Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
File: sXQMTAefLR3uhUOfgngbm651apU.mft (raw, json)
Hash identifier: aGNhDnPKJe9TtcL22mYuP/5gw51Kd8I97qAOQxeMjPs=
Subject key identifier: 04:11:28:C1:7E:A5:BE:81:44:5F:7D:8C:03:5E:93:31:0F:7B:CA:F9
Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
Certificate issuer: /CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Certificate serial: 0198D5F1CFD3255881A999ECE3B9BC812AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
Manifest number: 1296
Signing time: Sat 23 Aug 2025 08:00:50 +0000
Manifest this update: Sat 23 Aug 2025 08:00:50 +0000
Manifest next update: Sun 24 Aug 2025 08:00:50 +0000
Files and hashes: 1: 0kGm7IS6foM84ApNB5wMBZmcs70.roa (hash: fsNAu7RVtrbBsKEN64Ou91zqn3ieSIW0lwlDv3luCl0=)
2: QHGLz4vDf8HU0PXuv58AHJKDNwE.roa (hash: zsAsJqx3Xlx/j+LLE8QbsIeKt4A9wuocERvf2nTmf7A=)
3: Sz2kPMld2S0NhbWe3VBXUQg4E_g.roa (hash: CgZe2V9k88f5ug37ai2G7ohUxSeYSwTeyOJXFySNdfc=)
4: sXQMTAefLR3uhUOfgngbm651apU.crl (hash: 3EP4JCxGdkAeL5IYr8ugknpn32IW0dAPArSm2fZbbTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:cf:d3:25:58:81:a9:99:ec:e3:b9:bc:81:2a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Validity
Not Before: Aug 23 08:00:50 2025 GMT
Not After : Aug 24 08:00:50 2025 GMT
Subject: CN=041128c17ea5be81445f7d8c035e93310f7bcaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:d1:26:30:9e:e2:11:81:3b:d0:d3:67:3d:
5f:de:b7:3c:ee:43:69:43:54:3a:cf:00:b5:99:8b:
53:f4:3e:39:e9:ab:59:d0:fd:3b:78:e4:70:e6:90:
a1:d6:ac:90:f6:8d:2e:a9:fc:18:f6:c3:75:20:36:
a1:82:f8:b1:9b:e5:b1:69:5c:2a:21:4a:3d:03:d0:
89:16:51:07:8b:42:be:18:f6:54:19:ca:c0:2e:99:
70:53:0b:78:0d:0c:fe:0b:4e:2b:40:3b:55:da:7f:
06:89:90:23:e8:f1:40:58:6d:75:3b:9b:79:81:10:
96:da:ce:f6:85:6b:02:76:37:aa:14:7a:3f:78:7a:
a2:c9:c0:3b:71:87:bf:a5:73:88:09:7c:20:68:8b:
7a:07:ef:10:8c:0a:03:a4:e4:4a:38:31:2a:53:07:
13:f5:01:e8:32:00:b0:43:f9:8a:df:45:c1:e7:58:
37:77:88:4a:6a:de:f6:b6:0e:2a:47:eb:d4:0b:e8:
f6:21:6b:17:9a:16:0a:4e:1d:8f:68:a9:de:25:3c:
3d:36:c2:bc:5f:ca:62:8c:54:7e:d9:1f:f8:20:5d:
b0:dc:2f:f7:5a:c6:b0:8f:cd:78:8e:28:14:cc:02:
5d:d6:54:bb:6f:e1:00:10:d4:c3:2e:a9:8c:f5:c8:
9a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:11:28:C1:7E:A5:BE:81:44:5F:7D:8C:03:5E:93:31:0F:7B:CA:F9
X509v3 Authority Key Identifier:
keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5d:eb:a3:92:65:98:4a:57:b4:a9:a4:e0:2e:04:5b:ce:81:
a5:20:63:5f:f5:07:57:f6:ff:3e:9d:0f:ae:32:c7:b8:89:e9:
cc:45:46:23:ef:2d:ce:0a:84:b2:cc:1d:bd:20:e9:aa:c8:e3:
d4:c7:3e:b4:88:c9:fb:cb:12:cc:a2:42:61:04:bf:62:61:43:
4d:52:82:d7:2f:a0:cd:af:98:7b:e2:fa:75:f1:3c:f8:af:75:
eb:ee:d3:d7:b2:fc:14:4f:bf:b8:d4:a5:e3:d5:2a:69:e3:16:
c6:20:2e:f1:6f:58:a4:a9:32:72:b1:81:2a:7f:f3:13:17:c6:
f6:72:54:6e:2a:db:4c:ca:9b:1e:8c:b1:57:15:3b:9d:11:d5:
08:93:42:66:7b:b1:73:f5:37:27:67:93:60:8d:7e:55:07:87:
96:6a:83:ad:2f:c0:ee:12:87:40:86:f4:f8:05:5b:b6:77:8c:
b7:8f:17:47:63:d3:37:e6:9c:0b:08:3f:0d:c8:23:83:e2:08:
b4:a7:58:d0:63:bc:88:ae:ed:0c:86:4a:23:19:86:18:c9:3c:
68:45:ee:c5:1c:cc:bb:32:80:eb:39:c2:d1:5f:b8:e1:eb:34:
53:43:66:af:3e:67:68:58:07:d2:5f:51:01:4d:ee:2a:4a:57:
a9:29:a3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:50 2025 by rpki-client