Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier: ZTyWYEYHVpTo2qJleRTWoZ1rKp2e7WlphyCFLp8Z9xA=
Subject key identifier: 49:A1:B8:99:7C:56:2A:F9:A0:EA:07:90:A6:02:D2:37:1A:83:BF:FA
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 0198D4A83469A1BF30EAC63476FA56101516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number: 0419
Signing time: Sat 23 Aug 2025 02:00:49 +0000
Manifest this update: Sat 23 Aug 2025 02:00:49 +0000
Manifest next update: Sun 24 Aug 2025 02:00:49 +0000
Files and hashes: 1: TtWAkSfWnAdWkPSbjWsj0bQP2Qs.roa (hash: aq+t6Xrt8tsoSTCr/VP5wkOGWF6BiCi7pgwlC8GWdxs=)
2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: TZDshLXBir1cffUR0YTkIWECbd5T6nSHWbfiXCCGnMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:34:69:a1:bf:30:ea:c6:34:76:fa:56:10:15:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: Aug 23 02:00:49 2025 GMT
Not After : Aug 24 02:00:49 2025 GMT
Subject: CN=49a1b8997c562af9a0ea0790a602d2371a83bffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:14:57:38:60:cf:13:dd:96:8d:b9:12:7d:
1f:d0:7a:bc:6f:24:73:90:a8:5c:89:2b:4b:13:72:
4f:30:d2:be:ad:ab:ce:7a:21:ff:1e:8c:34:62:09:
60:12:5c:c1:2c:54:11:38:5f:56:2b:3e:07:b8:7a:
04:49:34:2b:53:cd:90:0d:ea:1e:de:f7:00:70:ff:
c3:e2:55:9d:59:5a:77:28:e4:75:a0:95:47:73:64:
f2:ef:d4:29:8d:66:91:0d:5d:c4:7a:4c:9d:56:79:
5f:70:5d:fc:9b:32:b0:73:8b:25:29:62:aa:d0:aa:
5d:95:57:09:cd:2d:ce:38:7b:dd:b2:c1:00:4c:47:
c7:2c:5f:e1:1b:68:b2:75:8a:25:ba:d0:d4:9e:73:
8a:a0:cf:2e:00:06:93:5f:c4:bf:5b:a8:1f:12:1d:
97:41:28:02:94:8c:08:c4:38:ad:29:d1:3a:c5:22:
bb:7b:48:e6:c3:53:87:2f:d8:f3:41:63:0a:ec:b9:
67:01:66:65:d5:b8:a8:1f:a8:4c:34:54:7b:e1:b6:
fe:77:2e:88:8c:2e:46:41:41:b5:ec:a2:d6:66:9d:
7b:aa:cd:b2:01:dc:d0:0b:97:a6:55:b9:40:0a:4f:
15:a6:9b:e4:48:30:3e:38:7f:a1:61:db:50:80:e3:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A1:B8:99:7C:56:2A:F9:A0:EA:07:90:A6:02:D2:37:1A:83:BF:FA
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e3:d7:f4:1a:0a:6f:bd:d0:e1:41:4c:c2:f0:43:17:51:20:
8f:a9:13:ee:2f:06:fa:ac:1c:59:7e:2e:21:54:28:1f:56:9c:
dc:f0:8e:c4:a6:93:d1:ba:ef:e7:22:3f:11:3e:c9:31:82:a8:
75:8d:cd:97:8b:01:91:7f:6c:8b:9e:99:44:83:61:88:77:85:
29:84:2a:2a:b8:5c:ae:38:a2:b2:b9:4d:ad:55:44:89:30:d2:
c1:38:a4:da:fc:69:ce:2a:61:2d:73:9d:14:7c:13:97:d3:45:
bb:89:f5:47:11:d0:8b:1f:cf:0e:b4:97:38:23:f0:5c:1a:06:
56:a5:c0:44:1a:44:9e:db:6e:d5:d8:2f:87:e0:bd:89:0a:8c:
76:f5:b5:e8:c6:8e:97:5b:4a:22:1b:7b:a2:d2:60:22:bf:72:
54:56:65:6b:19:c8:39:c0:76:0d:dc:10:03:c1:8c:1a:a7:3b:
3d:23:c8:ef:59:12:73:62:22:00:11:8e:82:d5:65:3b:bb:8d:
8d:b8:2a:47:ed:70:4a:4d:13:94:f5:c5:81:12:0d:b3:7c:1a:
b7:79:55:21:31:44:d1:1a:17:5c:c7:94:89:fd:0d:c4:6d:43:
54:f7:ef:f7:1c:c0:5d:9b:2d:96:89:fd:89:0d:01:72:6d:e0:
7d:0a:ed:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:00 2025 by rpki-client