Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
File: sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json)
Hash identifier: jjNnlTZ9bHN/OsX7uYBzCcTRNSeh1we/6WouRdetCIk=
Subject key identifier: 73:19:E8:B7:4C:AD:6B:42:25:C7:F8:D4:24:75:F8:ED:B6:E5:17:C4
Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2
Certificate serial: 0198D54E631C5633FCC2565B1AC3F9E01F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 05:02:20 +0000
Manifest this update: Sat 23 Aug 2025 05:02:20 +0000
Manifest next update: Sun 24 Aug 2025 05:02:20 +0000
Files and hashes: 1: JzP7e_-IzWbRBsyrki_po14NIZs.roa (hash: 2xaFuIKLrgS1M1OrFYGfnFmo0uzFtyDCt4fM8dRZejI=)
2: mPhBEESpSSmoxdu-n5OAjI6sC_I.roa (hash: 6Dj5yn1/ctkVobyO+cPsteiP8qKS3BhAZ1jJUQtNU9w=)
3: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: mPvKVZvSFT2STCO8uqN0wlrSzevXQdt9KPG2HD00N1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:63:1c:56:33:fc:c2:56:5b:1a:c3:f9:e0:1f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2
Validity
Not Before: Aug 23 05:02:20 2025 GMT
Not After : Aug 24 05:02:20 2025 GMT
Subject: CN=7319e8b74cad6b4225c7f8d42475f8edb6e517c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:73:78:6f:50:32:8b:fc:0e:12:08:a7:7f:
0a:52:fb:8e:c5:3a:1d:15:2d:79:e9:1b:1a:79:ef:
9b:43:6a:f5:6d:69:42:c8:e5:44:d4:ca:de:fe:ca:
0e:a4:64:9a:20:76:ad:5d:19:22:9e:bd:ad:96:4f:
32:1a:a6:9d:d2:72:f1:20:0e:71:fe:6c:88:7d:e6:
68:0e:5f:cf:49:fc:43:1f:ef:4e:0b:14:87:ba:22:
e4:7d:44:8e:63:7b:dd:22:bb:13:13:fd:82:7c:dc:
aa:c4:18:0a:17:e6:56:71:b8:80:a3:a1:8a:3c:1b:
04:e3:00:98:ed:d5:1c:c7:e2:94:d4:e1:ac:d3:7a:
d9:b4:bc:71:4f:9c:1f:5b:7c:39:68:c2:3a:f0:e2:
16:7b:06:a1:85:64:73:9d:ca:8a:bc:5f:56:7b:3f:
7f:4a:45:e1:78:16:1f:c4:a6:2e:90:68:54:55:b6:
2d:1f:e7:62:62:04:81:2f:01:29:9f:11:d8:ce:9e:
e3:88:ee:d8:20:02:46:8b:9f:74:25:55:51:25:09:
a4:4b:a7:d2:10:01:67:6f:a1:fe:b6:5c:d4:8b:93:
68:95:f7:c4:56:a9:aa:23:40:3d:a3:d6:4f:1c:37:
f4:05:b1:fa:21:0c:a3:9a:9a:0c:87:5f:61:f4:fd:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:19:E8:B7:4C:AD:6B:42:25:C7:F8:D4:24:75:F8:ED:B6:E5:17:C4
X509v3 Authority Key Identifier:
keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8e:45:c9:b4:4c:7d:d5:b0:77:bc:23:f3:55:26:78:56:ad:
ca:51:1a:5c:7b:0e:ae:f1:bf:e5:30:16:63:d0:2e:bb:1d:5e:
d0:13:a2:88:c0:32:d2:13:a4:25:69:70:51:d4:6b:92:93:20:
8f:db:0f:f3:02:55:38:d7:c0:2d:1c:69:7e:f5:c5:18:96:0b:
50:f7:57:31:b5:eb:44:49:42:27:a2:2d:01:e9:92:1f:a3:97:
c7:69:13:7f:d3:d7:7c:38:81:33:f5:c5:4e:df:d0:7f:c9:7d:
b3:aa:a4:41:ce:e3:c6:9e:5b:4f:1c:a5:a3:0e:d7:d1:13:0a:
93:53:02:39:8f:5d:dc:e7:49:35:e3:c7:3a:d8:fa:d0:19:dc:
48:55:12:2f:c3:01:65:a9:9a:d0:62:a8:20:49:54:de:39:d7:
fe:27:4d:1c:62:20:09:31:9c:1d:dc:75:19:a2:50:51:de:cd:
7a:02:07:06:49:39:26:27:c0:ef:4a:99:69:8e:33:2a:a2:ce:
a9:6a:31:77:36:88:12:c6:94:6a:23:5f:39:8b:e8:10:5f:21:
b7:19:c8:26:02:0f:05:c2:22:33:96:c9:20:03:f6:c6:61:90:
f6:76:0d:c7:e5:98:91:94:3d:76:8b:99:2f:13:4d:9b:b4:c6:
10:ef:8e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:43 2025 by rpki-client