Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
File: sVKsjTaZEe8sE_k_mZumY8GOETM.mft (raw, json)
Hash identifier: YsEjuhQ2ny3/1UCDshsL9c9qHpokBo6+7Pl/3W+oeoE=
Subject key identifier: 3A:1B:97:95:7F:8E:1D:4B:E6:E3:2C:2E:12:52:B9:06:4C:0F:33:CC
Authority key identifier: B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33
Certificate issuer: /CN=b152ac8d369911ef2c13f93f999ba663c18e1133
Certificate serial: 0198D705AD425DA5D29E40950FB18A6345DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
Manifest number: 1152
Signing time: Sat 23 Aug 2025 13:02:10 +0000
Manifest this update: Sat 23 Aug 2025 13:02:10 +0000
Manifest next update: Sun 24 Aug 2025 13:02:10 +0000
Files and hashes: 1: ol7J2Hvjmb5X-K2OVwqn9laMR1o.roa (hash: eQqCRMd4r4yuoCt7TNNg0VZgfQMMOGRkxRWIPXje6c8=)
2: sVKsjTaZEe8sE_k_mZumY8GOETM.crl (hash: 6UTejv6sP9+pw6gVzc3I3PDsnHuGTL3QZw2qaiEeOV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:ad:42:5d:a5:d2:9e:40:95:0f:b1:8a:63:45:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b152ac8d369911ef2c13f93f999ba663c18e1133
Validity
Not Before: Aug 23 13:02:10 2025 GMT
Not After : Aug 24 13:02:10 2025 GMT
Subject: CN=3a1b97957f8e1d4be6e32c2e1252b9064c0f33cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:19:f0:56:97:fe:ee:f0:fb:10:6e:92:7b:56:
9b:8b:19:dc:e7:43:66:4b:7e:dc:a3:1e:63:f5:38:
b5:0c:51:27:a4:f8:ac:45:81:cd:e3:2d:b9:93:42:
fe:bd:80:ef:03:65:93:f8:fd:93:16:6e:2c:a3:7d:
c1:5c:0e:66:f5:4b:66:0c:82:60:52:84:d6:b1:df:
1f:31:c3:b2:0e:5e:ac:f3:44:12:a9:d0:4a:e5:b2:
8e:9c:4f:66:18:5a:1d:75:48:3f:6a:2e:ab:2b:73:
13:11:9c:d0:7b:d7:09:42:14:a8:f3:0b:03:d7:60:
0b:e9:50:2e:68:65:f6:5c:05:ab:a3:2f:44:df:35:
bf:26:4e:99:5a:ee:a7:2a:66:cc:e7:88:95:e6:d4:
47:8d:3e:ef:f0:e0:ab:c6:3b:50:cf:1e:09:88:1b:
0b:49:42:b7:ad:9f:e1:04:b7:70:e9:df:1a:b2:06:
c9:6a:7a:f3:b9:79:b7:03:8d:eb:fb:ee:dd:e6:53:
a1:8e:42:6b:9a:f8:bf:b9:91:e4:a3:e3:4f:7d:21:
e1:32:69:7d:10:d0:56:62:0d:de:cc:c3:a8:ea:1e:
39:79:0f:16:91:25:be:d1:01:0f:3e:65:89:22:e1:
28:4c:49:2d:c7:02:c0:07:aa:04:1f:f6:72:d6:9d:
7f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1B:97:95:7F:8E:1D:4B:E6:E3:2C:2E:12:52:B9:06:4C:0F:33:CC
X509v3 Authority Key Identifier:
keyid:B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7c:a6:ea:cb:7f:e6:e6:31:4e:98:f5:30:58:ff:c1:f2:e1:
77:9d:28:b5:bc:5d:ce:06:b8:f1:c9:8a:a7:d0:1f:5c:1e:b7:
f8:f2:8a:5f:e0:6e:76:74:00:93:24:89:94:b5:22:ca:be:05:
53:99:f2:bf:50:20:37:c9:e9:5a:8a:2f:ee:8a:15:ae:72:42:
99:38:85:ae:21:ae:f0:d0:7f:2c:5f:e5:a1:4d:b2:89:15:fb:
6e:c3:3c:cc:7f:2f:56:7a:ef:0a:90:8e:a2:0a:67:cc:f0:72:
6e:d5:f7:9a:2c:b0:4d:62:af:db:3d:42:c0:08:41:5b:c4:5b:
40:69:87:1b:db:7d:0b:af:8b:9a:36:56:25:41:e3:45:34:d2:
55:fb:ac:db:79:aa:3a:1b:20:f9:f7:7e:37:72:6d:af:b7:df:
44:79:35:eb:71:18:70:b8:84:6a:f8:7f:70:d1:e9:86:3f:d0:
d6:6b:c6:f0:c1:92:b2:5d:32:f5:6d:17:9b:7a:3e:19:15:15:
f7:e1:8b:1d:2f:3d:3c:6d:a1:17:78:d6:15:9c:6d:ff:8d:82:
6c:61:1e:8e:a8:46:45:c8:66:81:17:67:d3:99:ab:8b:15:44:
51:cd:f7:cb:3a:99:71:f4:f6:ff:08:65:1e:1b:cb:fc:3d:32:
3e:b9:dd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:50:49 2025 by rpki-client