Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
File: SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft (raw, json)
Hash identifier: 0LKP7SqnZV5KykJ9mVGDuC7e3dARwCO4qHVqtn18tMM=
Subject key identifier: D6:ED:22:23:3C:64:9D:F9:52:8D:49:EE:86:2D:C4:66:75:1F:30:C2
Authority key identifier: 49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
Certificate issuer: /CN=4978d328bcde5294f372765c11aeef28155b0f02
Certificate serial: 0198D65F557E1965DAB6A04D7FEF62FA9170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 10:00:28 +0000
Manifest this update: Sat 23 Aug 2025 10:00:28 +0000
Manifest next update: Sun 24 Aug 2025 10:00:28 +0000
Files and hashes: 1: 2TabSpltHUMp_5ejqOpWZde5yuo.roa (hash: 3/hdPalq/aa4mw4O394+y1isU6rPiSjjsa/MhWeedzA=)
2: SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl (hash: hDp0CRkkDwJxkRex5meQJkrY6cTQyi2neleuhaa5xmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:55:7e:19:65:da:b6:a0:4d:7f:ef:62:fa:91:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978d328bcde5294f372765c11aeef28155b0f02
Validity
Not Before: Aug 23 10:00:28 2025 GMT
Not After : Aug 24 10:00:28 2025 GMT
Subject: CN=d6ed22233c649df9528d49ee862dc466751f30c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:e8:1e:6f:31:74:0c:19:45:70:d5:52:56:
60:97:60:d4:52:30:a4:0b:67:f5:cb:d3:de:c0:b9:
4e:b8:08:dd:07:e2:30:a9:60:f2:38:8d:f4:18:2c:
5d:de:38:e7:b0:e8:5c:ff:17:4d:83:66:73:16:5a:
23:0c:fc:d1:78:9a:a4:16:39:17:97:a8:3a:29:33:
ee:df:6a:53:04:ec:fc:32:ba:fc:7e:05:88:1b:43:
c3:66:71:92:13:65:b5:99:dd:9f:d8:97:0e:00:3d:
da:ea:7b:66:c1:0d:2b:1d:29:07:44:0f:52:a1:03:
7d:14:ea:d1:e2:cb:42:ba:88:3c:fa:cc:48:30:0f:
26:5f:8d:3f:73:d9:67:3b:23:4e:bb:a3:d1:05:fa:
61:64:52:6b:c7:dc:c1:b9:a6:c0:e0:33:ff:89:89:
64:be:e1:87:b9:b1:f3:62:6f:7b:c5:39:fd:95:e2:
79:9d:c9:84:54:a0:a1:87:8b:60:05:08:7d:09:fa:
1b:2f:d2:af:a5:7d:9d:9a:2c:2c:e1:e7:01:c4:15:
e3:08:36:cd:72:26:3f:be:67:d6:35:b1:55:77:3a:
a1:7f:db:03:4d:63:c4:3e:8b:92:6f:b2:a4:0a:c0:
e0:61:7f:67:68:75:00:09:73:ad:65:f6:89:8d:b3:
7e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:ED:22:23:3C:64:9D:F9:52:8D:49:EE:86:2D:C4:66:75:1F:30:C2
X509v3 Authority Key Identifier:
keyid:49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:05:d8:6c:b6:9e:95:d7:41:79:c9:ad:10:25:11:9a:5d:5b:
36:4c:cb:f1:69:ad:e7:af:e9:a8:1e:c4:0f:55:a9:76:3c:a4:
2e:e5:5c:3a:b9:45:9e:96:29:95:c8:67:fd:ac:0a:e5:20:bb:
96:49:9a:60:2a:0d:39:2c:44:62:7b:c0:54:3a:85:d5:96:4a:
16:5d:e8:c2:5c:f1:99:a2:aa:ac:47:d8:f3:bc:d7:7e:db:80:
fe:68:bd:21:cd:3c:9f:d1:04:8a:3e:ab:88:cf:f2:48:8d:69:
e1:c7:ed:10:59:14:06:9c:e8:da:7a:43:57:8a:54:f0:83:ba:
34:e2:bb:36:16:97:6f:f0:fc:42:71:16:41:34:50:25:d2:2c:
e6:43:72:cc:2f:11:3b:97:0b:9f:fa:69:e6:48:cc:0d:b7:af:
18:f4:3a:a6:33:90:12:3e:62:8a:90:a6:62:2f:56:01:35:33:
3a:50:98:c9:f2:b1:9a:ad:a7:1c:30:08:7d:3e:ec:6d:4b:a6:
4a:cd:53:b8:87:85:c4:b4:29:f7:88:47:22:a0:ec:98:d1:d8:
45:9b:e9:b8:c0:63:2e:86:58:04:ae:af:b9:a9:83:e0:bb:63:
fb:56:2e:01:af:32:79:a3:fb:18:ac:f1:9a:2d:d4:91:5d:ff:
39:17:a1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:18 2025 by rpki-client