Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
File: SXioZBznhb40aFAwUncj5f3OVio.mft (raw, json)
Hash identifier: l7dj+83VLq+uuW71nHtRBAeGEkV9HQdWb15YmT6jRPY=
Subject key identifier: B2:9F:92:1B:DD:87:F1:FA:32:6D:43:5A:A1:92:C0:9B:E7:F3:80:D9
Authority key identifier: 49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
Certificate issuer: /CN=4978a8641ce785be34685030527723e5fdce562a
Certificate serial: 019923D59B7AC863684DB6561DDC9269CC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
Manifest number: 06AE
Signing time: Sun 07 Sep 2025 11:00:25 +0000
Manifest this update: Sun 07 Sep 2025 11:00:25 +0000
Manifest next update: Mon 08 Sep 2025 11:00:25 +0000
Files and hashes: 1: BCD_tpHD4CbGfbV_PdrLa7vTpXk.roa (hash: 3ZjEUHk0H2GaQYj5jwvFZHg7bwJy5JXMVYVGmhkBhZA=)
2: SXioZBznhb40aFAwUncj5f3OVio.crl (hash: gQ4VM9It5wRjnaotCdYCHYThvbeBLO6FPSEWhrCTWVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:9b:7a:c8:63:68:4d:b6:56:1d:dc:92:69:cc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978a8641ce785be34685030527723e5fdce562a
Validity
Not Before: Sep 7 11:00:25 2025 GMT
Not After : Sep 8 11:00:25 2025 GMT
Subject: CN=b29f921bdd87f1fa326d435aa192c09be7f380d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:07:e3:f4:cd:0d:65:9b:d3:da:67:45:0e:
5e:43:0a:ab:b6:6c:d7:81:6d:25:c9:74:88:46:07:
a4:b9:be:bb:e4:0a:ae:be:f4:91:29:f2:55:e4:3e:
fc:9c:bd:0b:b5:9a:7b:b1:f9:d6:3d:b5:9d:2e:20:
8f:e6:f0:93:c5:e0:26:7f:ec:b6:2a:42:b7:1d:b9:
11:d5:f4:fe:c3:8b:2a:ab:55:90:7a:fd:b2:20:cc:
6a:5c:53:49:3f:e3:b4:69:06:2e:71:b6:ff:56:d9:
79:b8:ac:e7:51:c6:10:25:02:2b:3e:53:a3:ab:ea:
a8:88:d1:5f:71:be:2b:da:8e:bb:45:35:7e:21:09:
62:56:da:ca:2d:ae:b8:80:08:88:86:c5:51:1e:37:
e3:0c:30:f7:76:91:ad:ca:4b:81:69:d9:b7:e8:7e:
c2:de:b9:e2:c2:bc:f5:c1:69:1c:59:9a:c9:8d:d5:
0f:79:63:da:df:bc:17:23:69:7d:05:51:26:1f:af:
ff:45:1b:e2:f6:8d:3c:d1:d6:48:1f:50:8d:ef:29:
9e:a4:41:16:07:47:9a:80:d4:0b:51:3d:ff:e2:81:
4a:31:fb:a3:67:f9:eb:15:03:0a:f4:08:1d:49:89:
df:fa:62:1f:06:fd:97:2f:c1:de:cb:84:a1:c0:68:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9F:92:1B:DD:87:F1:FA:32:6D:43:5A:A1:92:C0:9B:E7:F3:80:D9
X509v3 Authority Key Identifier:
keyid:49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c1:e0:f7:91:53:55:65:0a:76:d6:11:d8:62:11:ac:9b:ac:
7a:b8:70:98:18:c3:8a:78:68:bb:97:5c:2d:40:0e:3c:60:aa:
04:47:37:92:d2:92:19:ce:79:95:c5:93:fc:70:df:c3:bf:48:
e3:15:91:03:77:f1:34:0d:e2:5b:39:69:a1:f4:a1:b9:3c:9f:
44:30:80:75:1c:e7:3c:ca:65:f7:88:bc:0a:ba:92:1c:a8:bb:
3f:ae:83:62:77:65:d9:71:10:b6:88:49:e9:f4:90:23:b6:0a:
50:39:02:b0:69:ed:b5:58:a1:bf:21:20:aa:f8:1d:b3:e4:e9:
fc:10:13:1a:55:d1:2b:94:81:80:62:31:b6:48:fc:3d:6e:4b:
db:b1:20:16:fa:fb:1a:49:a8:ac:8d:ee:34:15:9c:08:d3:5e:
3d:0c:51:be:7e:cd:ff:ed:37:fa:e6:8c:0b:93:26:ab:26:43:
ba:16:20:6e:6f:ae:a8:0d:f1:be:2f:35:fc:9e:1a:de:a8:5e:
29:63:04:8a:64:d4:ee:5f:8d:22:ee:99:ae:36:ff:9f:c9:a7:
37:70:16:c7:a3:f2:6a:02:17:b7:03:0d:a2:ff:9d:18:b2:67:
ba:c7:05:46:34:c3:74:77:b1:77:8a:49:94:0c:6a:8d:07:24:
b0:b6:70:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:25 2025 by rpki-client