Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
File: SA4-gK7rhMMmEvT60RbiaQpUbHo.mft (raw, json)
Hash identifier: CNxSddnHjtxn2ph006JrwWvLpKTArpT7kP4HeXKk5cM=
Subject key identifier: 8C:92:A5:02:B1:F2:30:C5:8A:FE:0D:B5:6A:F8:85:98:72:62:40:CA
Authority key identifier: 48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
Certificate issuer: /CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Certificate serial: 019A330F2526D965A58541092A727C505A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
Manifest number: 06B7
Signing time: Thu 30 Oct 2025 03:00:21 +0000
Manifest this update: Thu 30 Oct 2025 03:00:21 +0000
Manifest next update: Fri 31 Oct 2025 03:00:21 +0000
Files and hashes: 1: SA4-gK7rhMMmEvT60RbiaQpUbHo.crl (hash: QgKZKeR/SCs/scmaJsbxsxe0mpk6fqs0TiRQWE6mfTs=)
2: UgsM9IySNlxMAMu3nxLBQeRmBwM.roa (hash: iWc/Vehzon/VP/j65KvlMpaDrurTE8lXeWv7jdRc8u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:0f:25:26:d9:65:a5:85:41:09:2a:72:7c:50:5a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Validity
Not Before: Oct 30 03:00:21 2025 GMT
Not After : Oct 31 03:00:21 2025 GMT
Subject: CN=8c92a502b1f230c58afe0db56af88598726240ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fc:60:a5:93:06:12:47:f4:56:d7:7f:22:d8:
ff:3b:7f:78:41:7b:5e:6d:b6:2e:af:4d:60:e0:06:
92:47:ea:30:12:27:9f:da:63:21:f0:26:86:ea:7c:
23:88:6e:35:93:18:04:67:47:3a:f3:19:97:f4:3d:
a0:de:13:b7:22:2c:6a:32:9c:5b:b3:42:04:a8:b9:
a6:6a:98:38:b4:77:f4:74:90:38:4a:ff:b1:e2:25:
c8:c3:08:04:73:36:b2:44:49:0b:a0:8e:51:40:67:
05:65:e9:46:a5:df:a2:cc:22:34:b2:fc:83:49:a9:
2c:fb:7a:64:ec:39:b3:1c:09:ff:67:81:2f:2a:ac:
f0:83:ab:b5:a5:d7:ea:68:e7:1c:86:06:8a:80:b2:
4d:f9:d0:be:bf:eb:0e:66:15:de:b6:05:54:47:bc:
fc:3c:db:37:4f:82:2c:15:13:48:cc:11:dd:9d:15:
18:b7:9f:04:83:bf:b2:70:c8:64:8c:9b:ad:f4:d6:
ac:43:ae:4e:13:c6:ae:6a:77:b9:37:23:0a:4c:aa:
00:14:d7:65:c6:04:83:2e:5e:ca:45:8e:3b:92:94:
f8:91:ad:61:2b:d1:20:e2:ec:73:a2:74:85:cd:bd:
c1:b6:1d:83:1f:c1:f5:e5:63:69:66:1b:5d:de:2f:
30:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:92:A5:02:B1:F2:30:C5:8A:FE:0D:B5:6A:F8:85:98:72:62:40:CA
X509v3 Authority Key Identifier:
keyid:48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:94:d1:d2:39:a2:0e:81:43:7b:24:9b:61:71:b7:cb:07:9c:
b6:88:e2:2d:82:5c:96:4d:85:f2:b8:61:7c:fc:4e:ed:91:51:
51:24:71:ad:ab:b9:65:ad:c6:a9:ab:df:bc:6a:71:45:74:de:
f2:70:18:1c:f4:42:e1:03:a7:86:8d:39:65:80:3f:66:15:bc:
db:bc:19:1c:a0:00:72:28:30:77:ff:18:59:1c:40:fb:f8:c2:
b6:57:66:90:1e:23:26:d4:37:a9:e1:fe:3f:2d:5d:de:53:2f:
0d:60:a5:fb:43:bd:4c:26:d2:9f:60:5e:04:3c:69:7a:ab:6e:
c8:2c:d9:2f:fb:14:da:86:6c:33:4f:96:ea:19:70:fd:ef:17:
26:a7:02:23:2b:99:ab:04:57:ff:08:a1:9f:4f:85:40:f1:06:
95:5e:bf:87:ff:1c:ab:6d:1c:0a:e2:bf:23:98:cf:80:1e:f8:
b7:0c:d9:f8:7b:e8:1f:3c:ca:90:f6:eb:46:24:a9:f5:0d:03:
59:23:a9:bb:2d:46:99:6c:85:71:04:1d:c8:19:e0:fb:7d:d4:
b6:34:ab:f4:b8:14:2b:7c:ee:82:2b:2e:44:a8:41:46:9f:4f:
22:06:a0:06:7f:2e:75:0b:03:d4:0f:87:10:b0:5b:59:e5:c5:
96:87:52:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 05:52:33 2025 by rpki-client