Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
File: SVbzCE2TEO-hvAfvMfk0spQfED4.mft (raw, json)
Hash identifier: qq+Jg3k3g7jucybu56FOtZIfqQmgr6EiYhwNwmAGQ3E=
Subject key identifier: 83:10:FD:95:24:E2:6C:DD:BB:14:EC:A6:12:78:A1:D3:7A:5D:E9:EC
Authority key identifier: 49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
Certificate issuer: /CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Certificate serial: 0198D65FE04B1FEC729942EBFA48847BC0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:03 +0000
Manifest this update: Sat 23 Aug 2025 10:01:03 +0000
Manifest next update: Sun 24 Aug 2025 10:01:03 +0000
Files and hashes: 1: QocjuYoGfozpr0QiTXkGPfsUrcg.roa (hash: Y8oC4kwoV9mXXZSXGd1lAHQDlPdz5kxQi4KnTi7EYOM=)
2: SVbzCE2TEO-hvAfvMfk0spQfED4.crl (hash: mKfzw1BsGOZ5VmjMNnk1gdxYsBP2FmBcAd0ZyxYcqq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:e0:4b:1f:ec:72:99:42:eb:fa:48:84:7b:c0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Validity
Not Before: Aug 23 10:01:03 2025 GMT
Not After : Aug 24 10:01:03 2025 GMT
Subject: CN=8310fd9524e26cddbb14eca61278a1d37a5de9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:06:6d:08:0a:00:fa:5b:9a:58:51:71:19:
5c:07:13:61:94:6a:b3:82:83:c0:e8:c8:4d:1c:81:
41:50:9f:e1:60:30:f5:e7:ba:31:53:95:ec:77:63:
39:18:b3:02:e4:40:72:53:6a:54:fa:41:30:8b:0b:
0d:73:18:cc:00:8f:fa:72:cb:50:dc:56:de:2f:62:
37:78:06:cd:36:23:51:ba:bd:28:a3:34:81:9c:05:
89:ef:f6:10:d0:e8:2b:a4:5d:78:bb:a3:41:63:c8:
ca:e4:70:68:1a:ff:74:b4:14:95:1e:5f:4e:bd:f6:
f5:ca:62:99:49:18:b3:34:1a:c4:23:4d:8e:4a:ec:
38:d0:da:4a:7c:f2:7c:22:d6:f0:95:53:1d:2c:91:
46:ad:54:a9:c4:56:71:14:74:a9:98:ac:e8:74:50:
20:38:18:9a:36:52:7d:0b:d4:7b:dd:d8:32:2c:27:
4a:be:03:c2:88:80:36:29:b0:9b:68:fe:7c:75:f7:
0f:b6:f4:a2:7d:f3:dc:7c:77:32:04:fb:f6:77:ff:
c0:96:ec:6f:4b:f5:7c:ec:46:ce:29:7c:87:34:cf:
ea:b8:1b:3a:b3:c9:66:f4:be:3f:1a:b5:7d:dd:fc:
3a:34:d6:e2:a7:1e:19:f0:d1:3f:8e:5f:c5:56:fb:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:10:FD:95:24:E2:6C:DD:BB:14:EC:A6:12:78:A1:D3:7A:5D:E9:EC
X509v3 Authority Key Identifier:
keyid:49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c1:3b:be:d7:68:3d:de:f8:60:b9:52:b7:4f:47:5c:e4:cf:
2c:70:16:e3:2c:c5:bc:69:9f:16:5b:07:94:30:0e:d2:e7:11:
af:4f:b1:24:ff:21:9d:50:9c:be:8d:59:0c:8a:20:f3:3f:be:
cd:1e:f4:b5:0b:d8:e5:a7:58:af:a1:e3:bb:a7:ec:0a:dc:ac:
9d:c4:0b:aa:7b:1b:ec:d8:3e:77:f1:ff:01:a1:c4:0d:9c:5e:
d6:1c:12:8c:98:a9:8c:6f:f0:53:f0:d7:17:14:a7:ff:bc:7b:
be:6d:9b:c0:16:4e:5f:c5:55:ce:d9:36:b5:3f:93:ca:4c:da:
1b:e6:a0:99:70:e1:14:00:98:49:7a:39:28:46:dc:7b:5b:e8:
04:9f:fc:9c:48:2d:9b:e1:14:8e:af:56:0a:38:48:2b:44:16:
69:20:e0:4b:32:6b:d0:7e:bc:3c:ca:33:db:0f:9d:8f:bf:3c:
a6:08:8e:6f:cd:59:aa:e3:b0:df:f9:5f:f1:c5:7f:e8:b2:92:
ea:c2:4f:c7:70:eb:09:b6:f2:70:2b:5f:89:4f:7c:f6:3f:a6:
aa:89:51:ae:ce:07:df:32:ab:8a:aa:24:54:fc:b6:cc:1f:57:
99:fd:54:67:bc:4a:ea:4b:d6:b6:b5:ce:64:05:ae:b4:28:06:
ac:66:f3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:48 2025 by rpki-client