Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
File: SA4-gK7rhMMmEvT60RbiaQpUbHo.mft (raw, json)
Hash identifier: FoVUIAxspXW+NNuNp8WugM+2MHWVYS+FS4xWH/4Mizc=
Subject key identifier: 46:DA:79:DF:A0:C4:FD:7A:96:E5:C1:FE:67:65:F0:A6:F8:ED:CA:82
Authority key identifier: 48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
Certificate issuer: /CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Certificate serial: 01993424B6AA61E15D68D7F1C6C8E74D3CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
Manifest number: 0633
Signing time: Wed 10 Sep 2025 15:00:45 +0000
Manifest this update: Wed 10 Sep 2025 15:00:45 +0000
Manifest next update: Thu 11 Sep 2025 15:00:45 +0000
Files and hashes: 1: SA4-gK7rhMMmEvT60RbiaQpUbHo.crl (hash: wkglebbJN8IiC4LWCIe1e8jUT2EEuoE+IHjSTmVIsNQ=)
2: UgsM9IySNlxMAMu3nxLBQeRmBwM.roa (hash: iWc/Vehzon/VP/j65KvlMpaDrurTE8lXeWv7jdRc8u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:b6:aa:61:e1:5d:68:d7:f1:c6:c8:e7:4d:3c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Validity
Not Before: Sep 10 15:00:45 2025 GMT
Not After : Sep 11 15:00:45 2025 GMT
Subject: CN=46da79dfa0c4fd7a96e5c1fe6765f0a6f8edca82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:f6:f8:76:17:38:a5:0c:ba:22:30:00:85:
ac:76:8c:b4:55:b7:35:e9:d2:d1:df:96:5a:fe:7d:
d6:c0:3c:47:f0:22:ca:e9:1d:b1:75:0f:1d:3f:51:
b9:0a:c2:de:d1:ae:83:8a:74:cf:60:cb:a9:7a:24:
b7:e7:1b:73:3a:b3:93:11:72:79:18:6f:e5:58:02:
24:09:49:1e:2f:ea:2a:e8:ed:db:da:a2:b9:47:74:
c1:86:44:75:b9:9d:cc:ab:f6:ae:49:a9:22:a6:f4:
d5:c6:05:e9:ba:3c:4c:1c:b0:57:6d:2f:e7:c6:7a:
bb:1a:64:65:96:6a:74:df:72:20:64:d1:46:81:be:
a0:98:05:57:a3:c4:19:db:9c:d0:9d:36:be:4d:6c:
5f:87:30:92:b2:7c:5a:c5:4a:1c:ad:51:e6:70:32:
52:53:e7:0b:76:9a:f8:df:e8:cc:41:29:c9:65:23:
cb:41:44:71:25:73:aa:2b:39:04:ad:76:fb:5e:ca:
b6:84:78:0f:8c:26:0b:39:c3:5b:88:6d:ad:04:84:
ed:ce:50:8f:37:66:86:ee:ce:fd:d9:0a:99:80:82:
a8:c6:61:71:88:56:bd:a1:8c:77:0c:44:ba:f7:9e:
7f:bd:c9:5e:7b:55:ca:47:c2:d6:25:46:b9:51:44:
1a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DA:79:DF:A0:C4:FD:7A:96:E5:C1:FE:67:65:F0:A6:F8:ED:CA:82
X509v3 Authority Key Identifier:
keyid:48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b3:5f:9f:00:c6:ab:d3:9e:06:b5:31:ae:cb:15:1d:37:c5:
f2:73:f0:ad:d5:83:07:ea:cf:33:34:7c:a6:c3:b5:ff:cf:92:
b0:e9:2a:b4:50:88:04:cf:ca:94:12:0a:b8:05:63:c4:16:e7:
a0:62:ab:60:a6:8b:a5:a2:00:82:d8:85:1a:21:a1:47:b5:82:
2d:10:ab:5f:d7:05:6d:5e:72:dc:fe:05:ff:9c:d3:e8:bc:90:
36:d1:6b:6b:2f:bf:e4:d1:1c:2f:20:53:6a:12:30:83:8d:16:
d0:8a:e8:02:78:92:ba:93:97:63:3f:d5:d3:45:f7:ed:69:0f:
81:df:55:04:3f:32:cd:22:1e:ed:4c:59:3e:6c:7e:ba:90:10:
b0:4a:9a:46:2b:2f:24:b9:7a:54:9f:ab:a9:76:a5:f1:7c:e4:
81:f2:ca:35:b0:68:1a:96:70:4c:49:95:6e:f5:22:f3:3e:d1:
2c:8d:69:88:b6:1a:65:69:60:86:90:9c:eb:df:e0:27:c5:40:
30:62:81:22:12:61:16:4e:bb:9e:a6:f4:53:38:91:74:e7:af:
44:ee:85:8a:6c:6b:56:8c:81:13:31:9e:e6:71:be:08:75:ef:
10:b0:04:f4:31:9e:6f:f7:62:13:d4:b7:5a:1c:e4:16:0e:5a:
1d:e2:56:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 16:09:38 2025 by rpki-client