Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
File: sfcTzyBVLWxcI_CeezdmmEb5ylA.mft (raw, json)
Hash identifier: nRUsz6vc/iBr0xciF5OpAN46Udf7PKwepaM+TMYCgRk=
Subject key identifier: F7:12:80:00:EE:15:E3:6A:4F:1F:09:2A:92:2B:1D:10:21:B1:C7:95
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 0198D4741623797DD1109A0F25CCD9431973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 01:03:53 +0000
Manifest this update: Sat 23 Aug 2025 01:03:53 +0000
Manifest next update: Sun 24 Aug 2025 01:03:53 +0000
Files and hashes: 1: RlSX_O9nuK4visZrcXhuUrMTobY.roa (hash: rJSur0He4KlKRGvS+jaXIpRrSe2/3CDqYP07r9YT8i0=)
2: _FEDHOA1DaPuw5szVg_jX1NChtc.roa (hash: NTy69zIQkKyjkxDfKJ+X67SWRMXHN0I5/tJxmftqgVU=)
3: sfcTzyBVLWxcI_CeezdmmEb5ylA.crl (hash: Guor7L5VCnjko1IkToWPX5ARCvLTxdPsVI2MQHgXlqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:16:23:79:7d:d1:10:9a:0f:25:cc:d9:43:19:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Aug 23 01:03:53 2025 GMT
Not After : Aug 24 01:03:53 2025 GMT
Subject: CN=f7128000ee15e36a4f1f092a922b1d1021b1c795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:45:de:f2:50:21:79:bb:c5:5b:bf:5f:8d:8d:
00:d4:16:af:75:6a:9e:4e:d7:d6:de:f0:ff:8d:eb:
e4:9e:e4:10:e2:6a:7f:31:58:21:ce:65:76:4b:f3:
3e:ab:8f:31:24:cf:24:d4:3e:91:2d:34:05:f5:16:
4f:a9:7f:6c:fb:fa:d8:a6:3b:aa:49:c5:91:06:e5:
4b:c0:f8:a1:a2:4e:c2:bc:20:bc:77:92:59:87:24:
f4:d6:dd:8a:d2:3a:ff:12:68:a7:4d:ad:5a:b5:f4:
5c:15:4c:d6:f7:ac:50:ea:8f:f8:b1:0f:1c:3a:1a:
55:fb:a6:c2:82:82:ef:99:74:1d:88:5e:f0:ed:89:
8e:60:d4:07:fe:c3:26:79:fd:5c:5b:ee:c8:37:84:
b0:e1:b4:6c:12:c4:3c:be:4c:e2:d7:9a:77:c1:a8:
74:9e:65:28:38:07:ec:b6:6c:02:e5:78:e3:2c:45:
91:f4:87:09:cc:c1:73:2c:6d:8a:99:fa:08:20:10:
cb:0c:0f:52:19:6a:b4:9f:07:93:64:09:2b:df:2c:
d3:12:4f:61:b7:9e:31:4c:1b:33:0a:cf:31:92:26:
d3:56:59:92:bd:ca:d7:ad:29:f8:77:f8:e7:66:4a:
e1:51:58:5a:7b:1f:43:6e:9c:d0:bc:13:cd:70:cc:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:12:80:00:EE:15:E3:6A:4F:1F:09:2A:92:2B:1D:10:21:B1:C7:95
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e8:71:55:cb:9e:87:85:53:52:57:15:21:1c:7a:47:91:6b:
53:5c:d0:a3:3c:25:d1:d6:db:aa:eb:ea:0e:18:36:76:d8:d5:
61:03:2b:ab:0a:1c:4f:01:b5:7e:26:72:72:0c:12:81:b7:16:
5a:4f:71:dc:1b:dd:3c:d1:d7:75:31:89:a1:b0:ba:b0:5a:49:
6c:13:e8:54:83:6c:a4:ea:dd:77:38:c1:f2:de:bd:a3:72:d3:
6e:d1:81:0d:16:59:cd:30:5f:b1:5c:72:98:ce:6c:24:95:9a:
7c:36:b8:02:ad:41:40:1a:1d:23:9e:8b:e3:b2:05:1f:b0:74:
7f:35:b0:7f:46:a4:5d:8c:55:1e:9d:4a:ef:65:61:ca:fd:17:
f0:23:ac:5b:01:da:36:b1:a7:93:e4:d7:a1:ec:cd:3b:79:47:
82:ed:2d:61:b8:ab:c7:0f:4a:3f:b5:15:2d:66:0f:15:40:cd:
93:44:ff:03:77:fa:a3:a4:73:b3:0d:98:14:e6:66:a9:3c:06:
b9:0d:e3:a7:97:be:a2:16:30:be:cf:6a:60:ea:79:90:6d:f8:
99:0f:31:1f:10:a7:1b:9d:03:d3:ce:f2:d8:6f:19:70:5f:12:
90:a5:28:9c:3a:3c:76:ce:bf:ad:3e:4d:d0:b1:ce:57:c0:34:
d8:6d:a8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:53 2025 by rpki-client