b:c5:4d:
c7:b0:ef:1d:ab:82:16:a6:07:fe:c2:64:d8:88:fb:
d1:60:3a:96:28:80:71:fe:8c:e2:03:a5:cd:6c:f2:
9d:3b:3e:97:c4:c2:17:7a:20:e1:da:30:f2:de:be:
f9:9b:2f:6b:5f:e6:bd:c6:47:81:b4:ef:26:12:74:
79:4f:69:4f:02:57:b4:24:19:da:b0:43:2f:e6:58:
75:f9:df:b7:34:13:f8:7b:4a:55:16:b1:ea:7d:5c:
85:5e:e5:2a:67:19:ca:63:72:de:16:13:11:c9:ee:
c0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2E:07:CA:4E:9E:C5:C7:75:8B:6C:B4:F7:6A:E4:FD:56:8F:FB:72
X509v3 Authority Key Identifier:
keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6d:6a:2f:6d:1f:46:6e:c4:25:fc:55:0e:6a:b3:51:c0:c0:
d1:6e:22:a1:7e:c0:1c:1c:18:90:de:6d:af:32:ec:a3:ac:5e:
9a:cd:c5:eb:80:40:ac:77:64:bd:44:56:a5:f4:55:42:67:10:
d6:ce:d4:71:a0:e8:71:31:dd:01:f7:f7:51:50:a9:65:80:af:
6d:7e:02:bf:8b:f8:9a:1a:8e:97:80:78:00:2e:fb:02:c3:1b:
82:65:e2:ba:95:1b:1b:5f:40:e6:ae:e4:45:cf:d0:7e:8d:4d:
36:d7:3b:3d:ef:e7:3a:55:64:fb:d8:19:a7:61:72:f3:61:61:
f4:ef:bc:cf:16:b5:1b:62:b1:7a:2e:38:b4:d8:dd:63:82:fd:
b7:03:68:02:c4:40:61:97:77:cb:53:8d:07:dd:6b:29:eb:84:
df:71:19:4c:a9:2f:4c:25:08:74:87:0b:e6:2d:03:73:8d:18:
83:34:5a:13:30:d7:54:20:a9:a6:d6:68:7f:0e:c5:d8:5a:76:
8d:69:88:6a:20:8a:71:55:b6:e9:ce:d7:c4:95:7f:ca:f7:d0:
a7:3e:b4:4d:85:c7:de:12:ff:bc:bb:f0:c2:d2:77:a7:fd:a9:
0f:dd:e1:d1:a7:02:4a:8a:aa:8f:74:10:e1:ba:3d:04:fe:62:
95:d5:5c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 13:46:46 2025 by rpki-client