Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
File: svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json)
Hash identifier: L8rgIDt6VaZUewKOh2fvlE5Tu0rPnirMvsVj/Cao0q0=
Subject key identifier: 56:15:34:F9:C9:7A:32:C6:25:3C:42:AB:35:8B:8F:15:D6:94:52:43
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial: 0198D5160BB6D7A265BF6E2EBE121753E542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
Manifest number: 0FD9
Signing time: Sat 23 Aug 2025 04:00:47 +0000
Manifest this update: Sat 23 Aug 2025 04:00:47 +0000
Manifest next update: Sun 24 Aug 2025 04:00:47 +0000
Files and hashes: 1: bkaEgwUfFQuvU4deHKYEq645oxo.roa (hash: a6t899hSFrNnCxDeJsEHX7KWBkAwoAJJxMP3KbPkcsM=)
2: gM8Vs4rZduYc-FMusqbqCtswvSM.roa (hash: PdGvc2+s2b+cxeznU9E/uPp7OuLxD8n8FSf7bdTA3Io=)
3: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: GGH0eHbRTdJIyR03JlEKt8C7xd0rJsJTIZVqUqOsxmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:0b:b6:d7:a2:65:bf:6e:2e:be:12:17:53:e5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Validity
Not Before: Aug 23 04:00:47 2025 GMT
Not After : Aug 24 04:00:47 2025 GMT
Subject: CN=561534f9c97a32c6253c42ab358b8f15d6945243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:be:c9:c6:fe:62:a3:39:0a:fd:60:a0:90:
08:d6:f5:51:47:d4:8e:26:95:6a:ff:29:30:15:66:
8c:c0:94:27:8d:79:ff:01:f0:6d:75:4c:40:6a:d4:
29:37:48:0b:bb:2b:e1:1a:c9:30:a1:62:f3:39:12:
ea:29:24:5e:23:19:64:9e:23:36:e3:67:fb:8b:5f:
0c:32:7a:14:8e:93:3a:b5:2a:78:da:b2:e2:c8:71:
f7:dc:60:2c:bc:a1:38:fb:ad:d3:86:cc:ba:55:3f:
3e:69:61:e4:d0:5b:8f:89:98:1b:ef:6c:df:af:af:
a7:da:08:82:00:43:f9:33:7a:4f:f9:87:96:c1:00:
b3:f3:94:fc:d3:c5:89:55:51:44:22:97:7a:3e:ad:
f4:f1:b7:d3:af:b3:9b:35:24:24:3b:9f:f6:fc:95:
19:c5:4e:50:a3:51:ea:e7:0b:7f:fa:e1:61:bf:fa:
9b:3b:92:82:ac:41:46:c3:f1:07:85:fe:3a:0d:67:
54:2f:3d:3f:f8:09:6d:e4:8c:7a:e5:e5:17:07:7a:
4b:da:2e:1e:f7:b9:c4:77:62:fe:0c:9b:ae:8b:ce:
99:4e:2c:45:d8:75:e0:97:91:04:67:f6:a8:ce:b2:
27:66:6a:09:94:ee:66:ca:65:a5:51:36:66:19:59:
dd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:15:34:F9:C9:7A:32:C6:25:3C:42:AB:35:8B:8F:15:D6:94:52:43
X509v3 Authority Key Identifier:
keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:22:48:56:ec:77:66:22:ae:3a:4c:d7:a4:07:2a:81:05:e3:
49:ae:05:4d:e0:83:0c:da:4f:a1:21:cd:ab:e5:61:9a:b1:a7:
29:64:4f:27:c0:a5:e2:0b:89:44:4b:d1:25:9e:be:87:ed:b7:
fc:85:93:f1:3f:64:1a:22:4e:bf:a7:1c:fe:3b:9c:1d:c6:d4:
26:e5:bb:26:9f:e7:fd:80:66:f9:83:c0:ef:da:28:1a:a4:25:
3d:da:d9:4f:41:73:84:64:c5:22:f8:5d:d9:62:45:c6:7b:fc:
82:20:42:7a:79:cc:68:9e:e4:23:c9:bd:dc:c0:75:43:45:ea:
9a:3e:8c:a3:0d:b9:ca:23:aa:74:ff:00:d8:6a:64:8a:20:e4:
c4:9c:b2:3f:aa:41:71:19:1e:30:36:13:22:8a:a5:25:dd:f0:
e4:b6:66:f7:e4:0b:25:77:f3:f0:12:3a:f5:a1:5a:a9:d3:b6:
7c:db:3b:c7:2f:c0:5c:04:09:c4:1f:c9:0d:ac:02:42:af:98:
ff:67:39:21:b3:e7:e7:8d:1c:12:eb:06:33:71:47:0b:c5:1f:
6d:86:e0:fb:bb:1c:c5:d5:83:b7:17:10:1e:1b:cc:06:8f:9c:
7d:23:ef:d7:88:e3:bc:43:9c:ae:a9:61:d3:17:7e:9a:88:d6:
d8:18:1a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:40 2025 by rpki-client