Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
File: SBaZwQuP-LkauQlAMU7pOyev3NY.mft (raw, json)
Hash identifier: PoadtiuJe2Mj1MULB6X4gC5Fcpejy4Lm2axKZgtzbjY=
Subject key identifier: 1F:4C:48:8B:2F:96:59:E1:E5:41:0A:9D:8F:CB:E8:C7:20:66:41:9D
Authority key identifier: 48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
Certificate issuer: /CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Certificate serial: 0198D77353DC5604DA657B08971E55C47410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
Manifest number: 0C8E
Signing time: Sat 23 Aug 2025 15:01:56 +0000
Manifest this update: Sat 23 Aug 2025 15:01:56 +0000
Manifest next update: Sun 24 Aug 2025 15:01:56 +0000
Files and hashes: 1: SBaZwQuP-LkauQlAMU7pOyev3NY.crl (hash: ASwuspzBglHNOZzMG03IHGgoM98D7xvXHwm6y6YZZ78=)
2: gREff1tF-BFgfiQMOqwC-JywERY.roa (hash: s5MFDeOQrL+EZevqGRhg/WJb2VH0jOYXkHrjmynZzxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:53:dc:56:04:da:65:7b:08:97:1e:55:c4:74:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Validity
Not Before: Aug 23 15:01:56 2025 GMT
Not After : Aug 24 15:01:56 2025 GMT
Subject: CN=1f4c488b2f9659e1e5410a9d8fcbe8c72066419d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:28:99:92:05:b4:a4:66:99:0b:40:c5:b0:5f:
2f:7a:e1:4d:56:7e:cb:5d:ea:ac:bc:61:da:f2:6c:
0f:78:09:1c:27:38:78:8c:84:59:6a:da:17:e4:dd:
f6:30:47:bf:23:1b:4b:72:7a:d0:8b:13:15:a0:f8:
92:45:f2:5b:3e:2f:82:82:4f:67:c2:4a:17:c9:fb:
b8:a4:d0:3b:ff:92:02:8d:2c:08:56:cf:15:38:92:
fb:40:e3:7a:e0:18:42:b4:e4:80:94:99:de:73:61:
0e:79:54:12:85:6b:a1:18:f6:7c:47:10:85:56:1d:
1c:92:e4:2c:f0:4f:77:ca:f2:ad:3a:f0:d7:a8:58:
8b:ed:d9:25:64:42:df:2c:ab:1a:ac:d1:10:38:de:
a0:33:f1:19:0a:5a:a4:ad:33:62:a4:df:04:2b:73:
80:b5:01:8f:2f:28:11:c5:1a:cd:4c:a6:43:40:3a:
d5:c8:b5:9b:6a:22:35:43:3b:01:d8:c7:0a:75:cf:
06:1c:81:c3:30:29:04:91:d8:00:5f:dc:2e:75:32:
82:d1:49:3f:0a:bb:81:3c:21:52:63:ea:50:cc:2c:
45:13:4f:45:38:6b:5d:15:e2:cf:9a:b5:63:57:92:
1e:85:38:5b:5e:2c:e0:10:48:be:ab:86:16:fc:99:
26:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4C:48:8B:2F:96:59:E1:E5:41:0A:9D:8F:CB:E8:C7:20:66:41:9D
X509v3 Authority Key Identifier:
keyid:48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e8:b2:ad:80:dc:e2:49:3d:cd:e5:05:dc:a3:df:f1:28:d0:
ea:c2:99:02:33:0f:38:ea:4d:2e:21:1f:08:21:57:84:df:fd:
02:37:1f:49:ce:55:55:0d:7f:11:1a:81:cb:b4:0d:44:32:2d:
8c:cf:d4:3c:f3:80:f7:18:5f:cc:fd:9d:ad:7a:3d:00:cf:14:
12:4f:8e:f2:91:53:d9:45:f0:cb:33:cd:c3:09:a2:2c:53:13:
85:91:05:e6:35:e3:65:b3:9f:f8:99:8e:4c:3d:ad:da:50:68:
2c:11:db:66:30:5b:59:d2:31:ad:03:0c:0c:2f:af:4e:ad:80:
e2:52:6f:36:af:4b:dc:b8:5f:ba:d4:76:2b:aa:3e:d9:0a:ec:
35:0c:98:a6:1c:fa:28:2e:52:7a:50:e8:d9:d7:75:5f:df:b3:
a2:4c:95:24:90:2f:bc:26:5e:d6:ae:de:2a:f5:1d:90:ea:ee:
de:9f:e9:9c:05:23:1e:10:8c:1a:df:39:96:cf:a7:9a:90:88:
34:83:12:33:5d:35:28:b9:6a:62:89:a6:9e:e6:46:ee:2b:7c:
11:51:d4:cb:c3:9d:08:67:a4:c5:d6:c2:94:32:b7:96:95:3b:
58:15:59:64:35:98:ea:4b:66:d8:8e:1e:a2:42:3b:14:00:86:
ac:db:9d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:50:49 2025 by rpki-client