Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
File: SfA190v2NQvDef8uJTiC0kaO9Yg.mft (raw, json)
Hash identifier: GsLPldwgAMn3/SMqXRoVsOlxBVEtrhGT4+MwVnjGJD0=
Subject key identifier: 48:B0:24:2C:CE:3B:40:60:36:0C:7E:D7:BA:90:73:31:AA:8C:D5:1C
Authority key identifier: 49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
Certificate issuer: /CN=49f035f74bf6350bc379ff2e253882d2468ef588
Certificate serial: 019922C3583816ECEAEA9305845864C2E2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
Manifest number: 0387
Signing time: Sun 07 Sep 2025 06:00:51 +0000
Manifest this update: Sun 07 Sep 2025 06:00:51 +0000
Manifest next update: Mon 08 Sep 2025 06:00:51 +0000
Files and hashes: 1: SfA190v2NQvDef8uJTiC0kaO9Yg.crl (hash: TyZ2x4SNrMyLnWTx9f2fWNsWx+oJiFcxDAKY7EaaMGQ=)
2: wbmZO-HC2oZGGdDiSLm7Xy-yCzU.roa (hash: G5A8w6EKnJ7KNviXJvfO4lYZfTcipjXbs1g3Za2z4wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:58:38:16:ec:ea:ea:93:05:84:58:64:c2:e2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f035f74bf6350bc379ff2e253882d2468ef588
Validity
Not Before: Sep 7 06:00:51 2025 GMT
Not After : Sep 8 06:00:51 2025 GMT
Subject: CN=48b0242cce3b4060360c7ed7ba907331aa8cd51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:68:ea:1a:1f:e8:27:59:16:e2:89:30:78:
b9:ef:fe:e6:fb:49:10:bb:4a:b9:d4:3b:8a:fd:62:
48:eb:78:d1:c3:ad:56:29:98:3b:15:d7:58:eb:a4:
47:0e:f7:c1:15:a5:33:d0:af:c6:19:1a:d1:ef:a9:
15:d2:a8:4f:a2:6e:c3:d9:5a:f8:76:cc:ba:ed:d6:
b1:f2:1b:e6:78:f7:4b:93:42:1e:71:bb:1f:4f:9c:
a9:b5:f8:d0:ed:a0:32:c0:ef:53:41:64:5e:6e:3d:
fb:69:de:04:d5:e9:cf:ef:24:31:7f:03:80:7f:f6:
da:f7:d6:6f:bc:bb:07:64:46:16:eb:cd:93:f3:ca:
01:04:7a:d2:0a:9f:dd:7f:13:33:75:a7:7e:d4:7a:
4e:e9:ca:fe:c4:16:ac:fb:7d:7f:ca:6f:47:f5:22:
d1:c7:40:5d:ce:96:46:94:ea:ee:a1:6e:c3:d1:36:
36:96:ad:05:15:02:38:26:a3:9e:07:80:f4:e9:ad:
8a:c6:36:97:e1:a8:6e:a2:50:94:0b:31:1e:ec:fa:
3f:b5:2b:99:a2:8c:ca:e1:25:18:55:91:b0:29:ac:
7e:ab:8c:7b:3a:38:0f:91:c2:18:2d:ae:fb:71:84:
83:f7:f3:db:8d:cc:38:2c:b7:be:70:e2:b4:12:6a:
9a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B0:24:2C:CE:3B:40:60:36:0C:7E:D7:BA:90:73:31:AA:8C:D5:1C
X509v3 Authority Key Identifier:
keyid:49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ab:cb:3c:db:58:72:d3:e7:93:45:c4:23:3f:bf:92:5c:2b:
1e:04:8d:d0:e3:15:92:74:28:2a:f5:6f:8e:db:5e:d6:bb:95:
9b:b0:c5:93:1f:8e:b8:2e:57:0c:2c:f7:de:a0:0f:9d:96:5a:
30:69:07:71:89:a8:88:a2:8b:14:1e:7a:a8:ff:3f:3d:0f:fb:
34:1c:03:60:92:38:f5:10:61:d5:7d:0a:56:03:04:20:58:a4:
2a:c0:85:83:d6:6e:12:47:86:dc:bf:62:5f:b3:61:6e:e6:28:
49:60:89:43:19:16:fd:e7:2d:ba:d1:09:33:a4:6a:80:f1:06:
97:1b:82:e1:f1:6f:1b:72:36:56:2c:a7:a4:69:0b:48:98:f1:
74:93:fa:1d:d4:03:39:b6:e8:63:fb:26:67:cf:68:81:8e:eb:
15:f2:ca:ce:47:97:d3:2b:28:d4:13:59:8b:dd:4c:33:21:0b:
5c:29:16:39:2b:7e:e1:ab:36:aa:89:4d:76:72:d8:c5:fd:c7:
d5:da:cd:21:aa:ef:e5:e4:7a:f5:1d:c9:3b:3f:13:a5:d7:f7:
3e:7a:41:1b:ab:51:de:43:da:ef:3d:59:2f:83:c5:93:97:6a:
c2:0f:9e:e8:fb:f1:fb:3a:37:dd:9d:43:41:72:21:32:f6:e8:
aa:78:10:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:08:17 2025 by rpki-client