Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier: Ppr2GLJQZqlzlia56xO0qEMc3X2vHR+GoTAMRVcIlTM=
Subject key identifier: 86:E9:4B:28:7D:21:F7:D8:3C:A9:E6:EA:6B:63:63:7A:FB:D0:A2:E6
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 0197CC15E62108991006756C6F9229036924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number: 1490
Signing time: Wed 02 Jul 2025 17:01:16 +0000
Manifest this update: Wed 02 Jul 2025 17:01:16 +0000
Manifest next update: Thu 03 Jul 2025 17:01:16 +0000
Files and hashes: 1: EhMQv2Hd3Y0AB-EaVNPw9A1el2Y.roa (hash: bVKsgWkrvgH7jweX9NZzvJ58rjQAc648XkG11nW0Xqk=)
2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: 4LPbqxMXRftpv/MO34azL1RBA0sPj4fz6gth279qGEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:15:e6:21:08:99:10:06:75:6c:6f:92:29:03:69:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Jul 2 17:01:16 2025 GMT
Not After : Jul 3 17:01:16 2025 GMT
Subject: CN=86e94b287d21f7d83ca9e6ea6b63637afbd0a2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:0a:87:77:d0:27:1a:a7:ae:44:92:c3:04:
f2:08:a1:f6:08:a3:b5:24:6c:29:eb:93:85:e7:d3:
f9:1d:71:2e:ec:a9:d1:1d:9e:80:f7:87:b5:a9:96:
2e:74:0e:c4:c8:71:b8:a2:55:5a:b1:e0:ec:cc:ec:
57:1a:50:c6:1c:be:b4:fd:e2:b4:69:b2:a7:9c:9f:
df:12:f2:78:c1:5c:af:10:9a:dd:8b:17:41:26:a7:
df:90:83:a2:a1:a2:e7:ed:52:88:f8:82:ca:f8:b3:
e5:de:b6:5f:b7:a3:8b:18:eb:85:fb:7e:be:ee:ec:
96:27:9c:3b:9f:13:8f:3a:4b:58:d0:a2:3f:75:e1:
6b:c6:98:b1:f2:d0:d9:f1:4c:13:af:c8:8e:46:74:
84:06:c0:17:44:75:3f:a9:c7:16:f7:8c:1f:d7:cb:
d3:bc:c7:af:ae:9d:c6:c8:6e:59:7c:c7:30:9f:28:
76:9a:ce:98:2b:87:df:95:92:36:73:de:89:2d:fd:
00:73:2f:62:cf:4a:a2:55:28:03:bf:96:b3:d2:b2:
a0:f3:a5:c1:9d:b9:34:e1:e5:b3:c4:d8:0f:83:5b:
4c:0b:0d:62:1b:37:54:0b:f4:fc:26:00:2d:fe:b5:
d3:b4:50:24:60:da:01:de:28:43:c8:21:af:13:37:
30:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E9:4B:28:7D:21:F7:D8:3C:A9:E6:EA:6B:63:63:7A:FB:D0:A2:E6
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d7:ca:db:89:cd:a3:6a:8e:02:58:56:2a:e2:ef:76:e5:38:
30:73:4b:6d:d1:0c:fe:ce:8b:12:e5:90:96:0d:c7:05:e0:47:
92:07:88:7c:14:f1:cb:07:8a:41:c6:95:a6:ae:ec:33:27:2c:
fa:1c:33:2d:41:9d:0b:e0:b0:9b:5c:36:a2:fb:c9:70:a6:2b:
dc:32:1a:e3:a4:12:84:d0:ab:c7:f4:f8:fb:94:02:eb:ce:88:
87:92:95:46:e4:92:8a:1d:69:77:b7:c8:1d:7a:a6:e0:5d:4b:
43:01:7c:dd:80:69:d2:ce:2c:13:73:92:cc:a9:aa:54:15:99:
70:af:55:5e:51:fa:2e:67:92:22:c4:30:4e:e9:14:93:aa:d0:
04:10:14:6b:f2:ff:0e:80:fd:01:48:b9:2b:ea:2e:a0:e1:35:
29:65:de:5c:d6:34:59:d6:e9:55:6e:91:37:10:ee:16:e4:6d:
a4:23:69:9f:bc:68:a7:79:05:6d:89:b0:3a:c3:de:d6:c9:89:
0e:49:fa:2a:ac:e1:2d:cc:b2:33:08:21:b0:20:21:26:4a:e0:
66:a0:50:d2:ee:01:f0:90:20:97:8b:46:31:4e:2a:c9:0b:c9:
5a:ea:f4:d4:94:c0:c3:0f:41:b6:a1:d4:a8:14:96:cb:d4:0f:
01:22:fc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:09:43 2025 by rpki-client