Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier: slumbhpZ5b0tPO8FvtSFUqMnPl5/uJB7jglJW21DG28=
Subject key identifier: B0:D3:33:C7:C8:FE:09:6C:7E:1A:74:1C:B2:B5:8B:2D:E8:7E:3B:3E
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 0199FD348A1A78555250D668DC479E9A0E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number: 0BEA
Signing time: Sun 19 Oct 2025 16:01:42 +0000
Manifest this update: Sun 19 Oct 2025 16:01:42 +0000
Manifest next update: Mon 20 Oct 2025 16:01:42 +0000
Files and hashes: 1: 7y3mGX9ZUocL1OILQHSxmA8VkvM.roa (hash: 7a9Oiy3txQlGgm+QjKoKXHZkPBhpeO84dBEOXh2SIfc=)
2: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: asVfSJpkbOOjFtLNUEpLmdh/ltBnwEJQk/uA2F2IgPs=)
3: oU4Cohsb9kWDicLsugicyZN6s7k.roa (hash: YXEAgbcCjB/PmDtI8uql79S0hq5pcPIEdu0GZCtli20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8a:1a:78:55:52:50:d6:68:dc:47:9e:9a:0e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: Oct 19 16:01:42 2025 GMT
Not After : Oct 20 16:01:42 2025 GMT
Subject: CN=b0d333c7c8fe096c7e1a741cb2b58b2de87e3b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:05:6a:56:9f:3f:a7:82:86:a9:58:22:6a:
f4:22:ef:a9:d6:38:ce:48:f5:d0:d8:c4:e4:68:14:
fd:20:2c:06:40:39:0e:56:4e:85:f7:90:97:b1:4a:
65:d3:64:64:41:cd:b4:cc:bc:87:38:c1:d8:ba:f4:
bf:0f:8e:81:eb:bc:35:24:e4:8a:96:68:ae:40:db:
5c:6f:c5:70:aa:a2:56:ca:20:2f:f9:05:76:fd:62:
1d:05:8b:cd:ee:72:c5:5f:67:34:52:a0:38:d1:c7:
a8:7b:3a:5f:25:b8:98:0a:ff:79:17:45:ad:cc:e1:
6d:21:f6:20:24:68:02:c5:82:5d:87:e8:be:1d:28:
f2:fc:86:c1:99:87:f4:33:6d:79:62:fa:7d:8f:6c:
da:a3:74:dd:8e:26:d4:97:14:09:5c:a9:4d:a6:ea:
d3:f6:8f:64:4e:92:6c:22:08:90:18:3a:fc:b7:a1:
b1:d4:ad:58:4a:7d:5f:9e:11:68:5b:c9:27:87:bf:
12:91:39:68:c3:da:36:c1:d5:cf:9b:94:ae:ce:f3:
be:0c:55:8b:f4:c4:e2:3d:18:45:0a:ae:7d:b0:5a:
c0:be:42:f1:f9:9e:c9:89:19:15:a7:f0:92:ff:2f:
77:8b:e9:c3:20:ec:f9:30:31:cd:b4:7f:e1:0d:da:
c9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D3:33:C7:C8:FE:09:6C:7E:1A:74:1C:B2:B5:8B:2D:E8:7E:3B:3E
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a5:dd:d7:79:d3:f0:99:5c:8c:4d:33:af:02:8f:90:4f:f6:
0a:a2:eb:5d:b5:a7:d2:52:46:28:40:50:fd:ad:bf:63:1e:6a:
71:3f:ae:a0:6a:00:67:3a:d2:3c:33:83:15:b3:71:ba:25:ad:
cf:cc:b1:21:f3:99:04:ee:a3:07:f7:27:37:f4:5c:99:0c:e1:
ba:cf:d2:39:8f:c2:8b:19:b3:4d:40:40:94:17:91:3e:83:b9:
fa:e0:10:ff:7c:26:c7:8f:45:ec:99:f0:d5:cc:47:6b:02:0e:
28:73:51:03:17:a6:52:9c:41:f2:f9:e5:40:86:c6:61:67:77:
90:2b:05:07:93:38:87:06:bf:cf:14:69:67:b6:17:c5:c6:73:
0d:0d:3d:f9:1e:96:c0:95:73:9b:48:f9:21:bf:30:8c:1b:0e:
ac:ca:71:1f:bf:28:4a:08:05:20:5b:3b:0e:ed:18:52:d6:ed:
1b:a6:37:05:d4:52:a2:1c:d2:74:4e:be:b0:74:af:2a:49:fa:
ea:c4:94:3f:7e:60:92:1e:d8:63:3c:16:e3:c7:cc:f2:b8:cd:
0d:9a:42:0d:9d:c5:df:8c:1d:99:19:f1:f1:b4:b6:e7:11:84:
1e:65:09:b2:05:52:e2:27:2a:8f:7d:66:35:89:38:66:8d:81:
f5:4c:98:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:14:29 2025 by rpki-client