Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier: YYcorAZArK5v0HOtvBjWIR+xTINvpunOoa7B36BvWxo=
Subject key identifier: 83:09:3D:64:A0:C2:1F:42:98:E9:8D:C3:47:D1:0E:1E:73:C3:85:9C
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 019943CE6324F25EBA1B03DC53380D1AFD87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number: 0B8A
Signing time: Sat 13 Sep 2025 16:00:23 +0000
Manifest this update: Sat 13 Sep 2025 16:00:23 +0000
Manifest next update: Sun 14 Sep 2025 16:00:23 +0000
Files and hashes: 1: 7y3mGX9ZUocL1OILQHSxmA8VkvM.roa (hash: 7a9Oiy3txQlGgm+QjKoKXHZkPBhpeO84dBEOXh2SIfc=)
2: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: rH2/BoHrEjz93Ioc8ga5l6KAmI0z+W1YrEnrjhSsta0=)
3: oU4Cohsb9kWDicLsugicyZN6s7k.roa (hash: YXEAgbcCjB/PmDtI8uql79S0hq5pcPIEdu0GZCtli20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:43:ce:63:24:f2:5e:ba:1b:03:dc:53:38:0d:1a:fd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: Sep 13 16:00:23 2025 GMT
Not After : Sep 14 16:00:23 2025 GMT
Subject: CN=83093d64a0c21f4298e98dc347d10e1e73c3859c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:42:c1:43:02:0c:7e:64:d7:d5:95:2f:7f:
4a:22:11:f6:77:88:2b:5b:b0:9f:46:cd:5c:ff:3d:
5d:a4:73:17:22:b9:90:4d:e4:41:28:04:20:10:6a:
a9:39:44:47:27:19:7c:b1:bc:cb:d0:72:77:7d:88:
a5:22:94:b2:84:b0:46:4c:02:4f:2a:ca:ca:21:34:
ed:f4:91:a8:39:16:f9:bf:21:55:13:d9:59:4b:48:
d2:63:90:21:5b:63:77:b0:f9:c9:68:e5:08:9b:87:
9e:05:9e:ff:e9:5e:10:cb:da:14:72:a2:58:54:2a:
ff:17:fb:3e:53:b0:1d:ac:55:72:e8:26:34:b9:b3:
4a:c7:05:e7:d9:0d:c0:b6:02:30:b8:27:16:3d:85:
13:81:02:b6:94:1f:a3:e6:84:72:d3:a5:50:27:10:
79:24:99:1c:33:d1:41:7d:fe:a4:7e:4b:83:c3:2d:
77:aa:02:4e:21:88:6f:b9:1f:98:5d:42:b5:0e:8d:
66:30:40:4b:92:79:df:8f:5b:cf:e3:dd:35:79:96:
e1:24:c3:69:98:1a:a2:b2:9e:1e:a3:16:86:6f:87:
2d:07:d0:d1:fc:eb:93:58:6a:1e:92:01:20:6c:02:
66:42:0c:a4:f5:8a:1c:96:7a:17:dd:91:d7:fb:90:
32:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:09:3D:64:A0:C2:1F:42:98:E9:8D:C3:47:D1:0E:1E:73:C3:85:9C
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2a:39:98:35:0b:42:e9:4f:e5:82:93:41:1b:97:4c:91:53:
48:3b:8a:78:68:11:3f:c0:df:19:f9:70:7b:45:e5:40:83:36:
e1:ef:94:be:47:1c:f2:8b:5e:91:fd:95:37:b4:6c:79:ac:4a:
da:64:5d:0d:72:59:e4:c7:ee:d1:f2:80:22:cf:ea:e3:e9:eb:
a0:5a:e4:2c:a0:ca:de:a8:9b:15:8b:1d:70:09:30:86:03:d1:
e1:ff:de:3e:86:54:26:ef:4f:2e:b6:06:ab:0e:49:18:c5:97:
f5:41:44:fe:1a:a1:2d:17:4c:ab:b6:18:d3:71:ae:26:27:9e:
40:95:ff:f8:bd:e5:39:ae:ca:76:37:2f:ba:1b:be:ef:dd:34:
56:a3:05:82:83:61:4e:c2:6e:37:0b:60:a8:71:7a:00:a5:91:
1e:65:65:27:d3:27:93:c7:ac:ef:0d:3c:38:4d:af:28:4c:2f:
41:a1:e7:19:af:15:45:1b:c7:64:e6:d8:3c:8f:96:44:8c:a0:
c0:29:45:b5:79:03:70:44:cb:e4:02:1a:7c:d2:71:4e:1a:a3:
ab:0f:62:1c:01:ab:4c:db:79:35:f5:d2:67:b2:cc:07:bf:5a:
04:4f:6d:e8:e7:bf:ff:d1:03:e1:1a:9d:a1:b9:3d:3e:fe:e8:
c0:67:51:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 21:34:55 2025 by rpki-client