Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
File: SF92J0yAXSWxFaOtuh0uoVTe6tc.mft (raw, json)
Hash identifier: wYf8FG1gdAT6w4ERHxkDnZvqaf97/HlLjhhxHJ5QsG8=
Subject key identifier: EE:64:EC:6F:C2:8E:83:68:45:1F:F9:22:F4:F6:FF:19:D5:D9:73:28
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial: 019847E4E0B403036FD040A83CD191960313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
Manifest number: 0FF3
Signing time: Sat 26 Jul 2025 18:00:38 +0000
Manifest this update: Sat 26 Jul 2025 18:00:38 +0000
Manifest next update: Sun 27 Jul 2025 18:00:38 +0000
Files and hashes: 1: JWbxkXMT1AbpQisEDcJK6XiKzB0.roa (hash: j5i4M4w+YBqEaXEsOz14p6tq/xzrFVxmrAYSCZG3o+M=)
2: S81leN1fuHkrYmn7HxOWRSa_EgA.roa (hash: jKDEc5FdU7Yds63BEna9vHfX9LdcVE/wlCXgfCTj304=)
3: SF92J0yAXSWxFaOtuh0uoVTe6tc.crl (hash: d4KKi5S+aIhBc8IPbqA7GRLJ+TxdTu9Ff8nx3YMG+v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:e0:b4:03:03:6f:d0:40:a8:3c:d1:91:96:03:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
Validity
Not Before: Jul 26 18:00:38 2025 GMT
Not After : Jul 27 18:00:38 2025 GMT
Subject: CN=ee64ec6fc28e8368451ff922f4f6ff19d5d97328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:9d:10:c3:2c:83:e4:44:f7:63:11:18:b4:
64:24:8e:fe:d8:04:a3:bf:7e:04:16:9b:bf:5c:66:
b9:15:9b:65:8a:4c:50:04:56:33:2e:0f:94:14:7c:
bf:02:f1:77:3a:2f:51:34:e6:8c:82:cd:7f:c5:78:
0a:15:4a:90:7a:6d:8a:14:fa:2f:1d:8d:bf:fa:28:
cf:d5:3e:87:64:5f:09:41:5a:62:ba:eb:d4:34:df:
08:33:a5:f5:ed:d7:fe:49:0a:5b:9c:88:08:6e:2b:
64:b6:1c:b2:23:b1:08:f5:27:58:32:1c:58:36:61:
cc:95:ec:0f:b5:5a:03:f6:34:c7:d3:7d:da:4c:1a:
84:fd:ac:23:22:81:4a:eb:c1:ea:74:fb:a1:75:05:
cf:8c:31:00:d0:8e:cb:d2:e0:e7:50:31:33:1a:74:
99:36:68:1c:d5:48:50:ce:43:95:1f:5d:7a:08:68:
a8:b7:c5:f2:fc:7b:0e:3b:44:8d:bf:be:f2:d5:1c:
16:a2:bf:f1:54:4c:c3:25:db:16:61:ae:c8:5a:79:
2f:63:14:70:91:d6:78:db:ed:eb:17:fa:85:eb:50:
0f:25:28:97:41:fa:42:8d:4e:11:b9:28:b2:df:5a:
38:2c:13:3e:2f:0b:d9:de:7d:96:0e:ae:01:a5:29:
d8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:64:EC:6F:C2:8E:83:68:45:1F:F9:22:F4:F6:FF:19:D5:D9:73:28
X509v3 Authority Key Identifier:
keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:58:85:f0:b4:75:09:ef:00:77:fe:e2:19:6c:17:34:2d:b2:
61:83:1e:be:2b:4c:a1:81:41:18:9e:11:0f:ac:b3:5c:94:3b:
63:52:75:00:94:f0:9d:5c:25:fd:e9:9e:e5:9b:b5:e9:ff:5c:
5a:3b:e8:9c:81:9f:b7:a3:bc:c9:86:d1:87:26:b8:f0:ca:c7:
cf:bc:86:a0:61:73:a8:5f:55:c3:0c:3f:a3:e3:39:00:b4:73:
62:81:e2:1f:10:b7:a3:c6:e0:4c:4b:e6:a8:22:83:fc:f5:46:
39:33:b5:cc:e5:3b:59:14:90:53:d6:7e:66:f9:33:dc:57:2e:
28:a2:85:06:25:0c:96:77:0c:d1:dc:57:a6:43:77:b6:06:c2:
f5:fa:aa:d6:cd:58:0b:e1:bd:0d:bd:0f:fe:0d:52:ea:cc:8b:
e0:ee:65:1a:dc:82:36:93:5d:13:11:a4:3b:89:46:1e:08:3b:
ac:06:1f:e5:c2:8c:f1:74:66:7a:9d:c5:0d:05:24:1a:ee:62:
52:90:81:e0:d0:0e:1b:02:61:52:84:25:7d:88:82:e9:5c:4b:
f8:a1:b6:d8:e7:33:85:ce:13:73:75:e5:c8:a3:1b:cc:82:35:
a6:08:94:b3:92:fe:7d:6c:79:af:c3:50:b0:b1:9e:d0:4d:7d:
12:25:6b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:26:23 2025 by rpki-client